A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
0answers
44 views

Enabling printing feature within the Terminal Server environment that is published to the internet?

I got the home and remote office users connect to the Terminal Server on my Windows Server 2003 that I published securely through Juniper SSL VPN client applet, they use normal internet connection to ...
1
vote
0answers
288 views

really slow active directory lookup from member server when adding user permissions to folders

I have a unique issue with a current server 2008 r2 deployment that is a member server on our internal domain. When I create a folder and set the permissions from the security tab, if I choose to ...
1
vote
0answers
202 views

How can I create a Windows Server 2008 domain user that AD RMS will accept?

I am trying to get basic LDAP authentication running on Windows Server 2008 (for testing purposes, so running in VirtualBox on an Ubuntu 12.04 host). I am installing Active Directory Rights Management ...
1
vote
0answers
386 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
1
vote
0answers
355 views

Creating keytab for computer account to decrypt packet capture

We are having an issue with our blackberry server (EWSTest fails at autodiscover lookup) and I am running a packet capture with Wireshark in an attempt to diagnose the issue. There is a conversation ...
1
vote
0answers
57 views

Software publishing in AD

I need to deploy a package that creates a service on the client's machine. I published it in AD so that it is available however, when the client attempts to install, there is a permission error in ...
1
vote
0answers
236 views

Exchange 2010 permissions issues after user account name changed

This is an odd one! When users have a name change here we actually rename their user login account, not just the Display Name like many places do. Exchange 2010 is fairly new here, so this is the ...
1
vote
0answers
924 views

Active Directory Mapped Drive won't stay connected

WinSrv08R2. I have a drive mapped to Win7 clients via Group Policy that's on another computer (an OS X server, mapped via "\serverIP\folder"). EVERY time the user logs out and then back in, it pops up ...
1
vote
0answers
450 views

Force AD Security Group Changes to Appear in Exchange

I made changed to security groups within AD, and when I go to the GAL in Outlook I noticed that the changes were not reflected, even after forcing an update by clicking Send Receive | Send Receive ...
1
vote
0answers
274 views

How to grant NetworkService access to a share by placing computers in security groups

I'm trying to configure a file share that will be accessed by ASP.Net applications on a set of computers, all running under the NETWORKSERVICE account on those computers. I can get it to work fine ...
1
vote
0answers
449 views

squid gets in a infinite loop

I'm hardly trying to add a Internet-Access group which is for our terminals where the client will see only a few sites. I call them InternetUserTerminal the added lines are in bold, the starndard ...
1
vote
0answers
380 views

VMware View - Netlogon Errors from Linked-Clone Virtual Desktops

I am in the process of deploying View 4.6 using linked clones and non-persistent desktops. Desktops are set to delete and be recreated when users log out. I am seeing my domain controller logs fill ...
1
vote
0answers
110 views

Domain accounts failing to work after two days

I am trying to diagnose/troubleshoot an issue where users to a Sharepoint site are not able to login anymore after 2 days from an initial password change (these are domain accounts). The password gets ...
1
vote
0answers
740 views

Fedora join to AD DS (svr 2008): NT_STATUS_INVALID_COMPUTER_NAME

I have been attempting to join my Fedora machine to my 2008 AD DS domain (testdomain.lcl) for some time now. I have followed this article: http://weblog.bignerdranch.com/?p=6 But with no luck. I ...
1
vote
0answers
105 views

Domain logon with Linux

I've set up Samba and winbind, and everything is working fine. I can see all AD users and groups, and corresponding relationships. I've also set up PAM authentication successfully. I have a local user ...
1
vote
0answers
293 views

FullArmor ADMX Editor: Does it work correctly/well for admx files?

