A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
0answers
515 views

FreeBSD 8.0 - Samba 3.4.9 with ADS support Segfault 11

I'm running FreeBSD 8.0 and whenever I compile Samba 3.4.9 with ADS support it segfaults when I start the service. If I remove ADS support on Samba, it fixes it but I need ADS support. I saw from ...
1
vote
0answers
940 views

802.1x authentication against an Active Directory with a trusted Kerberos realm

I am attempting to use Windows Server 2008 NPS to provide 802.1x authentication against our Cisco switches. The set-up works fine for local domain users, I am now attempting to integrate it with an ...
1
vote
0answers
336 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
1
vote
0answers
706 views

Multiple entries in AD for same printer name on same server with cnames?

I have been asked to replicate a client's AD/server/printer environment. They have sent me some fairly limited information and I am unable to get any more easily. They have sent a screenshot showing ...
1
vote
0answers
445 views

AFP AD ACL permissions issues with external drive

Mac OS X Server 10.4.11 connected to an AD domain system serving AFP shares to Mac OS X 10.5.8. If I create a share on the the internal RAID of the server with an ACL that allows RW to all ("Domain ...
0
votes
0answers
3 views

'realm join --client-software sssd' on centos-7 joins two realms (one with sssd and one with winbind)

On clean installed centos-7 host: realm join -U foo --client-software sssd AD.EXAMPLE.COM After running realm list output looks initially like this: AD.EXAMPLE.COM type: kerberos realm-name: ...
0
votes
0answers
6 views

Error deleting Azure Directory - associated with existing Trial Subscription which is owned by a deleted account

Steps taken so far: Created a new Azure Organizational account called: name@company.onmicrosoft.com Started a Free Azure Trial, with credit card details. This created a single Directory with the new ...
0
votes
0answers
8 views

How to handle (and test) hybrid multi-forest with Office365

Let's say we have two domains: contoso.com and fabrikam.com. Both have: two UPNs (.local and .com) Then: Contoso.com have Lync servers on-premise. Exchange, Sharepoint 2013 and Azure AD on ...
0
votes
0answers
26 views

Active directory creates network issues

I have an OpenStack virtualization environment, where I created 3 VMs using the same Windows Server 2012R2 image. Each machine is syspreped after initial deployment. My goal was setting up a simple AD ...
0
votes
0answers
16 views

Windows 2003 error 2902 “server is the owner of this FSMO role, but does not consider it valid” after DCPROMO run

I am in the process of adding a Windows 2008 R2 DC (MTC2008DC) to an existing legacy Windows 2003 SBS domain, with a view to decommissioning the old server. There is already one 2008 DC in the domain ...
0
votes
0answers
20 views

Configuring Separate Forest for DMZ

Our DMZ currently has just two Winddows Server 2008R2 servers in it. One runs Exchange 2010 Edge Transport and the other is an IIS 7 server. Currently, these are just in a workgroup. We plan to ...
0
votes
0answers
10 views

DFS Database Error

I am trying to setup DFS on 2 computers. I have successfully setup and created a replication group among the folders on each servers. The replication is not happening. On checking the logs i found ...
0
votes
0answers
9 views

SharePoint 2013 User Profile Sync - Attributes Not Synced

I have a SharePoint 2013 farm that is utilizing SharePoint Profile Sync to import Active Directory user accounts. A handful of users are importing without the 'Manager' attribute populated. All ...
0
votes
0answers
10 views

dropped security events on PDC

Running a Windows 2008R2 Active Directory environment geographically dispersed over WAN links. Have used group policy to apply increased verbose security logging on domain controllers. Using ...
0
votes
0answers
16 views

Guest clients browsing very slow

I have AD, DHCP, DNS, RRAS, Print and File Services on my Windows Server 2003. I have a small network of 40 desktop computers and 10 guest laptop connecting cables for mobile staff. I have a Cisco CE ...
0
votes
0answers
28 views

Allow access to a share on a workgroup using a user which is a part of a domain

There are 2 networks. Network A, which is domain controlled, and Network B, which is a small workgroup. A user from Network A accesses Network B using VPN (Network B is Checkpoint 600, office mode, ...
0
votes
0answers
28 views

Can't Remote Desktop on LAN, Firewall Rules in Place, Yet Packets Dropped

I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as ...
0
votes
0answers
25 views

