Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

2
votes
3answers
250 views

Windows server 2012 essentials GPO AD/SYSVOL MISMATCH

I am having an issue with Group policys and will do my best to describe the issue below: GPRESULT, ADSI and GPT.ini shows the group policy with mismatching AD/SYSVOL versions, the SYSVOL version ...
3
votes
3answers
93 views

Update a network driver through GPO/AD

Our organization has just deployed new computers with Windows 8.1. Roughly 50 of them. We've run into an issue with the driver on the new computers which is flooding the network with ipv6/multicast ...
2
votes
1answer
85 views

Migrate samba domain to Active directory

i have a Samba3 domain and i want to migrate to Active Directory (W2k8 or 2012 server). How can i achieve that? I read that ADMT tool can do that, but didn't find any feedback. I also read that we ...
0
votes
0answers
28 views

Run active directory logon script as an admin user [duplicate]

I have a logon (powershell)script for a certain non-admin user. The script retrieves some files from a server and places them in certain folders on the machine (and some other stuff as well). I don't ...
2
votes
1answer
90 views

Access an AD attribute in a first-time logon scenario?

I have been tasked with improving our current image deployment. Right now we do a fair amount of manual setup after imaging to reduce the work for users who get a newly imaged machine. I would like to ...
0
votes
2answers
155 views

Win 2012 AD, can't login with some users: there are currently no logon servers available to service the logon request

I have a Windows Server 2012 R2 with a fresh AD created, I have the admin user and test1. I added to the domain another Windows Server 2012 R2 machine and I can't log with the admin user, I get that ...
1
vote
0answers
91 views

SecErr: DSID-031A1190, 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to change the password of the currently logged in user via ldifde using this command: ldifde -i -f pwd.ldif -t 636 My AD server is running in SSL mode with a self signed certificate. The ...
1
vote
0answers
82 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
0
votes
0answers
9 views

What is happening/where is the error when multiple accounts have the same certificate mapped?

In our environment if multiple accounts (such as a basic user and an administrative account) have the same certificate mapped this causes access issues with our web applications. By removing one of ...
0
votes
2answers
75 views

Restore ActiveDirectory from System Image Backup after OS reinstall

One of my clients has a single-server Windows 2008 R2 setup which is serving as the Domain Controller. The server got in a situation where it would constantly boot into "Preparing to configure ...
1
vote
2answers
157 views

AD Read-Only Account (for Authentication)

I have experience with Linux server administration, however when it comes to Windows I'm pretty much a newbie. I have a lot third-parties applications that use an AD admin account to perform its ...
4
votes
4answers
158 views

Windows Password Sync without using Active Directory

I have a number of Windows servers running in AWS. As the number of servers grows, managing Windows logins across all the servers has become a headache. I need some sort of password synchronizer ...
2
votes
1answer
81 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
0
votes
1answer
71 views

cannot login to domain - kerberos issue?

We cannot login as domain admin on one server but can on others. When I looked at Active Directory, I can see that the computer object doesn't exist for the server we can't login to. There is, however ...
0
votes
1answer
30 views

Active Directory Trusted Sites

I have two business units that I need to setup an AD trust(win 2008) between the two different domains, however one of the sites has a DR solution in place (We replicate the DC's etc to an offsite ...
1
vote
0answers
60 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
4
votes
2answers
280 views

Should I be able to log into a locked out active directory account by disabling internet connectivity?

My active directory account just got locked out. On a whim I unplugged the ethernet cord and turned off the wifi radio switch and I was able to log into my account. I plugged the ethernet back in and ...
4
votes
2answers
147 views

Can I set up conditional forwarding for a parent DNS zone?

If my domain is ds.usepowershell.com, can I set up a conditional forwarder for usepowershell.com and not redirect my internal queries (since technically, ds.usepowershell.com is a subdomain of ...
0
votes
2answers
65 views

Setting up a LAN with load balanced internet

I have been looking and researching for the last week on this but haven't found anything conclusive which might apply to the situation that we are trying to solve. I have a small start-up which now ...
1
vote
2answers
46 views

Force domain password change in the future?

I want to force all my domain users to change their passwords, but I want it to happen on a specific day in the future. Is there a way I can automate that today, either using a GPO or PowerShell ...
1
vote
2answers
39 views

Importing Active Directory objects using LDIFDE or CSVDE

I'm going to make some changes on an Active Directory environment (mainly deletions), before doing so I'd like to make backup of few objects using LDIFDE or CSVDE. The distinguished names of these ...
5
votes
1answer
504 views

Powershell query lastlogondate (lastlogontimestamp) returning mostly blank values (not matching the ADSIedit value for corresponding user attribute)

I am running a very short script to simply print out all users and their last logon time: get-aduser -filter * -property * |ft name, lastlogondate I noticed only a small handful of users have a ...
3
votes
2answers
110 views

How Active Directory Dynamic DNS updates works behind the scenes?

I've looked through the AD documentation and I was not able to find any conclusive answer to this question. It's plain simple, but hard enough to be answered. How DDNS of AD works behind the scenes? ...
0
votes
0answers
25 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
-4
votes
1answer
42 views

Configure Active Directory on Windows 7 [closed]

I am to configuring Active Directory on Windows 7. I have followed this link and installed AD LDS. But i am unable to create a new user in the active directory. Also, I am able to browse the ...
2
votes
2answers
62 views

Get OU management status from User object?

