A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
85 views

How can I Deny permissions to logon to Remote Desktop Session Host server in powershell script?

I am need of some assistance please. I am a system admin and I am trying to create a script that will assist with the tedious tasks I have to do with disabling a user that no longer works for the ...
0
votes
1answer
50 views

Exchange Server 2013 EXPR Section missing from autodiscover

We have a client who is having an issue with their autodiscover. They have an Exchange Server 2013 with CU1. After attempting to run an update on the server (Win 2k8R2) I needed to revert the ...
1
vote
0answers
25 views

DNS query from active directory is reaching reaching firewall in the same subnet

DNS query for root dns from active directory is reaching firewall which is in the same subnet. Default route for this active directory is L3 router which has no route to firewall unless traffic is ...
2
votes
4answers
124 views

How to get Microsoft license authentication for all machines on a network?

We have a small network (~150 desktops, ~20 servers) much of which is Linux. MS keeps wanting to audit our MS products every 3 years or so. I really don't have time to go around to 80-90 desktops and ...
0
votes
1answer
28 views

Why must a previous computer name be removed from directory before the workstation can join with new name?

Sorry if the question is convoluted and it's difficult to search in case it's a duplicate question. I don't have keys to the castle, so as a low level tech I was wondering why I was unable to leave ...
0
votes
2answers
55 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
2
votes
2answers
87 views

Importing users to AD with CSV, cannot get some fields to work

Been trying to build a CSV file to import users into Active Directory. I can get everything to populate, except for E-mail, Password, and Enabling the user. Just using this cmdlet in Powershell. ...
0
votes
1answer
230 views

WS 2012 r2 DNS server issue: Access was denied

I have a Windows Server 2012 r2 virtual machine as DC1 and DNS server running on Windows Azure and a Windows Server 2012 r2 local machine as DC2, DHCP and DNS server on-premise. I found my DNS server ...
0
votes
0answers
14 views

How to authenticate RHEL 6.6 to Windows Server 2012 Active Directory and LDAP? [duplicate]

Need help with setting up LDAP on Windows Server 2012 R2, I have AD setup already, but not sure what all I need to do to get LDAP running. Then I can't find any good resources online to authenticate ...
0
votes
2answers
98 views

Active Directory: Track old password changes and expiry dates?

Is there anyway to find out when the last 2 passwords changes were made for an account? I reset a account password but I want to know if it already changed hours or minutes before I reset. OR maybe ...
4
votes
2answers
575 views

How to check who reset the password for a particular user in active directory on a windows server?

I have the details about a user account when it was last modified (a password reset was done). But I would be interested to know who reset the password for this user. Is there any way I can find this ...
3
votes
1answer
51 views

Centralizing Remote AD DCs?

Background: I'm one of two IT people managing five libraries (all part of the same library system), and each library has been set up with their own AD DC. I'd like to centralize this. I'm assuming I ...
0
votes
1answer
61 views

Group Managed Service Account (gMSA): get authorized hosts / install-adserviceaccount unknown error

After having successfully created a Group Managed Service Account (gMSA) using the command below: add-adserviceaccount -name gmsaAccount -PrincipalsAllowedToDelegateToAccount gmsaGroup -DNSHostName ...
6
votes
1answer
60 views

Any danger in copying latest ADMX (& lang files) into AD Central Store?

Is there any danger in copying the newest set of ADMX templates into my AD Central store (overwriting the old ones)? I've already upgraded my schema and copied one ADMX file in to add the new Windows ...
0
votes
0answers
53 views

What is the authentication flow when Exchange 2013 proxies to Exchange 2010?

Issue Outlook users, who are on LAN, and have an email address that is different from the UPN get prompted for authentication. Topology 1,000 clients connect to a central DAG & CAS array on ...
0
votes
1answer
98 views

ADFS without domain

Is it possible to run a ADFS 2.0 without connecting the server to a domain? We are using Shibboleth as claims provider, so we actually don't need active directory here. We manage to setup the ADFS ...
0
votes
0answers
32 views

WES09 Client not registering with dns suffix

I have HP thin clients, some running Windows Embedded Standard 2009, and some running WES 7. They are all getting DHCP addresses from our Server 2012 R2 DHCP server, with AD integrated DNS. With both ...
0
votes
0answers
47 views

Unable to view trusted domains in ADUC

My domain is Server 2003 (domainA) and the remote domain is Server 2008R2 (domain functional level) (domainB). At some point in the recent past, I lost the ability to view domainB (ADUC -> open a ...
1
vote
0answers
63 views

DNS Server gone and now I get Zone Not Loaded by DNS Server

We have several domains in our infrastructure, separated by differing subnets (obviously). From our primary domain (call it domain A), we have a DNS forward lookup zone to domain B (which consists of ...
0
votes
0answers
57 views

Trying to add group to the security tab of an extended right

. The only problem is that the rights are not propagating to the extended attribute, even in the advanced tab :(. If I go in to adsi and check the security tab of the extended right it shows ...
0
votes
0answers
32 views

AD Migration and SharePoint configuration

i have a SharePoint 2010 and o365 (AD Synchronized) account. And some guys are working on the migration process from 2010 to o365. At the same time, I'm migrating users to the new domain but all ...
4
votes
1answer
156 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
1
vote
0answers
89 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
0
votes
3answers
95 views

Mess of a system : Where to start? [closed]

I just started a role as the sole "IT guy" in a company of over a hundred people. This is a company that has had a troubled history with IT, managing to go through 6 people in as many years. During ...
0
votes
0answers
44 views

