A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
0answers
110 views

Accessing Outlook Address Book

I have a Delphi XE app and I'd like to pop up the address book dialog that Outlook uses from within my Delphi app - I assume there are COM classes to support this? What's the best way to get this ...
1
vote
0answers
165 views

Software Install Policy Not Applying to Terminal (Remote Desktop) Services Server

I have a Google Chrome software install group policy object that works perfectly except when logging into the the Terminal (Remote Desktop) Services Server. It's configured under "User Configuration" ...
1
vote
0answers
62 views

Active Directory Roles Access Problem

We have a group of active directory users use Sharepoint 2003 ASP.NET hosted application. The application checks for specific roles for the logged-in users. However, for some reason when the ...
1
vote
0answers
192 views

IIS 7 and SPN Issues

Our web server is on a different box than our SQL server. When I first set up the website, I could access it, but it wasn't passing the authenticated user credentials to our SQL server (as expected). ...
1
vote
0answers
385 views

Cross-forest GPO between 2003 and 2008 Denied Beacuse it's “Inaccessible”

I have a two-way, non-transitive trust between two forests and domains, "W2003" and "W2008". In W2008 I have a GPO with user settings linked to a machine OU containing machine "Server". The GPO ...
1
vote
0answers
280 views

Kerberos Service Principal not found in AD

I've got a strange problem with an Active Directory SPN Account. This does not work: kinit HTTP/my.host.com@MY.REALM However, "setspn -l SA_MyUser" lists "HTTP/my.host.com" as registered service ...
1
vote
0answers
512 views

Manually remove last legacy exchange server from the domain after the exchange server has failed

Before we completed the migration from sbs 2003 to sbs 2011 the server running sbs 2003 failed so we were unable to carry out the steps required to remove the last legacy exchange server i.e we can ...
1
vote
0answers
466 views

User Account Picture doesn't display on Remote Desktop prompt

In an Active Directory Domain, I'm logging on via Remote Desktop to various AD clients. In Windows 7, the Remote Desktop connection prompt displays the last username I used to connect to the client ...
1
vote
0answers
134 views

Reset Active Directory Passwords Using RHEL6

Does anyone know of a way to reset Active Directory Passwords through RHEL6 or Ubuntu 10.04LTS so that the Active Directory user can still access network resources with their AD account. Also, is ...
1
vote
0answers
540 views

Can an AD DS user be replicated/synched to AD LDS into a different container/organisational unit?

Have some data in the form of attributes to be shared on the directory attached to users and groups containers/OU or group policy. The current AD DS has OU and container groupings of users which ...
1
vote
0answers
521 views

FreeBSD 8.0 - Samba 3.4.9 with ADS support Segfault 11

I'm running FreeBSD 8.0 and whenever I compile Samba 3.4.9 with ADS support it segfaults when I start the service. If I remove ADS support on Samba, it fixes it but I need ADS support. I saw from ...
1
vote
0answers
959 views

802.1x authentication against an Active Directory with a trusted Kerberos realm

I am attempting to use Windows Server 2008 NPS to provide 802.1x authentication against our Cisco switches. The set-up works fine for local domain users, I am now attempting to integrate it with an ...
1
vote
0answers
346 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
1
vote
0answers
715 views

Multiple entries in AD for same printer name on same server with cnames?

I have been asked to replicate a client's AD/server/printer environment. They have sent me some fairly limited information and I am unable to get any more easily. They have sent a screenshot showing ...
1
vote
0answers
460 views

AFP AD ACL permissions issues with external drive

Mac OS X Server 10.4.11 connected to an AD domain system serving AFP shares to Mac OS X 10.5.8. If I create a share on the the internal RAID of the server with an ACL that allows RW to all ("Domain ...
0
votes
0answers
12 views

CentOS 7 Automated SSL Generation from Active Directory

I have an Active Directory Server setup for Certificate Services. I am able to manually generate certs as needed. However, I need to find a way to automate the sending of the cert request to AD and ...
0
votes
0answers
8 views

How to get root CA certificate in windowsserver 2012

I am trying to connect to W2k12 server AD from my local unix box using net::ldaps. there seems to be CA certificate issue. as openssl s_client -connect AD.server.ip:636 is failing . Error: ...
0
votes
0answers
15 views

Why I need to login two times to apply changes to AD group membership or GPO filtering?

