A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
0answers
112 views

how do i test my DC backups

I have several system state backups of my domain controller 2008r2 stored on a network location. I am wanting to build a test environment so I can practice recovering a domain controller and also to ...
1
vote
0answers
657 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w '...
1
vote
0answers
78 views

Group Policy Mapping Printer

There seems to be lots of different ways to map printers, all appear not to work (for me). Im running a Windows 2008 Environment with windows 7 clients, simple, hey? No.. I have a printer connected ...
1
vote
0answers
2k views

Why is my OSX client having so much trouble connecting to our SMB server?

I'm asking this here because I think I'm more likely to find SMB/kerberos experts here than in Ask Different, which seems to be mostly related to OSX client issues. When I first connect to our SMB ...
1
vote
0answers
342 views

Windows 7 + Dialup Network Connection (“Wizard cannot create the connection”)

We have a banking application[1] that requires a Dialup Connection object to establish it's connection. We've recently upgraded to Windows 7 and are unable to create the connection; the error message ...
1
vote
0answers
554 views

Slow first login to a AD-joined Samba box

I have joined my first Debian box to an Active Directory (2008 R2). It works, I can log in with AD credentials, browse Samba shares. There is just a problem with the time it takes for someone to log ...
1
vote
0answers
220 views

Netatalk authorizing with Windows Active Directory Clients

We have an Ubuntu server that we intend to use to share videos and other content over AFP to our client Macs. AFP works flawlessly by setting the allow list to one single user. The problem arises when ...
1
vote
0answers
171 views

Remote User Authentication with Active Directory vs. Azure Directory

I am a little confused about the added topological complexities that seem to be advocated when designing remote authentication for Active Directory. I want to have single-sign on for all computers ...
1
vote
0answers
50 views

EFS file access problems

in my organization, i have a deadline to deploy EFS using AD CS, and i am working with a single windows server 2003 box, which is the Root CA, and is the same server responsible to certificate ...
1
vote
0answers
112 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
1
vote
0answers
66 views

How to prevent Microsoft Small Business Server Active Directory addresses showing up in OSX Address Book?

A client has MS Small Business Server installed and numerous iMacs and MacBooks in their office which staff use. They use Google Apps for Business for email not Exchange. Their IT guy needed to ...
1
vote
0answers
2k views

Configuring mod_auth_sspi to find remote user

I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet. The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
1
vote
0answers
67 views

Oracle Identity Manager and Microsoft Read-Only Domain Controllers

Is Oracle Identity Management 11g (OID) compatible with Microsoft Active Directory Read-Only Domain Controllers? (RODC) My setup has OID importing users from AD RODC. Is this configuration supported?...
1
vote
0answers
527 views

SQL Server 2012 permissions from AD group login not refreshed until server restart

We have some IIS sites which runs under Managed Service Accounts (Windows Server 2012). Theese MSAs are members of resource groups in Active Directory. We are using resource groups as logins in SQL ...
1
vote
0answers
172 views

Server Core box keeps losing secure channel to domain, netdom can't reset?

I have one WS2012 box that repeatedly loses its secure channel to the domain. If I try to run netdom verify/reset, I get the "no logon servers were available" error message. If you look in the event ...
1
vote
0answers
1k views

adamsync.exe /sync is failing with “Naming Violation”

I am trying to synchronize my AD LDS instance (localhost:50006) with AD DS entries (basically trying to get user and computer accounts from AD DS so that I can use windows security principals in my ...
1
vote
0answers
65 views

pam_mount on CentOS 5 NOT working with Winbind

I used the instructions located here: Installing pam_mount on CentOS 5 However, when I add the pam_mount.so entries, and reboot the machine, I cannot log in. Each time I enter the login and press ...
1
vote
0answers
191 views

How to prevent Domain Users group from being added to local Users group

I do not want the Domain Users group to be automatically added to the local "Users" group when a computer joins the domain, but am struggling with finding how to prevent this. In the default domain ...
1
vote
0answers
462 views

