A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
36 views

Removal of a non existent exchange server

I have come into the position of administering a network where there was once an exchange server, and that server is no more. The company has migrated to office 365 cloud based, and there has been no ...
1
vote
1answer
100 views

Issue with GPOs for home folder creation and drive maps

I am following a guide I've seen recommended on here for setting up home folders and drive maps for users and I am running into an issue despite the fact that I set it up exactly as illustrated here: ...
6
votes
2answers
561 views

Active Directory + Google Authenticator - AD FS, or how?

(Edited to match the understanding of the answer-writers -- New, fresh, clean question posted here: Active Directory + Google Authenticator - Native support in Windows Server?) Research Done So Far ...
0
votes
0answers
12 views

Set up trust on the external forest from the external forest

At one point in the document linked below it says "Set up trust on the external forest from the external forest" Inbound ports :N/A Outbound ports :LDAP (389 UDP and TCP)Microsoft SMB (445 ...
0
votes
0answers
36 views

Syncronise only one container between Active Directory

I have a Microsoft Exchange server off-site and a file server on-site (with their own separate AD environment). I want to synchronise AD so that new users and password changes are reflected on both ...
3
votes
1answer
40 views

How to automate RFC2307 attributes in Active Directory?

How do you automate the population and management of RFC2307 attributes in Active Directory in a scalable and reliable manner now that SFU and IdMU is considered deprecated by Microsoft and won't be ...
0
votes
0answers
43 views

SSO, Kerberos, multiple domains, multiple Linux servers

I have successfully implemented SSO for one production application running on Centos 6 + apache 2.2. connecting to Windows 2008 AD server. Users are coming from 2 different domains: a.com and b.net, ...
1
vote
1answer
66 views

Limited Permissions to a domain user on AD Server

How to assign permissions to a domanin user such that he can only change active directry users password & he can be able to join or remove Client computers to the domain. He should have admin ...
0
votes
1answer
92 views

Fine grained password policy with msDS-MaximumPasswordAge set to 2 days asks for reset immediately

A fine grained password policy with msDS-MaximumPasswordAge set to 2 days asks for reset immediately on Server 2008R2. After I apply the policy, in the next automatic gpupdate, the machine starts ...
-4
votes
1answer
57 views

How to create an Internet facing Domain Controller Without VPN

I am extremely new to this. I am trying to create a domain controller that could be contacted via Internet. In clear words, I am trying to create a Windows Server 2012 R2 domain controller with ...
-1
votes
1answer
54 views

Clients looking for GPO login script on my personal computer instead of doing it on the DC?

This is kinda weird. I have the Group Policy Management console installed on my Windows 7 workstation and I configure policies from there. Sometimes I do it directly on a domain controller, but most ...
1
vote
1answer
39 views

Is this LDAP filter valid syntax?

I'm configuring AD authentication for a product that wants to query AD for groups. This query is finding nothing and the vendor has provided this ...
2
votes
1answer
39 views

Assign to ASP.NET identity to AD group for accessing remote SQL Server

I have an ASP.NET 4.0 (IIS 7.5) application running on a server(Window Server 2008 R2 Standard), named WEBSERV, and a SQL Server (2008) database on another server, named DATASERV. The SQL Server has a ...
0
votes
0answers
37 views

Windows XP Network Drive Error 1351

my scenario: 20 Windows (XP/7) Clients one XP file server two Linux (Suse 9,10) Samba File servers new Samba Domain Controller (Zentyal) So, the Client PCs all were in a workgroup "blabla", where ...
3
votes
1answer
47 views

Create domain policy to assign user rights

I’m a Unix administrator who also has to work with various MS Windows servers. For various tasks, I’m a lot more productive using the Unix tools that I’m familiar with and for a long time, I’ve been ...
1
vote
1answer
37 views

what are the implications of running a FQDN as internal AD domain and point A-record for website to different host?