I am currently creating some admx files. I found the FullArmor ADMX Migrator from Microsoft which also includes an ADMX editor. However, when using this editor I found the outputs quite strange. For ...
1
vote
0answers
116 views

Accessing Outlook Address Book

I have a Delphi XE app and I'd like to pop up the address book dialog that Outlook uses from within my Delphi app - I assume there are COM classes to support this? What's the best way to get this ...
1
vote
0answers
169 views

Software Install Policy Not Applying to Terminal (Remote Desktop) Services Server

I have a Google Chrome software install group policy object that works perfectly except when logging into the the Terminal (Remote Desktop) Services Server. It's configured under "User Configuration" ...
1
vote
0answers
62 views

Active Directory Roles Access Problem

We have a group of active directory users use Sharepoint 2003 ASP.NET hosted application. The application checks for specific roles for the logged-in users. However, for some reason when the ...
1
vote
0answers
196 views

IIS 7 and SPN Issues

Our web server is on a different box than our SQL server. When I first set up the website, I could access it, but it wasn't passing the authenticated user credentials to our SQL server (as expected). ...
1
vote
0answers
394 views

Cross-forest GPO between 2003 and 2008 Denied Beacuse it's “Inaccessible”

I have a two-way, non-transitive trust between two forests and domains, "W2003" and "W2008". In W2008 I have a GPO with user settings linked to a machine OU containing machine "Server". The GPO ...
1
vote
0answers
298 views

Kerberos Service Principal not found in AD

I've got a strange problem with an Active Directory SPN Account. This does not work: kinit HTTP/my.host.com@MY.REALM However, "setspn -l SA_MyUser" lists "HTTP/my.host.com" as registered service ...
1
vote
0answers
526 views

Manually remove last legacy exchange server from the domain after the exchange server has failed

Before we completed the migration from sbs 2003 to sbs 2011 the server running sbs 2003 failed so we were unable to carry out the steps required to remove the last legacy exchange server i.e we can ...
1
vote
0answers
488 views

User Account Picture doesn't display on Remote Desktop prompt

In an Active Directory Domain, I'm logging on via Remote Desktop to various AD clients. In Windows 7, the Remote Desktop connection prompt displays the last username I used to connect to the client ...
1
vote
0answers
136 views

Reset Active Directory Passwords Using RHEL6

Does anyone know of a way to reset Active Directory Passwords through RHEL6 or Ubuntu 10.04LTS so that the Active Directory user can still access network resources with their AD account. Also, is ...
1
vote
0answers
550 views

Can an AD DS user be replicated/synched to AD LDS into a different container/organisational unit?

Have some data in the form of attributes to be shared on the directory attached to users and groups containers/OU or group policy. The current AD DS has OU and container groupings of users which ...
1
vote
0answers
529 views

FreeBSD 8.0 - Samba 3.4.9 with ADS support Segfault 11

I'm running FreeBSD 8.0 and whenever I compile Samba 3.4.9 with ADS support it segfaults when I start the service. If I remove ADS support on Samba, it fixes it but I need ADS support. I saw from ...
1
vote
0answers
1k views

802.1x authentication against an Active Directory with a trusted Kerberos realm

I am attempting to use Windows Server 2008 NPS to provide 802.1x authentication against our Cisco switches. The set-up works fine for local domain users, I am now attempting to integrate it with an ...
1
vote
0answers
364 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
1
vote
0answers
733 views

Multiple entries in AD for same printer name on same server with cnames?

I have been asked to replicate a client's AD/server/printer environment. They have sent me some fairly limited information and I am unable to get any more easily. They have sent a screenshot showing ...
1
vote
0answers
475 views

AFP AD ACL permissions issues with external drive

Mac OS X Server 10.4.11 connected to an AD domain system serving AFP shares to Mac OS X 10.5.8. If I create a share on the the internal RAID of the server with an ACL that allows RW to all ("Domain ...
0
votes
0answers
23 views

As DNS clients do DCs put more load on DNS servers than regular workstations?

All DCs in this example are running DNS and DFSR. Edit: this is a single domain with an AD integrated zone. I have a DC in a central location and 60 or 70 DCs each in different a branch office. ...
0
votes
0answers
10 views

Exchange 2013 Schema Prep Error

I am installing Exchange 2013 CU9 into a site with an existing Exchange 2013 Cu3 installation. During the ADPREP phase of installation I am getting the following error. PS ...
0
votes
0answers
15 views

How to restrict asdm access based on Active Directory group membership?