Replication issue caused by bad DNS entry in _msdcs

We have 3 DCs in our domain. One of the DCs died (wouldn't boot) two weeks ago. We performed metadata cleanup to remove the old DC from AD. Then we built a new DC with a new name (we used the same IP ...
1
vote
0answers
547 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, "...
1
vote
0answers
23 views

One AD policy applied to some pc but not to others

I have the wsus server policy on all my lan's pc. But now I changed wsus's policy from srv-vsus to srv-wsus. Ofter 10 days some client have applied the new policy then they correctly connect to the ...
1
vote
0answers
91 views

Install DC again after removing on exchange server

I had a DC and Exchange 2010 installed on the same machine. I removed the DC role, and Exchange server went crazy. I tried to install the DC role again to fix the problem but ran into this error when ...
1
vote
0answers
882 views

Windows - user must change password on next logon: “current password” and “new password” boxes do not appear

I have a SBS2011 domain and Windows 7 laptops. I created a user on the domain, set a temporary password and ticked the box to force the user to change password at next logon. Sit at the user's desk ...
1
vote
0answers
293 views

How do I check I am safe to run rendom /clean

I am running an AD that has been renamed at some point in the past. I don't know when (one of my predecessors did it). I don't know for certain if it has been completed successfully. The only ...
1
vote
0answers
534 views

Windows Server - Active Directory users: Clear Caches

On Windows Server 2008/2003, users are logging in via Active Directory. So I believe that all of them have cached local settings when they log in the first time and onwards. How/Where do you clear ...
1
vote
0answers
78 views

Replacing SBS 2008 DC with a Win 2008R2 DC

Objective : Replace a SBS 2008 with a Win 2008 R2 on or Domain and migrate Exchange 2010 to the new server. Steps taken: The following steps were taken - Technet , serverfault. All the replication ...
1
vote
0answers
700 views

Problems setting up active directory

I just installed Windows Server 2012 onto my server and proceeded to install AD DS. And after days of trying, we just can not get Active directory to work! I installed everything the same way I did ...
1
vote
0answers
601 views

Connecting Windows 7 client to NT4 server share in AD domain

I'm attempting to get Windows (XP+) clients to talk to an NT4 server. All machines are joined to an active directory domain. Domain logins work everywhere and authentication works between all machines ...
1
vote
0answers
362 views

Problems with kvno + Consultation with kerberos authentication settings

I have clearly identified a problem that I can not solve. I suspect I'm missing something when setting the service running on Centos 6 on Windows Server 2003. First I tell the environment that I'm ...
1
vote
0answers
145 views

Which attributes does Active Directory currently use for POSIX compatibility?

In a heterogeneous environment that uses Windows Active Directory as the central directory, some attributes are essential for compatibility with Linux systems. uidNumber gidNumber gecos loginShell ...
1
vote
0answers
3k views

Server not found in Kerberos database while getting credentials for imap

When running kvno imap/prueba-mail.ejemplo.org@EJEMPLO.ORG get the following error: kvno: Server not found in Kerberos database while getting credentials for imap/prueba-mail.ejemplo.org@EJEMPLO.ORG ...
1
vote
0answers
130 views

Handling server failures with a Samba network on Linux clients

I am trying to use Samba4 to implement Active Directory logins across a network, using nslcd and pam-krb5 to register and authenticate users, and mount.cifs to mount shares such as home areas. The ...
1
vote
0answers
190 views

Best way to bind multiple RHEL 6 Systems to AD and use NFS?