The MSP for a law firm office that has just joined our company is using a FQDN as an internal AD Domain and has been doing so for sometime apparently. They have this issue in that they have a website ...
3
votes
0answers
38 views

Kerberos keytab file not working

I have two AD domains and I'm trying to use NFS with Kerberos to both of them. Part of the procedure requires creating keytab files for the host and nfs principals for the client and server ...
3
votes
4answers
135 views

Load balancing LDAP from a Domain Controller via F5

I know that load balancing or fail over of LDAP on a Windows domain controller is generally not a good idea due to the Kerberos and SPN issues. BUT, I have lots of non-windows applications that use ...
0
votes
2answers
65 views

Domain Administrator does not have permission to remove a folder

I am a Windows domain administrator, and on my Windows 7 machine I have a folder that is owned by another domain user. When I right click and attempt to delete, it tells me that I don't have ...
0
votes
0answers
22 views

Internal user cant reset external user password

I have 2 separate forest with one trusting the other one way only, lets call them External and Internal. Users in the internal forest can authenticate in the external but not the other way around So ...
0
votes
1answer
69 views

LDAP: Fetch users under a OU using ad explorer

I'm using adexplorer to query an LDAP directory. I would like to fetch all users that have a certain OU in their DN. So I tried: The results returns an OU, even though I picked class:user. How do I ...
0
votes
0answers
14 views

Create TAPI AD partition - missing TapiCfg.exe on Server 2012 R2

I think I need to create a TAPI application partition in our AD for it seems that "Unify HiPath TAPI 170" does not work correctly without it. To accomplish this on Server 2003 I would use the tool ...
1
vote
2answers
84 views

Any Tips when Raising the Functional Level of a 2003 Domain

I will be doing my first DFL rising this evening (from 2003 to 2008 R2). Is there anything worth noting that I should look out for? Any risks involved? Or server reboots? I've done a system state ...
-3
votes
2answers
40 views

Unattended DCPromo creating new domain fails as user is not domain admin [closed]

I have installed Windows Server 2003 and am trying to make it a DC on a new domain. It works ok if I use the wizard, but when I try to use an answer file, it says 'An AD domain controller for the ...
0
votes
0answers
53 views

The account “Everyone” could not be mapped to a SID

I have a script that enables sharing on a folder an sets the sharing permissions. The script works fine with one exception which is the most important one if you wanna generate a HomeUse-Directory. I ...
-2
votes
1answer
46 views

How to change primary group on Windows without ActiveDirectory?

I have a Windows Server 2012 R2 using WorkGroup only (no Active Directory) with some local users and groups. Is that possible to change the primary group of some local users? I couldn't find a ...
1
vote
1answer
76 views

Unable to enable LDAP authentication on GPFS / Spectrum Scale file system

I have setup a GPFS / Spectrum Scale cluster on 2 RHEL7 nodes. On that cluster I have created a filesystem. I want to enable LDAP based authentication with kerberos so that I can NFSv4 ACLs to ...
0
votes
0answers
54 views

SSH login using Active Directory credentials

I am having trouble logging into a Linux system via SSH using my Active Directory credentials. the system is bound to AD, and all of the required packages are installed and configured, but I cannot ...
0
votes
1answer
42 views

Secondary DNS causing problems after AD is shut off

I have two Hyper-V Servers running on a Physical Server namely WideOff-SRV-01 (IP Address 192.168.1.5). The virtual machines are WideOff-AD-01 (192.168.1.9, which is Domain Controller), and ...
0
votes
1answer
47 views

How to restrict user access via SSSD AD provider?

I'm trying to configure a Redhat 6.x server for Authorization and Authentication to Active Directory (AD) via SSSD- after joining the server I'm able to login with any valid domain credentials. How ...
0
votes
1answer
26 views

AD FS Setting up - what user rights required?

I am reading this. Is this the latest? May I know what rights is required to set up and configure the Federation Server? Is the Federation Server usually the responsibility of the domain owner? If ...
3
votes
2answers
225 views

Access Denied while attempting to join AD domain using Centos 7

I've tried for days to get these instructions to work, but despite everything, I cannot join my domain. When I execute realm discover, I am able to see my domain just fine: [root@centos5 ~]# realm ...
0
votes
0answers
29 views

Setting up Active Directory, Adding Machines with Different OSes & adding a server with an instance of SQL

I have 2 servers to manage at work, a Dell Poweredge with has a software called "Abecas" which uses SQL Server, The Poweredge is running Win Server 2008, there is no AD in place as of yet. I have ...
-1
votes
2answers
40 views

Merge 2 PowerShell commands to 1

I have a powershell commands to list all AD computers last logon date Get-ADComputer -Filter {enabled -eq $true} -properties * | select Name, LastLogonDate | Sort LastLogondate -Descending | ...
-1
votes
1answer
27 views

DNS Infrastructure - Delay

We have a branch office in another counter, which is connected with a site-to-site VPN to our main office. The branch office does not have a local domain controller / DNS server, never the less the ...
2
votes
1answer
33 views

What are some issues with setting up a new AD Forest with a DNS name under an existing AD Forest?

