A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
22 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
0
votes
0answers
23 views

Lync 2010 - Search Returns “Presence Unknown” for E-mail Address

I've inherited Lync infrastructure and my knowledge of the product is limited. This issue appears to affect only one account. Searching for the specific account on a Lync 2010 client returns ...
0
votes
0answers
14 views

SQL Client failing SSL certificate encryption under a AD Domain

I have a client machine (web server) that is attempting to connect to a SQL server. The SQL server is 2008 and has the force encryption flag turned on. Both servers are joined to the domain. The ...
0
votes
0answers
19 views

Do kerberos constrained delegation with protocol transition on IIS to another IIS need my own application for very simple redirect

Please excuse me if its a very basic question but i'm totally lost on this as Im new to IIS and kerberos delegation but have understanding of auth protocols. Need you peoples help please as i have ...
0
votes
0answers
28 views

Need set of event ids that occurs in event viewer during file creation event

I need the set of event ids that occur in the event viewer when I created a file in shared folders (auditing was enabled for the folder) in domain controllers. I know the fact that the event id 4656 ...
0
votes
0answers
15 views

SQL Reporting Denying Access to User After Move to New Group

We have a SQL Server 2008 server setup with reporting services so that users can log in and run certain reports. I have a user that was granted browse permissions to this as we had their initial ...
0
votes
0answers
19 views

How do I use simple_allow_groups with AD groups that have no GID in CENTOS 7

We just built a few test CentOS 7 boxes, and the configuration that we were using for 6.5 is not working for us. As best we can tell, it comes down to using simple_allow_groups and using AD groups ...
0
votes
0answers
26 views

SSH from Windows to Linux with certificates generated by a central PKI stored in AD

I would like to have a central PKI where certificates are issued for all sorts of services and devices as well as users. I would like to push these certificates to one or more active directories. (so ...
0
votes
0answers
29 views

RPC Ports getting reset to 5000-5002 on reboot

I've run into a very common issue with RPC Endpoint Mapper ports not being available. The default RPC ports are 5000-5002. When I edit the registry and set the ports to a wider range (say, xx100 - ...
0
votes
0answers
29 views

EFS decrypt access denied

I have a very weird behaviour here on a Windows 7 box (in AD). The user has (good boy) stored the files encrypted with EFS on his local disk. When he wants to open a file, e.g. in Word, he receives ...
0
votes
0answers
29 views

Strange behavior from demoted DC

We used to run our own domain (referred to as OLD) but are now in the process of completely removing it and using the campus wide domain (referred to as CAMPUS). We have 2 DCs still active for our ...
0
votes
0answers
28 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
0
votes
0answers
64 views

Restoring read only domain controller from VM checkpoint

I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
0
votes
0answers
19 views

Priorities or ambiguos DNS reverse zone with Bind

In my internal DNS running on Bind9 all machines are available at up to 3 different domain names, i.e. all machines are listed as machine.legacy.domain and machine.new.domain. Some machines are joined ...
0
votes
0answers
94 views

Cannot configure Exchange Server 2010 on mobile device because of “the connection to the server failed” error

I have a server with Exchange Server 2010 in a Win2008R2 domain. The fact is that whenever I try to configure Exchange access from a mobile device I get the following error in the event viewer: Log ...
0
votes
0answers
103 views

Site to site active directory for hyperv replication

We have two dedicated servers across two different sites. They host hyper v virtual machines for email hosting etc. I'd like to have hyper v do replication between them and so I have a copy elsewhere, ...
0
votes
0answers
30 views

How to get free hours of a user using EWS?

I'm trying to find the free/busy information of a user in my Exchange Organisation. I'm using GetUserAvailability operation for this purpose. This method is returning only busy and tentative ...
0
votes
0answers
37 views

Active Directory Root Permissions

We currently have way too many users in our Domain Admins group so I'm working on redesigning our active directory structure and I'm looking at the current permissions and looking at the root our our ...
0
votes
0answers
17 views

Enabling constrained delegation on DC computer account

Is it necessary to have constrained delegation enabled on Microsoft AD domain controller computer account? If yes then why and what are consequences of disabling it? I'm mainly interested in current ...
0
votes
0answers
28 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
0
votes
0answers
40 views

Mac maverick binded to AD

I got a mac laptop binded to AD successfully. Logged in with a domain user and it created a mobile account. The user used it for a day then rebooted and find that they can't login anymore. I logged in ...
0
votes
0answers
110 views

Unable to add Exchange mailbox for user in domain trust environment

We have a domain trust set up between two domains (DomainA, DomainB), and when attempting to add an Outlook mailbox that resides in DomainA for a user that belongs to DomainB - it fails. However the ...
0
votes
0answers
18 views

Password expiration in SQL/ODBC before AD

I have a script that emails users that their password expires in X days. Today a user got an alert that her password expires in 8 days. She was having problems with Excel and Access databases that ...
0
votes
0answers
96 views

Root and child domain authentication through one LDAP path

I have a webapp and in the web.config file, there is an LDAP path to allow AD token lookup for users to login. The app also requires users to be in a specific group to login. In my case red\appadmins ...
0
votes
0answers
84 views

Getting “Unknown username or bad password” error when trying to authenticate over a validating trust

I was trying to migrate users with ADMT, and then I faced the following issues: First of all, when I input the domain name in the appropriate field, ADMT does not automatically populate the Domain ...
0
votes
0answers
102 views

Network Drive Full Trust With Visual Studio 2010/2014

I'm managing 10 developer computers and I want to assign to each computer a Network Drive (Let's say X: drive) so the developer can map the TFS workspace to that drive. When the user tries to open ...
0
votes
0answers
48 views

Problems with AD login - Mac

So unfortunately, this problem occurs commonly, but not consistently enough to reproduce. We have Macs running 10.9 joined to a remotely managed Active Directory. However, it seems that every once in ...
0
votes
0answers
14 views

AD U&C missing propertypage in search result

there is one thing thats been bugging me for a long time with active directory users and computers admin tool. if you do a search for something and then open the property page on one of the results ...
0
votes
0answers
36 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
0
votes
0answers
10 views

Tridion Unable to Query Active Directory

I am having an issue while adding users to Tridion CM from AD. My AD is having around 8000 users and Tridion says its not able Query AD because the no of users exceeds 1000. Please help...
0
votes
0answers
61 views

Way to authenticate against Active Directory but without direct access to it?