Active Directory Won't Authenticate

Something is really buggy with our Active Directory here at our company. We can query and ping everything just fine. The time is correct. We have restarted both of our Domain Controllers. We also use ...
0
votes
0answers
33 views

Samba AD DC Authentication Problems

I'm trying to setup an AD PDC using Samba4 on Ubuntu 14.04. My endgame here is to have an AD domain with users created by LDAP that can login to the domain and use roaming profiles, so that any users ...
0
votes
0answers
29 views

Obtain krb ticket for another user

I have a system account in my domain (DOM\sys) and it has access to service cifs/server@DOM. I want to obtain a ticket for this service using my own account (DOM\user). In other words I need sudo-like ...
0
votes
0answers
47 views

DNS won't respond to one DC

I have a multi site AD setup and am having issues with trust/netlogon/dns on the DNS DC in site 2. Things were fine until a month or so ago, only discovered issues today by chance reviewing logs. ...
0
votes
0answers
28 views

Add a computer which is outside my LAN into my Active Directory

Is it possible to add a computer with public static ip address into my active directory? Do we need to use any vpn to bring the remote computer within the network to add that computer within active ...
0
votes
0answers
18 views

Mac Maverrick AD binding

I have about 40 Macs on my AD Domain running OS X 10.9 (plus OD server). Recently the two MacPros (one aluminium case and one black shiny ash tray) have lost their binding to the AD, so I have unbound ...
0
votes
0answers
27 views

Solutions for bridging Solaris/AIX to Active Directory?

I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully ...
0
votes
0answers
50 views

Squid NTLM authentication started to fail

I have a squid server authenticating against a Win2k3 AD. The authentication is failing since today and I'm sure it is something on the windows side because on the linux machine there were no ...
0
votes
0answers
40 views

Is it possible to import a GPO into Samba 4 without the use of Windows tools?

I have an Ubuntu 12.04 server which also includes a Samba 3 installation. Currently, I only use it to authenticate users who try to log on into Windows workstations and it works very well. Now, I ...
0
votes
0answers
40 views

How to do when rename Domain Name in Active Directory

I installed a DC on Windows Server 2012 R2 over MS Azure. Now I see that the name of the domain what I use, isn´t so good, so I must change it. When I start Start the Active DIrectory users and ...
0
votes
0answers
26 views

PHPPGAdmin on Windows - authenticate users against Active Directory

I installed PHP, Apache 2.4, and PostgreSQL 9.4.1 on Windows machine which belongs to Windows domain. My pg_hba.conf: hostnossl all postgres 127.0.0.1/32 md5 hostnossl all all ...
0
votes
0answers
35 views

Redirect DNS-Queries in Samba4 AD of local domain

I am running an Ubuntu 14.04 Samba4 AD Server and I control my networks DNS via a different server. I am using the samba version served by ubuntu which is 4.1.6. Is it possible to configure the ...
0
votes
0answers
26 views

Can OS X Server Wiki show Active Directory Files?

I have active directory (2008R2) and an OS X Server (Yosemite) setup. OSX Server recognises the Active Directory and when I SSH into it with an AD account I am able to see my home folder. Now my aim ...
0
votes
0answers
32 views

How to fix multiple reboot issue after joining domain?

I'm seeing that after joining machines to a specific ADA domain that the computers require you to reboot twice. Not to join domain but for any reboot ever. This only happens after it has joined ...
0
votes
0answers
26 views

How do I trade an OAuth token for a Fedauth token with Azure AD?

I am trying to access a resource that's secured with Azure Active Directory. I can see from the HTTP traffic that my browser uses a Fedauth token when accessing the resource, but I need to access this ...
0
votes
0answers
24 views

Restrict Access to Domain Admin/Admin Group for all

We have a pretty old setup which was managed by our client. They could manage anymore and they have outsourced the entire Datacentre to us. Everything is messed up right now. Nothing in place ...
0
votes
0answers
59 views

Samba 4 Domain Join Command Fails

Have been attempting to get a test server connected to our AD (Win2k12R2) but when trying to do a domain join I get this error. it@testdom:~$ sudo samba-tool domain join xxx.com DC -Uadministrator ...
0
votes
0answers
15 views

When using an “Internal Relay Domain” as an Accepted Domain, what email addresses must be synched?