In a Windows Server 2008 R2 AD, is it possible to get a list of OUs managed by a User from the User object or does one needs to parse the list of OUs? (ie, is there representation on the User object ...
1
vote
1answer
43 views

LDAP connections favoring 1 DC over the other in same site

Observing spikes in "AD Search Subops" counter and "PROC LSASS%" counter daily on DC A relative to DC B; its not in maintainence windows; its at start of business hrs daily. -> Eliminated the point ...
1
vote
1answer
169 views

Correct way to change domain name in Active Directory

I'm trying to fix an existing AD infrastructure that was implemented using the external domain name as root domain name in the Active Directory. So it's running on "contoso.com". I want to put the ...
1
vote
2answers
64 views

Samba share with AD authentication is only authenticating users on some windows machines

I've searched high and low for help with this. What I've found is that most have given up. I have found that I can mount the samba share from a few different windows hosts with different users. ...
0
votes
0answers
26 views

Server 2012 SysPrepped Image Prompts to Approve Eula after Domain Join

I am trying to upgrade our base web server image from Server 2008 R2 to Server 2012. Our cloud vendor allows us to SysPrep an IAAS instance, image it and then restore it. I have this part all ...
14
votes
4answers
762 views

Common wisdom about Active Directory authentication for Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for Linux servers and modern Windows Server operating systems (CentOS/RHEL-focused)? Over the years since my first ...
0
votes
3answers
175 views

Migrating SBS AD to an Server 2012 AD with diffrent domains

The situation, I have a SBS 2008 server which also is the DC for the domain. The name of the domain is Example: DomainA. The other server is a W2012 server, which will be replacing the SBS server. The ...
2
votes
1answer
51 views

Auditing anonymous binds to AD LDAP

We're about to commence an AD upgrade to 2012 R2, and I have just found to my horror that anonymous LDAP binds have been enabled in the 2003 domain. We've certainly been issuing accounts for LDAP ...
0
votes
1answer
317 views

Samba server authenticating against Active Directory. Is it possible to reboot and still connect to the domain?

I have tried to setup Samba File Server with AD authentication. The authentication via Active Directory is successful but if you reboot the server the linux Samba file server will NOT join the domain ...
2
votes
0answers
2k views

Windows 7 there are no logon servers available to service the logon request subdomain

I've read other solutions, but my problem is slighlty different. Problem occurs in domain environment. We work in a subdomain, but we also have some employees coming with notebooks registered in top ...
0
votes
1answer
179 views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
0
votes
1answer
35 views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
0
votes
2answers
125 views

SID's role in joining domains and AD authentication?

Thanks to recent answers to my questions, I was able to use sysprep to create a Windows 7 system image ready for deployment in our organisation. I learned that the process of using sysprep creates a ...
1
vote
1answer
96 views

Backup Active Directory users' files, deploy via GPO? [closed]

Am looking for a solution which can be configured to be deployed via group policies. I've looked into Windows Backup, but it doesn't fulfill our requirements. We need something like this: Runs ...
0
votes
1answer
75 views

Exchange Server 2013 has dependency on old PDC

I am in the process of completely upgrading a Exchange 2007 system running on server 2008 R2 Hyper-V VMs hosted on a Exchange 2008 R2 domain controller. It had all the FSMO roles on it, and it was the ...
4
votes
6answers
345 views

Powershell assistance for Active Directory Cleanup

I just started a contract to clean up an Active Directory system for a large company. I was told it would be quite the busy work but after reviewing the system and seeing how disorganized and messy it ...
2
votes
0answers
20 views

Domain Controller's DNS NIC configuration [duplicate]

I've seen conflicting information on this online, but say you have an environment with two domain controllers: one Forest, one Site, one Domain; simple as it gets. How should each domain controller's ...
1
vote
0answers
23 views

Group Policy Mapping Printer

There seems to be lots of different ways to map printers, all appear not to work (for me). Im running a Windows 2008 Environment with windows 7 clients, simple, hey? No.. I have a printer connected ...
0
votes
1answer
56 views

Can't access Active Directory Web Services via PowerShell

I have set up a test lab consisting of two 2012 R2 servers. One is a domain controller (srv1), the other a member server (srv2). When looking at 'netstat -ano | findstr 9389' i can see a service is ...
1
vote
1answer
90 views

Windows Server 2008R2 Domain Controllers - Failed test VerifyReferences

While running DCDIAG on our Windows Server 2008R2 Enterprise Domain Controllers, I discovered the following error message on both DCs. These domain controllers where migrated from a Windows server ...
0
votes
2answers
137 views

Active Directory: pfSense failing?

I have set up PfSense as a router and I have linked two Windows Servers to it. I can ping from SERVER01 to SERVER02 and PfSense can also ping to them. The problem is, on SERVER01 I have set up the ...
2
votes
1answer
47 views

Web server with access to internet and internet Active Directory [closed]

This might sound like a stupid and unsecure question, but we're front-end web delopers and don't know that much about these things. So here goes.. We're creating a web app where we want to log in ...
1
vote
1answer
129 views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
0
votes
0answers
41 views

“The property value is invalid” when trying to create mail user

In advance of a brand new Exchange 2013 deployment to replace a third-party e-mail system, I have a lab network with a clone of our AD environment so I can test various scenarios. In this testing, ...
4
votes
1answer
145 views

Third Party Wildcard Certificate on DCs for LDAPS

I am trying to provide Authentication as a Service to my customers. LDAP authentication is perfect for this however I am not a fan of clear text sessions.... enter LDAPS. Active Directory of course ...