Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

0
votes
0answers
69 views

Why AD DS user is able to write to ADLDS(ADAM) container(user is neither imported nor added as foreignsecurityprincipal)?PS/dsacls cmd to fix it-DENY

I have installed 'AD LDS' instance on one of my windows server 2012 which is part of a domain. I brought few users (windows security principals to 'AD LDS') as 'ForeignSecurityPrincipals' from AD DS ...
0
votes
0answers
52 views

How to integrate RSA with AS DS?

I have not been able to find anything online that isn't AD FS. Since I do not run AD FS, is there a way to integrate RSA Securid with just AD DS? Any online resources? Also, this is a 2012 server.
0
votes
0answers
338 views

Configuring mod_auth_sspi to find remote user

I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet. The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
0
votes
0answers
33 views

Tomcat application can't connect to Active Directory when running as a Windows service

I have a strange scenario that I haven't been able to find any details on anywhere. I have an application running in tomcat that connects to an Active Directory server that works perfectly when I ...
0
votes
0answers
56 views

Issues with Samba, Kerberos, and Active Directory on Ubuntu

I am having two issues with AD auth on Ubuntu. Firstly, if I set the passed to be changed at next login, or run passwd, it ask for the current NT pass and twice, then asks for the new one four times, ...
0
votes
0answers
48 views

MOD_AUTHNZ_LDAP query failing on search query yet search works in Apache Directory Studio

I have a search issue with mod_authnz_ldap that I need help on. I need to give authentication to users in the active directory however seem to need to specify "OU=XX" in the search string. Successful ...
0
votes
0answers
710 views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
0
votes
0answers
191 views

ldifde command is failing with "Invalid Parameter: Bad argument '-i'. And also any equivalent PS Cmdlet?

OS - Windows Server 2008 R2 Localhost: DC as well as running an AD LDS instance Here are the command(s) I used: ldifde -i -u -f differences.ldf -s localhost:50004 -b myUserAccount MyDomain ...
0
votes
0answers
78 views

scurity tab is missing in ADSI Edit for AD Lightweigh Service instancess. (authorizing users in AD LDS)

I am new to AD LDS. I have installed AD LDS instance in my Windows Server 2008 R2 and 2012 servers as I want to you use AD LDS instance for directory services for my app. I am able to install the ...
0
votes
0answers
45 views

Cyrus sasl, Authenticate with Username and Password against Active Directory

I set up a mail server with Postfix and Cyrus IMAP so that the user and password you need to enter are those of AD. I need users can log in from any mail client just put your username and password. ...
0
votes
0answers
102 views

Active Directory replication over VPN - DNS resolution

I have looked around whether anyone had the same issue but so far have not seen anything that would help me. I have a homelab and two VMs (Windows 2k8r2) with public IP addresses hosted in remote ...
0
votes
0answers
79 views

GPO to have Chrome profile follow user on AD network, includes laptops

I'm currently working on a Windows network with domain, about 50 +/- workstations. I'm going to be doing a new PC roll out within the next few months and I'd like to have Chrome, or Firefox for that ...
0
votes
0answers
146 views

How to cleanup AD?

I have a fairly hosed Windows 2012 AD. I would like to resolve the issue if possible. I have done many things to try and resolve this with little success. Brief history; I had a Domain, that was ...
0
votes
0answers
41 views

Windows Server 2012 member server cannot authenticate to domain

We have a simple domain for some servers, with a single domain controller "APP01", and another member server "APP02" For an unrelated reason, one of our services on APP02 fails and needs restarting, ...
0
votes
0answers
21 views

Trust relationship between workstation with PBA/Encryption and domain failed

I have installed some endpoint encryption solution on a laptop and from that point I could not login into the workstation with another user. Windows always tells me that the trust relationship between ...
0
votes
0answers
69 views

browse samba shares and login with ssh at the same time[Active Directory]

hello, i have a problem with krb5 and samba. when samba is running(i can browse shares with domain account) i can not login with ssh. And when samba is NOT running i can login with ssh with domain ...
0
votes
0answers
88 views