If I add a user to a group in AD, to reflect that change on a computer (see it on gpresult in security groups), I need to sign in and off the user session two times. Also the same happens when I add ...
0
votes
0answers
10 views

How to set cups quotas per users on centos from active directory domain?

How can I import cups users from active directory domain which is installed on windows server 2008 R2 and set quotas per users on cups printing server which is installed on centos 6.6 ?
0
votes
0answers
13 views

Cannot search for user and groups in a trusted forest. Server asks for password of trusted domain

I am currently familiarizing myself with trusts.On each of two Server 2012 R2 I installed a domain controller in a new forest. dc1.forest01.local, 192.168.10.10/16 dc2.forest02.local, ...
0
votes
0answers
20 views

Group Managed Service Accounts: -PrincipalsAllowedToRetrieveManagedPassword

So the documentation for creating gMSAs says that the parameter "-PrincipalsAllowedToRetrieveManagedPassword" should restrict the ability of using the gMSA to the machines that are part of the ...
0
votes
0answers
17 views

List AD groups beginning with X on Linux

In the organization wide Active Directory we have user groups that all begin with a prefix blaha-, how do I list all groups with that prefix on a Linux machine? getent group only seems to list local ...
0
votes
0answers
33 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
0answers
31 views

SoftEther VPN not allowing clients to connect using AD credentials

We are trying to get SoftEther VPN to work on a SBS 2003 domain but it is rejecting apparently valid user credentials. (The server application is running on our actual SBS 2003 domain controller and ...
0
votes
0answers
53 views

How can I Deny permissions to logon to Remote Desktop Session Host server in powershell script?

I am need of some assistance please. I am a system admin and I am trying to create a script that will assist with the tedious tasks I have to do with disabling a user that no longer works for the ...
0
votes
0answers
22 views

What is the authentication flow when Exchange 2013 proxies to Exchange 2010?

Issue Outlook users, who are on LAN, and have an email address that is different from the UPN get prompted for authentication. Topology 1,000 clients connect to a central DAG & CAS array on ...
0
votes
0answers
20 views

WES09 Client not registering with dns suffix

I have HP thin clients, some running Windows Embedded Standard 2009, and some running WES 7. They are all getting DHCP addresses from our Server 2012 R2 DHCP server, with AD integrated DNS. With both ...
0
votes
0answers
32 views

Unable to view trusted domains in ADUC

My domain is Server 2003 (domainA) and the remote domain is Server 2008R2 (domain functional level) (domainB). At some point in the recent past, I lost the ability to view domainB (ADUC -> open a ...
0
votes
0answers
42 views

Trying to add group to the security tab of an extended right

. The only problem is that the rights are not propagating to the extended attribute, even in the advanced tab :(. If I go in to adsi and check the security tab of the extended right it shows ...
0
votes
0answers
25 views

AD Migration and SharePoint configuration

i have a SharePoint 2010 and o365 (AD Synchronized) account. And some guys are working on the migration process from 2010 to o365. At the same time, I'm migrating users to the new domain but all ...
0
votes
0answers
26 views

Active Directory Schema Upgrade not enough to add new policy items

I recently upgraded my AD Schema to 69 in the hopes that I would get the Policies / Admin Templated / Windows Components / Windows Update / "Always automatically restart at the scheduled time" for my ...
0
votes
0answers
23 views

Domain Guest Group with Azman delegation in Windows Server 2012

I am new to Microsoft Windows Server and Active Directory. I have created a user called viewer Then I configured deny the Network Access Permission no callback deny user permission to log on to ...
0
votes
0answers
71 views

Jenkins with subversion plugin using AD athentication

I'm configuring a Jenkins instance installed as a windows service. In order to download the source code, I would like to use the subversion plugin, but I'm getting an authentication error when I add ...
0
votes
0answers
38 views