Active Directory Schema Upgrade not enough to add new policy items

I recently upgraded my AD Schema to 69 in the hopes that I would get the Policies / Admin Templated / Windows Components / Windows Update / "Always automatically restart at the scheduled time" for my ...
1
vote
1answer
68 views

Moving Azure Virtual Machine which is Domain Controller to another region

I want to move an existing Virtualized Domain Controller from North Central Azure Region to East Region. I am aware about how to move VHDs and basically migrate it to another region. Though my ...
3
votes
1answer
105 views

Add security rights to an extended rights guid

Any help would be greatly appreciated! Please ask if you don't understand something. I am trying to explain it as best as I can. The value I am trying to edit is ...
-1
votes
2answers
101 views

Best practices for secondary DNS in case of a single Active Directory

I have a setup with only one Active Directory (not redundant). What should be configured on the client pc's to ensure the best DNS resolution ? Currently somebody configured the IP address of the AD ...
1
vote
1answer
30 views

SSO while still allowing offline use?

I am thinking of implementing Single Sign-On for a whole company. PROBLEM: Some employees of that company need to be able to work offline, without having to switch user/environment. Is there any ...
2
votes
1answer
53 views

Merging SIDs between Forests?

Currently, I have two forests, domain A and domain B with an external, two-way, non-transitive trust. Users in Domain A also have an account in Domain B (not all users in Domain B have an account in ...
4
votes
4answers
310 views

Which ports are required in order to authenticate against a ldap server in another domain which is behind a firewall?

I have a Linux domain running with sssd, let's call this domain NJ. I'd like machines on the NJ domain to be able to authenticate against an Active Directory ldap server which resides on a different ...
0
votes
0answers
35 views

Domain Guest Group with Azman delegation in Windows Server 2012

I am new to Microsoft Windows Server and Active Directory. I have created a user called viewer Then I configured deny the Network Access Permission no callback deny user permission to log on to ...
0
votes
1answer
43 views

Roaming Outlook Settings without using roaming profiles

Is there a way to roam my Outlook 2013 settings from workstation to workstation without using Active Directory roaming profiles? As you can see from my question I am no Exchange expert...
0
votes
0answers
125 views

Jenkins with subversion plugin using AD athentication

I'm configuring a Jenkins instance installed as a windows service. In order to download the source code, I would like to use the subversion plugin, but I'm getting an authentication error when I add ...
0
votes
1answer
273 views

Client not found in kerberos database while getting initial

I am installing Squid3 on Ubuntu 14.10 and I want to integrate it ADDS on windows server 2012 using kerberos 5. My infrastructure are as follows: Default Gateway: 192.168.1.1 DNS & Domain ...
0
votes
2answers
122 views

Linux-SSSD: always getting incorrect password when su'ing to domain users, but why?

I've built a new Linux environment at my work place. I've configured sssd and bound it to one of the Active Directory domains of the company. I can tell that the sssd is partially working, let me ...
0
votes
1answer
58 views

Active Directory Naming

I have a test active directory domain named ad.example.com and have joined some Windows clients stations to the AD domain. I'm able to log on the client station as AD\username. However, when I try to ...
-3
votes
1answer
37 views

Windows File Shares inside an Organisation [closed]

I came across to a security weakness that potentially can put information at risk in my organisation. Whenever I access other's computer in the network through the command: \\192.168.20.4\c$ I ...
1
vote
0answers
66 views

CentOS 7 doesn't recognize new Active Directory accounts/settings

I joined a CentOS 7 system to a Windows domain by syncing the time with the DC and running realm join --user=admin@mydomain.local mydomain.local. This allowed me to authenticate my login to the CentOS ...
4
votes
2answers
154 views

When do you need a new AD forest, and when do you need a new tree?

I'm new to AD and Windows Server, and this sounds like it should be pretty obvious, but I can't seem to figure out the distinction between a tree and a forest. According to the book I'm reading: ...
5
votes
3answers
371 views

Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?) [duplicate]

How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos? I know that ...
0
votes
1answer
32 views

New work server accessing active directory

My Department recently bought a small server running windows server 2008. But given its a business managed server IT refuses to provid e me with any support. At the moment I can only create loc al ...
0
votes
2answers
90 views

Why can I not use a duplicate DC computer name for a subdomain as a parent domain?

I am new to AD and Windows Server in general, but from what I've seen on youtube, companies can have something like this: www.example.com www.eng.example.com I figured this meant that there is a ...
0
votes
1answer
27 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
3
votes
1answer
38 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
2
votes
0answers
70 views

Fingerprint log on, domain wide

All the users in my company use laptops with fingerprint readers built in. I use this on my laptop but the fingerprint is only stored locally. Is there a way to make it domain wide using the AD ...
0
votes
1answer
50 views

Allow in-house application administrative rights within corporate AD domain

We have a couple of in-house developed application in the company and those application need to be able to use "C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe" in order to register ...
1
vote
0answers
53 views

Getting Group Policy identifier in PowerShell

Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. ...
1
vote
2answers
90 views

Duplicated domain admin user profile?

Our domain admin logon on PCs or Servers used to have only one profile located on c:\users\administrator Somehow, now we got a duplicated profile called c:\users\administrator.domain Does ...
0
votes
0answers
67 views

Active Directory And Solution Permission/Security in MVC

I hope you guys have a great day. I got a problem when designing permission solution for my client and I really need your adivice. My project is using ASP.NET MVC 5 and we are implementing the ...