What happens when one of the 2 DC's goes down

There are 2 Domain Controllers running Windows Server 2003 x64 R2. The installed roles of DC1 (10.0.0.1) are: File Server, Print Server, Application Server, DNS Server and of course Active Directory. ...
0
votes
0answers
50 views

Domain Controller Not Found with Two DNS Address

I'm experiencing a problem on some windows clients connecting a Domain Controller. The domain controller is 192.168.10.240 and the client have the following DNS configuration : DNS 1 : ...
0
votes
0answers
45 views

Shared resource permission management (minimum required permission)

I want to grant a "tech" group access for managing the shared resources. Problem: The sharing tab is not shown to them. Moreover they can not even access the shared folder list via management ...
0
votes
0answers
33 views

“Log on as a service” for a group doesn't work

I have a server that has a few services that run under different domain user accounts. If I create a group, add the user accounts to that group, and then add that group to the "Log on as a service" ...
0
votes
0answers
118 views

Request only group member users or groups from DSGET not both

I am using dsget group [group] -members to get all the member objects of a security group. however I am getting both User and Group objects, so when I pass them to dsget user or dsget group I get ...
0
votes
0answers
16 views

Add contact to SBS 2003 active directory remotely

Masters, We need to often add or remove contacts in active directory. It is possible to delegate access to a user (with or without administrative rights) to do this remotely (without log in via ...
0
votes
0answers
313 views

ADPrep error trying to upgrade Windows 2012 server to DC in 2008 domain

Trying to promote a Windows 2012 server to DC in a 2008 domain and after passing all prerequisites and beginning the process, I get an error stating: adprep was unable to bind to any domain ...
0
votes
0answers
73 views

Detect reuse of deleted AD account's email addresses

One company I have something to do with has the - in my eye not optimal - policy of recycling email addresses. If a user leaves, they just delete the Active Directory account. So they don't even know ...
0
votes
0answers
77 views

Accessing AD Domain Controllers for Login from an Isolated Network

I work with a large Active Directory. We have domain controllers distributed across many sites. At my site we have been trying to create a private network which has access only to a very small list ...
0
votes
0answers
32 views

IIS / MSSQL / Mysql server issues, after joining them to active directory

I have three different server. IIS server hosting .net solutions MSSQL server 2012, Db for server nr.1 MySql server, db for some of our php applications. All the servers above is using local ...
0
votes
0answers
113 views

Can see but not access shared samba folders using active directory

I have installed samba on my centos 6.4 server and I am able to see the shares but not access them. I am trying to use AD authentication with my DC. I have a AD user group named "webdev". The ...
0
votes
0answers
26 views

Cant Add Columns to a AD Task pad except for the top level of the domain

We are working on Active Directory taskpads application for user management in our organization and facing stange issue. When we create a taskpad, and when we are at top level of the domain, i can ...
0
votes
0answers
169 views

AD: GPO mapped drive and/or setting home in user profile

I discovered something interesting today that I have no idea the consequences of. Having inherited a large, complex and patchwork system with very little design, I discovered what I would consider an ...
0
votes
0answers
25 views

Remove specific site/application/domain from IE cache

Apparently one of our web applications changed a path when we went to a new version. Now we're faced with many users who have the application in their IE cache getting errors because the browser has ...
0
votes
0answers
138 views

Share folder with active directory group permissions

I have a Debian as a member of our AD (which is a 2k3). I want to share 2 folders from our Debian. 1 with full access for everyone, the second only readable by group "ADM", and "PROD". Part of ...
0
votes
0answers
49 views

Users roaming profiles not applying across PCs with folder redirect set Via GPO

I inherited an 2008 AD server with no documentation that seems to be set up correctly and has been working fine for the most part. APPDATA and documents are redirected to server network shares over ...
0
votes
0answers
25 views

How to get a new SBS user to show up in Windows Storage Server?

We have an SBS domain, and a Windows Storage Server 2008 R2 Essentials. I've created a new user account on the SBS machine, but this new user is not yet available to set up on the Storage Server. How ...
0
votes
0answers
38 views

How to record AD EventLog that LDAP authentication failure of account that does not exist?

