A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
25 views

Find Active Directory Groups for a specific location

I am a system admin for a site that I inherited from a previous admin. I am currently trying to determine what AD Groups are associated with this site (access to servers, other resources) so I can do ...
2
votes
1answer
22 views

System State Backup on Domain Controller

I wanted to do a one-time full server backup of the Domain Controller. However, there was almost 1 TB of data to backup. So I am just doing a System State backup instead, which is less than 5 GB. At ...
0
votes
1answer
226 views

Samba file server on Windows Domain can't authenticate users - gives “credentials chain check failed”

I have two TurnKey Linux Fileserver 13 (basically Debian 7.3) running Samba to share folders on our mostly-Windows LAN. Samba is configured to authenticate users using Active Directory on our domain ...
1
vote
0answers
97 views

Windows Active Directory and Linux integration: new AD Group does not show up in Linux

In my organization, the support team has created a new AD group for me but it does not show up on any of the nodes in our cluster(using RHEL). I went through this article to understand Windows and ...
1
vote
1answer
58 views

Apache LDAP (Active Directory) not working

I've had some mixed success with Apache and LDAP. First, it is working.. but not entirely. So, a basic LDAP config, it looks like this: AuthLDAPBindDN "omitting this" AuthLDAPBindPassword "...
0
votes
1answer
58 views

Dsquery group –name A* --> dsquery failed:'A*' is an unknown parameter

From here: http://ss64.com/nt/dsquery-group.html Examples Find all groups on the current domain with a name that starts with 'Admin' C:\> dsquery group -name Admin* Find all groups in the '...
0
votes
1answer
80 views

How to secure AD administration with MFA

I'm evaluating an MFA solution such as Duo or Okta (any one have an opinion on that?). Adding MFA to web logins is straight forward but I want to add another layer of security to our Active Directory ...
0
votes
0answers
42 views

Active directory failed connectivity in dcdiag

I have been having some trouble with Active Directory on Windows Server 2012 R2. After doing a dcdiag I can see a fail at the top of the report. This dcdiag was run on the server itself, not a ...
0
votes
1answer
118 views

Server 2012 stopped accepting computers joining to our domain with error 53: the network path was not found

We have Windows Server 2012 R2 Standard as our DC. Several workstations were added to our domain successfully. But then (I cannot determine what exactly could be a show-stopper) it stopped accepting ...
0
votes
1answer
64 views

How do you get detailed information on Active Directory logon failures?

In my domain controller event log, I'm getting an account failure from a username of a service account. The info is: Security ID: DOMAIN\serviceaccount Account Name: serviceaccount Additional ...
0
votes
0answers
19 views

What is the use of recycled object in Active Directory?

After the deleted object lifetime period, the logically deleted object will become a recycled object (which is same as a Tombstoned object), remains in the "Deleted Objects" container until its ...
0
votes
1answer
34 views

Buffalo Linkstation(NAS) Joining Active Directory

I am using Windows Sever 2008. I have 2 Buffalo Linkstation and there are same problem. Cannot to join Active Directory Domain Failed to join Active Directory Domain. Please confirm the Active ...
-6
votes
3answers
191 views

How to set up Active Directory in windows 7? [closed]

I just installed Remote Server Administrative Tools (RSAT) on windows 7, and turned features on as mentioned in the installation guide. Now the Administrative Tools have been installed and ...
0
votes
1answer
40 views

Roaming Administrator Profile

I have a 2012 R2 AD server running 100%. A certain group of users need to be able to run programs that require elevation and install programs as needed. I have tried making the user a member of ...
0
votes
0answers
57 views

How to open FileZilla Client in windows explorer?

We have a shared drive (windows 7), and I want to set up a server-client FTP system on office local network, so that people can have access to different folders or sub-folders with permission. I ...
0
votes
1answer
37 views

Do i need a print server at each remote site?