So I'm in an interesting situation. I have an application that only supports authentication via LDAP on my network and client with active directory on their network. We have a secure VPN tunnel ...
0
votes
0answers
47 views

Windows computers refusing to connect to WPA2 Enterprise Network

We have all our computers set up on a WPA2 Enterprise network authenticating with a PEAP Certificate. The certificate is valid until 2017, and the network is functioning correctly on all the Macs we ...
0
votes
0answers
42 views

Active Directory Lightweight Directory Services user-credentials

Does anyone know how the "user-credentials" string is encoded/encrypted that is used for Active Directory Lightweight Directory Services? Thanks. ...
0
votes
0answers
125 views

GID/UID Wrong with Samba4 Member server

I have joined a Ubuntu 14,04 server to my 2012 domain using Samba4 but when I check the id of a user I get GID that are out of range. The GID/UID of running a "ID domain_user" come back completely ...
0
votes
0answers
34 views

Are there any standalone Windows debug/query tools that use ADSOpenObject?

I have an application that uses ADsOpenObject to initiate a connection to global catalog servers and validate AD credentials. Lately, connections from this application have been very slow to ...
0
votes
0answers
55 views

Is my understanding of Microsoft data interaction correct?

I am creating diagram to help our Tier 1 and 2 staff understand the flow of data from ADUC as well as other databases in our company. I'm trying to get a good grasp of how a users data is accessed by ...
0
votes
0answers
645 views

The Destination Server is Currently Rejecting replication Request - Error Event ID1864. Warning ID 2092

hope some one can help me with the subject mentioned error. My current set is that I have physical Win2k8R2 Box and a Virtual server with the same configuration. recently I am having replication ...
0
votes
0answers
408 views

squid authentication error kerberos - windows active directory

I use squid on RHEL6 and I want that authentication is via AD windows 2008, I already joined the server to the windows domain and all users is already seen by wbinfo -u wbinfo -g but wbmin -t show ...
0
votes
0answers
81 views

samba4 DC distro with samba4 git DC

We have already Samba4 AD DC which is installed via git from sources (to Fedora), and it will work fine. Now I should add there a secondary DC to domain, but I would like to use (CentOS 6.5) distro ...
0
votes
0answers
96 views

Kerberos and SSH login

I've just configured a RHEL 7 for windows authentication (idmap_ad). Every check works but if i try to ssh with a domain user i get the error: Connection closed by ::1 Here follows the ssh log in ...
0
votes
0answers
66 views

SCCM 2012 R2 install: error with samba4 domain

Am attempting to install SCCM 2012 R2 onto a member server in a domain with a Samba4 DC. I have every reason to believe that AD is working: smbclient reports (what I believe) are the appropriate ...
0
votes
0answers
39 views

Triple hop authentication

Trying to setup impersonation for web application running in IIS that connects to a web service that connects to SQL server, where all the layers are on different machines. Here is the setup Web ...
0
votes
0answers
74 views

Users cannot change their passwords in Active Directory

We have created a new domain. The DCs are server 2012 and 2012r2 and the functional level of both forest and domain is 2008. Password policy is only set on the default domain policy and is set to ...
0
votes
0answers
127 views

Creating Exchange account for user of subdomain

We have a W2008R2 server which serves as AD DC for intra.contoso.com and Exchange server. We have a W2012 server which serves as AD DC for subdomain sub.intra.contoso.com (which is not a new forest) ...
0
votes
0answers
58 views

DSQuery return error : domain can't be reach

i'm facing a problem to setup an AD auth on my Zywall firewall. I want my vpn clients tunnel to my zywall with their AD credentials To do that, i need somes infos: Base DN Admin credentials : Bind ...
0
votes
0answers
73 views

How to Delete Orphon Duplicate computer entry in windows Server 2008 R2 ADS

I want to know how to delete orphan duplicate computer entry in ADS in windows Server 2008 R2..I mean for example suppose one computer joined and registered to Domain DOM1 as comp1.dom1.local. Ok now ...
0
votes
0answers
13 views

Is it possible to cache LDAP responses from referrals in other servers in AD?

I have a LDAP server that is called from a number of sites that each have their own (isolated) instance of AD Directory Services. Is it possible to cache an LDAP query, and response, in a local ADDS ...
0
votes
0answers
35 views

how to access Application and Database on AWS as local from other network

Recently I created a micro instance of Amazon EC2 (Windows_Server-2012-R2_RTM-English-64Bit-SQL_2014_RTM_Express-2014.05.20). I configured IIS on AWS and create a database respectively. that is one ...
0
votes
0answers
131 views

Ubuntu Client, connect to windows SMB share on domain joined server using local credentials

I'm having some trouble connecting to the C$ share on one of my servers. I can do so using an account from the domain administrators group, however can't access most files on the server. I instead get ...
0
votes
0answers
158 views

cannot access share on SAMBA that is AD member server, VS. nullSessionPipes registry on DC

Asked this same question in samba.org mailing list but getting nothing, so I like to try here: SAMBA as a member server in an AD domain Access samba share from any client (e.g. windows 7) using AD ...