Active Directory Forest A exists as domain.net, with child domains of nam.domain.net, eur.domain.net etc. Forest B needs to be raised. What issues could arise from setting this up as msg.domain.net? ...
1
vote
1answer
41 views

Exchange 2013 RegEx transport rule

I am looking to create some transport rules for outgoing email based upon AD properties. eg. Phone: 123-456-7890 Where the actual inserted code looks like "Phone: %%PhoneNumber%%", retrieving the ...
0
votes
0answers
25 views

Active Directory - Migrate objects to a different FQDN

I have two active directories. The first with the domain name 'abc.com', and the second with the domain name 'xyz.com'. Right now I need to migrate first as a subdomain of the second, so that the ...
0
votes
1answer
24 views

Exchange 2010 Event ID 2159 showing up multiple times each day

I am getting a lot of Event ID 2159 warnings on my Exchange 2010 server. When I navigate to the specified location in ADSI Edit, I don't see anything strange. The path is: CN=Interop ...
0
votes
2answers
48 views

Domain Controller Replication, do logs replicate?

Im seeing some oddities relating to either authentication events or the logs themselves. My question is do the authentication events or the logs replicate across domain controllers? Im seeing the ...
1
vote
2answers
43 views

What permssion is needed to read AD attributes?

I have created some custom attributes for users inside of Active Directory and have also created a basic account to use to login to AD so it can read these attributes, as well as the standard ones in ...
5
votes
2answers
80 views

Minimal set of rights to run a process on a Microsoft Windows Server

I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so. The minimal set of rights is required, ...
2
votes
1answer
91 views

Integrating squid with active directory

I am trying to integrate squid as a web proxy for my users in active directory. I have followed the tutorial in the squid site in here. When i run the command : msktutil -c -b "CN=Administrator" -s ...
0
votes
2answers
98 views

What are the uses for pre-staging a Computer account in Active Directory?

I am learning AD at the moment. At my DC under "Active Directory Users and Computers" -> can anyone tell me what the use of creating a new computer ? I have created user accounts and is able to login ...
0
votes
0answers
7 views

IIS Windows authentcation Unathorized due to directory permissions

I have an ASP.NET MVC 5 application running on IIS 8.0. Application pool is running under domain user, f.i. IISPoolUser. Anonymous authentication uses this identity as well. I gave full control ...
-1
votes
1answer
23 views

Windows 8.1 - Group Policy Settings set, but not executet when offline

Enviremental information: Windows Domain with 3 2012 R2 Domain Controlers. I am trying to build a Windows 8.1 in kiosk mode, only a browser with access to specific websites. With the help of GPO - ...
0
votes
0answers
72 views

Cross Domain NTLM / Kerberos Auth with Chrome on Mac OS X / Linux

I'm trying to configure Chrome on my MacBook Pro to use kerberos to authenticate to web sites so I don't get prompted to enter my username and password constantly. I've added the AuthServerWhitelist ...
0
votes
0answers
30 views

openldap ppolicy users login Access denied

I'm having trouble logging in User created after following steps from Youtube link https://www.youtube.com/watch?v=_ZvnNVwWk-M&list=PLrUFyg1unBb8n0SJxJqQYMo9kRcY2Mly0&index=7 This video ...
3
votes
1answer
64 views

Re-join same computer to Windows domain without domain admin privileges

Is it possible to have a previously domain connected client computer re-join a Windows domain after a clean re-install of the OS, to assume again it's old identity, all without the explicit say-so of ...
0
votes
2answers
54 views

Safe guarding against a duplicated test AD environment if it connects back to production

This article explains what a simple process it is to duplicate your AD setup to a test machine in an isolated network. The obvious issue is that if the isolated forest gets physically connected to ...