I am currently migrating systems to an AD domain using winbind. This works fine but I have discovered that NFS mounts don't have proper permissions because users and groups end up with different uid/...
1
vote
0answers
88 views

DNS record not added when server joins domain

I've brought up three Windows 2012 VMs inside of an OpenStack cloud. I configured the first one as a domain controller, named "dc" (domain: internal.lorinhochstein.org), and then I joined the other ...
1
vote
0answers
1k views

Cross Forest Authentication - RDP - Have to Manually Specify Domain

We are having an issue when a user in forestB is connecting via RDP to an XP system in forestA. We are in a transitional state where some users have migrated to our new forest (forestB) but still need ...
1
vote
0answers
247 views

LDAP read privileges for comupter, IIS under ApplicationPoolIdentity user

Is it possible to set up LDAP read privileges to Active Directory for computer account? If I run web application on IIS 7.5, which application pool is running under ApplicationPoolIdentity, I have ...
1
vote
0answers
171 views

Authentication between Windows AD and Linux LDAP Server and google APPS

I have an active directory instance hosted in a secure data center offsite. That active directory allows my sharepoint users to have authentication I have google apps for all my users in the ...
1
vote
0answers
149 views

Windows Server 2008 Server in VM, in domain: Can not print, access denied

I'm having an issue with printing from a particular application from our Windows Server 2008 R2 64-bit with licensed Remote Desktop Services (running in Amazon EC2). When I connect via Remote Desktop ...
1
vote
0answers
95 views

Shares disappear on Windows 8 while logged in with admin account

Shares setup on Windows 2008 R2 with AD and OU's have been working and still work on Windows 7 on a Domain. I have 2 shares that work with normal domain accounts on Windows 8 pro but as soon as you ...
1
vote
0answers
222 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
1
vote
0answers
372 views

Can't make updates with LDAP from Linux box to Windows AD

I have a webapp (built using Zend Framework - PHP) that runs on a Linux environment which needs to authenticate against Active Directory on a Windows server. So far my webapp can authenticate with ...
1
vote
0answers
287 views

Winbind info shows local users that do not exist

I am setting up Samba on a Linux machine running CentOS 6 (called localhost, and the AD computer I am connecting to is dc.companyname.com), and I have done everything successfully, except when I type ...
1
vote
0answers
393 views

Windows Server 2008 R2 Software Deployment on Active Directory - Schema Issue

We have two servers, one running Windows Server 2003 SP2 and one running Windows Server 2008 R2. Both servers have their own versions of Group Policy Management (1.0.2 on 2003 and 6.0.0.1 on 2008). ...
1
vote
0answers
643 views

TFS 2012 Identity Sync AD Error

I have a newly installed TFS 2012 server set up and I am having problems with the synchronisation of Windows Groups (AD Groups). My domain is called DOMAINA and my service account for TFSAgentJob is ...
1
vote
0answers
268 views

IIS 7.5 FTP with Active Directory Auth and Virtual folders

I'm a bit stuck on this, so hoping someone can help. So first what I have Several Virtual machines, with their hosting directories shared over a private network A virtual machine with IIS 7.5 and ...
1
vote
0answers
2k views

Unable to Mange DNS via MMC

When trying to access the DNS service on Microsoft Windows Server 2003 (Build 3790) domain controller/schema master via the MMC DNS snap in or locally via the DNS MMC from Administrative tools I'm ...
1
vote
0answers
4k views

Active directory over SSL Error 81 = ldap_connect(hLdap, NULL);

I have been several day to getting AD over SSL (LDAPS) I followed exactly this guide. I have Active Directory Certifica Service installed (stand alone Root CA), I can request cert, install certs. ...
1
vote
0answers
284 views

Squid on Linux Windows Pass through authentication

We are setting up a new proxy based on squid on an ubuntu server, and would like to have pass through authentication work for the Windows/Internet Explorer client. We have put the line into the squid....
1
vote
0answers
2k views

External AD Trust randomly fails

We have a one way external trust between two domains. The trust was configured and validated both ways everything worked fine. Randomly the trust will stop functioning. If we reboot one of the ...
1
vote
0answers
66 views

Deleting Users and their redirected data

On our network we have approximately 2000 users all with folder redirection enabled so all data is stored centrally. These are broken down into 3 folders: Desktop, Documents, Profile. Is there a way ...