I tried the LDAP authentication to ActiveDirectory from Linux. I was able to confirm that the authentication of the account to the existing successful / failure remains in the event log. But I do not ...
0
votes
0answers
237 views

HTTP proxy authentication Kerberos fallback on Windows

We run a Samba4 domain with Linux and Windows clients joined to it. Both the Windows and Linux machines use a Squid proxy that uses both Kerberos and Basic authentication, and for the most part it ...
0
votes
0answers
1k views

Sync Active Directory Users in FreeNAS

This is for FreeNas-9.1.1, I am using active directory which appears to be connecting ok, since the following list users/groups from that server with no problems wbinfo -u wbinfo -g I can also join ...
0
votes
0answers
124 views

Windows Workgroup & AD password Sync

Does anyone know a tool that can sync passwords with users of a Windows Workgroup with Active Directory Users passwords? Both servers being: Windows 2008 R2
0
votes
0answers
71 views

No single sign on ssh for Users from trusted domain

I have an Ubuntu Server 12.04 LTS machine joined to a Windows 2012 Domain (DomA) via Likewise-open. I configured likewise using the following commands domainjoin-cli join test.org <Domain ...
0
votes
0answers
137 views

DCDIAG The network path was not found.Could not get NetBIOSDomainName Failed can not test for HOST SPN

When trying to add a newly created windows server 2008 R2 machine to an existing network it gives me the following error message "The following error occurred attempting to join domain ...
0
votes
0answers
34 views

Remote domain clients use remote gateway instead of local gateway

I've a remote office, connected via VPN LANtoLAN to the main office where is located a server with 2003 SBS. In the remote office there is a dozen of clients not joined to the domain, that use local ...
0
votes
0answers
150 views

Windows Server 2008 Standard R2 GroupPolicy error

Windows Server 2008 Standard R2 GroupPolicy error I am receiving an error in System log Event ID with the description "Windows failed to apply the Group Policy Local Users and Groups settings. Group ...
0
votes
0answers
43 views

How can I configure Kerberos Key Distribution Center to serve multiple tickets?

On my AD, I've mapped the SPNs of a few Linux services to a domain user. How can my clients request all of the tickets mapped to this domain user, rather than only requesting a ticket based on the ...
0
votes
0answers
33 views

Active Directory - Bulk update email address for GROUPS (not users)

Im looking for a method of updating ~100 groups (multiplied by potentially multiple sites) and adding an email address field in. I can create a CSV with the details, or ideally just using the group ...
0
votes
0answers
59 views

Access to network share folder works in VDI, but not on desktops

I have two separate environments running in our lab computing spaces. We are phasing over to VDI. There are some weird differences going on in each environment, and I believe that the problem is ...
0
votes
0answers
41 views

Allow ad user to read local group

I am currently implementing a plugin for our communication server (david® by Tobit.Software) which must read some information from the active directory. The constellation is as follows: Server A (MS ...
0
votes
0answers
211 views

Access denied when attempting login to servers with Domain Users via RDP

I have a VM server, with VSphere, I have 2 windows server 2003 VMs: A server holds the DNS, DC and AD roles. IIS holding a web platform that allows Domain Admins to create new Domain Users (which are ...
0
votes
0answers
70 views

pware64 samba and AD intergration

I'm using pware64's version of Samba on an aix box. The Samba version is 3.5.11 and AIX is at 6.1 TL7 SP4. When I run the command net ads status, I get this error message: [2013/09/09 ...
0
votes
0answers
33 views

I have 0.0.0.0 refid, I assume ntp error

when I run ntpq -p my server is shown. I get the following : refid: 0.0.0.0 st: 2 t: u when:18 poll:64 reach:377 delay: 0.262 offset: -8.622 jitter: 2.470 I just installed ntp and added my server ...
0
votes
0answers
32 views

User cannot print to any printer from any PC, even ones he's never logged into before

A very bizarre issue that I've never seen before. We have a domain user at a remote site who is unable to print to any printer shared on their print server. He gets no error message, and I see the ...
0
votes
0answers
120 views

DSADD error, I can't see it

I've been given the task of creating all the new year 7's AD accounts and I thought just use DSADD and put together a script using excel Anyway I've hit a snag, it keeps erroring out with "cn=Test ...