Active Directory And Solution Permission/Security in MVC

I hope you guys have a great day. I got a problem when designing permission solution for my client and I really need your adivice. My project is using ASP.NET MVC 5 and we are implementing the ...
0
votes
0answers
31 views

Folder Redirection for user logging into workstation and server

We have 4 admins that administer multiple Windows 2012r2 servers. Our IT Manager has asked that we change the way we log on to servers now for auditing reasons after an ex admin went rogue. We have ...
0
votes
0answers
42 views

active directory simple bind always anonymous (event 1219)

I am getting event 1219: "Active Directory could not initialize simple bind authentication. Therefore, simple bind authentication against this LDAP interface will result in binding as an ...
0
votes
0answers
58 views

Unable to join PCs / Servers to domain. Had been working

I have a virtual host running 4 VMs, one of which is the Domain Controller. All of them are joined to the domain, as well as another virtual host, and 1 workstation. I went to add another domain ...
0
votes
0answers
35 views

LDAP Browser(Softerra) vs LDP.exe

Here is the issue; -> There is a Deny All(FullControll) set on 2 OUs for a service account. -> When i use LDP.exe to query those OUs, it can read their names but can not display any objects ...
0
votes
0answers
27 views

DFS Namespace is inaccessible when DC4 is up and running

DC1, DC2 and DC3 are at site A. DC4 and DFS server (2008 R2) are at Site B. DC4 is Server 2003 and not a Global Catalog. DC1, DC2 and DC3 all are Server 2003, FSMO role holders and a Global Catalog. ...
0
votes
0answers
32 views

using icacls to set traverse/execute without setting change permissions

I'm having trouble with network shares. Specifically with mac clients accessing home shares on a NAS. The fix has been to remove certain permissions on the Library folder. in the past, i've used ...
0
votes
0answers
17 views

configure realmd to allow login without domain name

Is it possible to configure realmd to allow users to login via a domain without specifying it? I've used the "fully-qualified-names = no" option so that usernames don't show the domain name, but they ...
0
votes
0answers
42 views

Windows 2003 error 2902 “server is the owner of this FSMO role, but does not consider it valid” after DCPROMO run

I am in the process of adding a Windows 2008 R2 DC (MTC2008DC) to an existing legacy Windows 2003 SBS domain, with a view to decommissioning the old server. There is already one 2008 DC in the domain ...
0
votes
0answers
31 views

Configuring Separate Forest for DMZ

Our DMZ currently has just two Winddows Server 2008R2 servers in it. One runs Exchange 2010 Edge Transport and the other is an IIS 7 server. Currently, these are just in a workgroup. We plan to ...
0
votes
0answers
10 views

DFS Database Error

I am trying to setup DFS on 2 computers. I have successfully setup and created a replication group among the folders on each servers. The replication is not happening. On checking the logs i found ...
0
votes
0answers
56 views

SharePoint 2013 User Profile Sync - Attributes Not Synced

I have a SharePoint 2013 farm that is utilizing SharePoint Profile Sync to import Active Directory user accounts. A handful of users are importing without the 'Manager' attribute populated. All ...
0
votes
0answers
14 views

dropped security events on PDC

Running a Windows 2008R2 Active Directory environment geographically dispersed over WAN links. Have used group policy to apply increased verbose security logging on domain controllers. Using ...
0
votes
0answers
29 views

Guest clients browsing very slow

I have AD, DHCP, DNS, RRAS, Print and File Services on my Windows Server 2003. I have a small network of 40 desktop computers and 10 guest laptop connecting cables for mobile staff. I have a Cisco CE ...
0
votes
0answers
55 views

Allow access to a share on a workgroup using a user which is a part of a domain

There are 2 networks. Network A, which is domain controlled, and Network B, which is a small workgroup. A user from Network A accesses Network B using VPN (Network B is Checkpoint 600, office mode, ...
0
votes
0answers
38 views

Can't Remote Desktop on LAN, Firewall Rules in Place, Yet Packets Dropped

I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as ...
0
votes
0answers
43 views

Active Directory Won't Authenticate

Something is really buggy with our Active Directory here at our company. We can query and ping everything just fine. The time is correct. We have restarted both of our Domain Controllers. We also use ...