I am planning a network for a project and am wondering how to proceed with print services. This topology has a main office with 2 remote branch offices. I plan to create one domain with 2 remote ...
0
votes
0answers
50 views

AD authentication on Centos7

I set my configuration on centos 6 and it works but when I pushed it on centos 7 it doesn't work. Here is my configuration : # authconfig --test caching is disabled nss_files is always enabled ...
3
votes
0answers
85 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
0
votes
1answer
26 views

Cannot login anywhere on domain: Profile cannot be loaded

I'm having this issue with one of our users. This is a roaming profile, and I've tried logging in on a few machines, but we're still getting the same error. I did go through cleaning folders and the ...
0
votes
1answer
76 views

Bulk converting AD groupscope from domain local to universal

I have been testing the following command to convert individual "global groups" to "universal", it works fine. dsmod group <GroupDN> -scope {L|G|U} However, is there a way to convert a whole ...
0
votes
0answers
32 views

google chrome group policy locale

We currently have Google chrome deployed in the enterprise. We have an internal website that retrieves data from a database and people using chrome noticed the date and time format was in the US ...
5
votes
1answer
174 views

Get-ADGroupMember $Group fails when $Group contains principals from other domains

I've noticed that when I use Powershell to get the group membership of an Active Directory domain security group, the Powershell cmdlet Get-ADGroupMember $Group fails with the error message: PS C:\&...
1
vote
2answers
54 views

RPC Server is unavailable while trying to promote a domain controller. Open firewall

So I've been scratching my head around this problem for a few days now. This is a quick schema of our infrastructure : Our Primary Domain Controller is running in an hypervisor, in our datacenter. ...
2
votes
0answers
60 views

Is it possible to use Active directory without a trust relationship for FreeIPA passwords?

I am looking to integrate FreeIPA with an Active Directory environment that I do not have full control over and most likely will not be able to get a trust relationship setup with my FreeIPA install. ...
1
vote
1answer
122 views

Check If A Service Account Has Logon Interactive Privileges

I want to loop over all my domain service accounts and make sure that people can't log on the server using that account. How can I check if a service account has interactive logon privileges and/or ...
1
vote
1answer
282 views

how to create a folder on desktop everytime a new user is created?

How can I configure the system so that whenever I create a new user, and automatically available on her/his desktop a directory called "project"?. Is there something related to C:\Users\Default??
10
votes
1answer
103 views

How many FSMO roles are there?

I've always understood that there are five FSMO roles, but sometimes I see something that says there are seven. How many are there, really?
4
votes
2answers
74 views

every 5th AD query is very slow, why?

I’m binding a FreeNAS box to AD for student logins to SMB mounts. That all works fine. I have a bash script that runs on the FreeNAS to build an index.html page pointing to a subdirectory of each ...
2
votes
1answer
67 views

Manually (re-)create Active Directory schema objects msExchRecipientDisplayType and msExchRecipientTypeDetails from Exchange on Samba AD

Somehow, my Active Directory has "lost" (at least) 2 objects from the schema. msExchRecipientDisplayType and msExchRecipientTypeDetails are what I need to recreate. I believe they were lost, because ...
0
votes
1answer
28 views

Windows security event log showing lot of firewall rule changed alert

n my server i am getting lot of event id 4946. A change has been made to Windows Firewall exception list. A rule was added. i am getting this alert every day. can you help me to reslove this. Regards,...
1
vote
1answer
299 views

OmniOS r151018 file server visible in samba4 Active Directory but not in Windows Network Neighborhood

I have a test setup containing: 3 AD domain controllers (set up to replicate between them), all running Samba 4.3 on Univention Corporate Server 4.1 1 Windows 7 SP1 client joined to the domain 1 ...
0
votes
0answers
13 views

Windows 7 delete fingerprint from profile

I'm facing the following situation: I have a computer, joined to an AD with roaming profiles and with fingerprint logon enabled. A problem with a user profile had me delete the said profile and ...
0
votes
1answer
65 views

Group Policy Object not applied to client computer

I am taking over our entire Microsoft based management, this includes our AD servers, GPOs, etc. So with that being said, I don't know everything about how this setup is configured. However, I have ...
0
votes
0answers
55 views