There are a number of SMTP addresses associated with a user in Exchange SMTP, X500, X400, etc. In addition there is a LegacyDN. Some of these email addresses are stored in the NK2 files and also in ...
0
votes
0answers
25 views

Auto-Purge AD Machines

I have a group of machines in a multi-domain multi-site forest. I am removing machines from Site-A/Domain-A and joining them to Site-B/Domain-B. Both domains span both sites and the inter-site ...
0
votes
0answers
29 views

Establish FAST encrypted channel between linux client and windows server

I am trying to setup windows server for FAST encrypted channel support to test OTP pre authentication in kerberos. I have already tested on linux machine by deploying KDC using krb5-1.12.1 source ...
0
votes
0answers
45 views

Active Directory Copy User and his password on another domain (and forest)

Is there a way (PowerShell would be nice) to copy a user (I need sAMAccountName) and his password, from one domainA (forestA) to domainB (forestB). All Active Directory servers are on LAN and this is ...
0
votes
0answers
33 views

Difference in File System Security group policy between Windows 7 and 8 clients

I have an unexplained difference of behaviour between a Windows 7 client and a Windows 8 client. I have the following files: C:\testdir\allow_domainusers.txt C:\testdir\allow_everyone.txt ...
0
votes
0answers
44 views

Dead Exchange 2010 organisation move to clean Exchange 2013

The previous two Exchange servers in my client's Exchange Organisation have not been removed but are essentially dead and the company doesn't have a recent backup of the exchange data (not setup in ...
0
votes
0answers
15 views

How can i manage multiple domain with samba?

We set up our new domain controller running with Samba4 a couple of month ago (About twenty clients) Our organization change quit a bit, and a new structure manage our company. I need hits about ...
0
votes
0answers
41 views

SSPI trying to authenticate local user against domain

Our domain controller's event log is being flooded with EventID 4625 errors, "An account failed to log on." Here are some of the details from the event: Logon Type: 3 (Network) Account For Which ...
0
votes
0answers
53 views

Samba DLC and Windows 7 Clients. Random drop of connection. Kerberos?

I have a Samba (Version 4.1.6-Ubuntu) DLC (Server role: ROLE_ACTIVE_DIRECTORY_DC) on an Ubuntu Server (Ubuntu 14.04.1 LTS) Several Windows 7 Professional Clients are connected every day and usually ...
0
votes
0answers
95 views

Unable to access Samba fileshare on CentOS 7 from Windows 7 on AD Domain

I'm trying to stand up a new CentOS 7 server running Samba and I'm unable to get access to the shared directories from my Windows 7 local machine. As I'm not super familiar with CentOS 7, I followed ...
0
votes
0answers
34 views

Schema Mismatch Replication Error After Introducing First 2008 R2 DC

AD replication fails with Schema mismatch error after introducing first 2008 R2 DC to 2003 R2 Domain. Some notes that are worth mentioning: I did run adprep before promoting the new server to DC. ...
0
votes
0answers
43 views

CloudFormation powershell to run as domain admin + elevated priviledge

So... I'm writing some cloud formation templates. Using cfn-init, I get the machine to join the domain, and now I need to run in a Domain Admin context as local admin with elevated privilege to: ...
0
votes
0answers
103 views

Windows 2008 Web Enrollment Fails The RPC server is unavailable. 0x800706ba (WIN32: 1722)

I am setting up an RA and a Subordinate CA who is also an AD. I can issue certs through certutil and the mmc snap-in with no problem. But when I try using Web Enrollment in the RA, it fails saying ...
0
votes
0answers
36 views

AD Account Policies/Group Policy not updating Mac keychain passwords

We currently run Windows Server 2008 R2, AD and have a multi Desktop OS environment ranging from Macs to Windows. Macs are bound to AD for login and password authentication through the directory ...
0
votes
0answers
23 views

Domain policy expiration doesn't match net user command

In Active Directory, we have recently changed our password policy. We had our users set to where their passwords would not expire previously. Now, we have set max password age in our domain policy ...
0
votes
0answers
21 views

IE11 & 2012R2 History GPO

probably a really simple one but I've not been able to find it. I am running a 2012R2/Win 8.1 environment and want to stop IE from storing any browsing history on a machine level. I've already set ...