I have a Cisco ASA 5505. I have enabled AAA authentication for ASDM to authenticate with my Active Directory server. How can I restrict logging into ASDM to certain users that belong to a specific ...
0
votes
0answers
20 views

How to give permissions to user (not admin) to access task manager WS 2012 R2?

I have a terminal server with ws 2012 R2. In it I have installed domain server and remote desktop services. I have administrator account, and other account without administrator rights called ...
0
votes
0answers
25 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
0
votes
0answers
15 views

Samba 4 not working correcty as dns for internal (LAN) addresses

[Edit] We tried to use samba_internal dns and also bind9_dlz on the server where samba is installed, but both cause problems when trying to access internal addresses even by IP. So we use our DNS, ...
0
votes
0answers
23 views

Adding a Domain Suffix - safe or bandage solution?

Coming into a new organization with an AD environment that was more or less experimental. We're ready to go all in, but I don't like that the domain was setup with a ".local" suffix, due to the ...
0
votes
0answers
18 views

block user object settings at cross domain forest registration

I got the following infrastrucute: Domain A: User Forest | Domain B: Ressource Forest (Citrix AD with infrastructure services) | one way trust-relationship The user of domain A signs on the citrix ...
0
votes
0answers
24 views

Cannot add NT Authority login into SQL Server

I installed SQL Server 2014 on a Windows 2012 R2 instance. I named the instance SQLExpress. After installing SQL Server, I joined this machine to an Active Directory domain and logged in using the ...
0
votes
0answers
8 views

Group policy to Delete unauthorised software per logon

I have a group of on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a ...
0
votes
0answers
13 views

kerberos cross realm authentication

I want to do setup for kerberos cross realm service authentication using active directory. My question is that should I create a different domain (I read somewhere that realm is a domain) or should I ...
0
votes
0answers
43 views

LDAP Query Of All Users In Various Groups In A Specific ActiveDirectory OU

I need to configure Atlassian Crowd to query all the users in my AD server that are in various groups in a top-level OU. The DN for the OU is "OU=Atlassian,DC=NNNN,DC=com". The various groups would ...
0
votes
0answers
41 views

Acount Logon events not getting on domain controller

We have windows domain running with 2012R2 DC, We have enabled logging through GPO for all member servers and DCs, but I dont see any Account logon/logoff events (4624/4634) being logged, neither on ...
0
votes
0answers
19 views

Is there a required method for creating Computer records in AD DS when replacing a PDC?

Server 2012 R2, Win 8/8.1 I experienced a total failure of my PDC, and in the process of trying to move the operations master role over to the secondary DC I messed it up as well; bummer. ...
0
votes
0answers
63 views

Join Ubuntu 14.04 LTS with Active Directory using realm, sssd and adcli

I'm setting up a new network with a Windows 2012 machine running AD DS. I have several Ubuntu 14.04 I want to join in the domain for authentication. I've managed to do so on one of these servers using ...
0
votes
0answers
24 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
0
votes
0answers
26 views

how to get info on failed authentication to domain - security audit?

Setup: 1 Windows Server 2012 box as Domain Controller, named DC1. 2 Windows Server 2012 R2 boxes, S1 and S2, on the same network, same config, joined to the domain. Issue: At random times, S1, S2 or ...
0
votes
0answers
38 views

AD DC - Error 4625 Status 0x80090308

I recognzie a small amount of Event 4625 entries with a status of 0x80090308 and substatus 0x0; 2% over all 4625's. It is basically a failed logon but without any information I could use to look ...
0
votes
0answers
32 views

Two different IIS applications with different auth methods for the same domain

I have been working on a kind of SSO solution for an intranet application. My approach has been: configure the application within IIS with Windows Security authentication configure IE adding the ...