Trying to add user to Active Directory via ldapadd using the admin user fails with INSUFF_ACCESS_RIGHTS

This is the ldif file I'm trying add: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith displayName: John_Smith sAMAccountName: jsmith ...
1
vote
2answers
112 views

Add AD entries using ldapadd failing with “unwilling to perform”

I'm trying to add entries to an Active Directory using ldapadd. Here's my ldif file: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith ...
0
votes
1answer
32 views

Restrict Group Membership for users not from particular OU

I need to configure two type of users that can administer AD users and security groups: Type 1 - Can only create users within particular OU. Type 2 - Can only change group membership of users ...
4
votes
1answer
143 views

Suggestions For IT Staff Delegation

looking for some suggestions or tips on how to setup our IT admins with delegation and server access. I started at a new organization and saw that every IT staff member is a domain admin. Looks like ...
1
vote
0answers
37 views

How to find out why joining a NAS to AD running on Samba 4.4 / Debian fails?

I am currently trying to join a Seagat Black Armor 220 NAS to my Active Directory Domain (2008_R2) controlled by Samba 4.4 running on Debian Jessie. But this will fail all the time giving me the ...
1
vote
2answers
61 views

Recover deleted mailbox and user- no AD recycle bin

I deleted a users mailbox in the ECP- AD user was of course also deleted. The recycle bin is not enabled. Is the only way to recover the user and mailbox with an authoritative restore?
1
vote
2answers
79 views

Setup Domain Trust fictitious domains on dynamic IP's with Windows Server 2008 R2

Have a customer with two separate offices / companies, eg: domainone.local (Windows Server 2008 R2) domaintwo.pvt (Windows Server 2008) Each office has a dynamic IP when connecting to the internet. ...
2
votes
0answers
62 views

Group Policy - Not automatically running on all machines

We are facing an issue on one of our domains where machines are not all running group policy refreshes at its default interval. I am not seeing the 1501 events logged in the system log, I occasionally ...
3
votes
2answers
154 views

creating an SPN from a linux build server

I'm setting up a process which would automatically create the SPNs for newly exposed service URLs. I am aware of how to create an SPN with Windows using the setspn -A command with the right priviliges....
3
votes
0answers
127 views

Questions about ktpass/kerberos with Active Directory

I got a few questions about Kerberos with Active Directory, specifically about the ktpass tool. The example AD I'm using (everything is on 2012R2 level): Active Directory Domain Name: ad.example....
2
votes
2answers
337 views

Configure same Internet Explorer zone mappings with and without ESC via GPO

Our Active Directory domain consisting of Windows Server 2012 R2 servers and Windows 7 workstations configures Internet Explorer security zones using this Group Policy setting: Computer Configuration/...
1
vote
3answers
95 views

Secure Administration AD Domain

I have a project to securize my Active Directory infrastructure. To do that, one of my colleague told me about the possibility to create another AD domain in the forrest just for administration. That ...
0
votes
2answers
70 views

Export Active Directory Users as *.contact

Is there a way to export AD Users to a *.contact file? (each contact = 1 file)
2
votes
1answer
72 views

AD Server 2012 - Make an admin account that can only add new users

I have been looking all over the web trying to find an answer but no luck. Does anybody know, if it's possible, how to make an admin account, that ONLY have access to add in new users to the Active ...
0
votes
2answers
115 views

How do you reset the default “IP Security Policies on Active Directory” back to their factory settings?

How do you reset the default "IP Security Policies on Active Directory" back to their factory settings?
1
vote
1answer
303 views

How to get ADDSDeployment module on Windows Server 2008 R2 SP1

I wonder to use AD DS Demployment CMDLets (Install-ADDSDomain, etc.) on Windows Server 2008 R2 SP1. I have installed AD-Domain-Services feature and in the list of available modules (Get-Module -...
0
votes
1answer
22 views

New site is not listed when adding new domain controller

I inherited this network and I'm trying to figure out what I am missing. I created a new site in Chicago and I want to add a domain controller to it but the new site is not listed when I go to ...