A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
31 views

Outlook not finding newly created mailboxes

We are running Exchange 2010. All of my thin clients (Office 2007 - WinServer 2008) and my few PC laptops (Office 2007 - Win7) aren't able to find any recent users that have been added into the ...
0
votes
0answers
18 views

Samba Login with Trust Domain User

I'm studying Two-way Domain Trust between Samba and AD. I configured Trust, and I can login with Trust Domain User on Windows Client. But I can't login with Trust Domain User on Linux Client. I ...
0
votes
0answers
24 views

Error: “ chgrp invalid group 'domain users' ” when setting up shares

I'm following this tutorial: Samba Shares with Active Directory Login on Ubuntu 12.04, and when I enter the command: chgrp -R "Domain Users" /sharing/ , I get " chgrp invalid group 'domain users' ". ...
0
votes
0answers
38 views

Active Directory - Set permission if user is present in all of the specific groups

The bussiness isue: implementing RBAC (Role Based Access Control) using Active Directory Groups mechanism. imagine having the following AD "Organization" groups: Core Development Team Sales Team ...
0
votes
0answers
24 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
0
votes
0answers
8 views

Having trouble getting dovecot to authenticate with samb4 DC/AD

I have a Slackware64 14.1 system configured as a Samba4 (4.1.11) Domain Controller/Active Directory. The DC/AD bit works fine. I have AD users configured and working redirected folders. I've ...
0
votes
0answers
41 views

Clients not authenticating with RODC - nltest gives SERVICE_NOT_ACTIVE

I am new to the Windows world and pretty much followed the guide from this Windows Server Blog For the life of me I can not get clients to authenticate with the RODC. When I have the on-site RWDC ...
0
votes
0answers
25 views

Removable Storage User Configuration Group Policy not working when Windows Server 2008 R2 is used as a client

I have enabled read write restriction for a group of users, if a user from this group is to log onto a win 8.1 system or Windows 7 system and tries accessing a USB drive it says access is denied, ...
0
votes
0answers
37 views

Would a duplicate DC on same subnet be bad, if ALL auth is only internal to the server?

Here's a weird scenario I'm looking for some guidance on. I have a VM that is a purpose-built "self-contained" demo environment. It has an application stack installed, as well as Active Directory, ...
0
votes
0answers
30 views

Powershell and dsget do not return full results when querying group membership

I'm trying to get information about group membership of certain users. Ultimately I want to automate this in some way but I'm having difficulty extracting the information at all. The problem is that ...
0
votes
0answers
20 views

AWS Directory Service compatibility with XenApp / XenDesktop

I have a question regarding AWS Directory Service compatibility with Citrix XenApp / XenDesktop. I am about to deploy a Citrix XenApp environment in AWS. A requirement for XenApp is a working Active ...
0
votes
0answers
37 views

machine in domain is not accepting domain credentials

I have added a windows server 2008 (Virtual machine) into a domain. 1. The newly added machine properties shows the system name as systemname.domainname 2. The AD is listing the newly added machine ...
0
votes
0answers
5 views

How to differentiate between primary mailbox and archive mailbox in mapi while getting mailboxes using IExchangeManageStore::GetMailboxTable?

I'm using mapi to retrieve information about mailboxes in my organization. When I use IExchangeManageStore::GetMailboxTable method, it returns both primary mailboxes and archive mailboxes. How do I ...
0
votes
0answers
46 views

Server 2012 LDAP signing - “Number of simple binds performed without SSL/TLS..”

Here is our log on event 8227: Number of simple binds performed without SSL/TLS: 88 Number of Negotiate/Kerberos/NTLM/Digest binds performed without signing: 0 I have set LDAP Interace Events ...
0
votes
0answers
21 views

Active Directory - Windows Kerberos integration

I integrated ActiveDirectory in Windows Server with Kerberos in Ubuntu machine I am able to generate tickets for the ActiveDirectory users in Ubuntu's Kerberos using 'kinit' command. Now would like to ...
0
votes
0answers
327 views

Name Resolution failure on the current domain controller

I'm using windows server 2008 R2. One day my server got issue with Group Policy. Here is the log in event log: The processing of Group Policy failed. Windows could not resolve the computer name. ...
0
votes
0answers
49 views

Setting up SPN for SSRS in a CRM load balance environment

I'm getting this exception randomly in a CRM load balance LIVE environment when running Reports from CRM. System.ServiceModel.Security.SecurityNegotiationException: A call to SSPI failed, see inner ...
0
votes
0answers
36 views

Enabling trust between two domains

I have the forest contoso.com, which my user is part of (alexander@contoso.com), my computer is part of (laptop0815.contoso.com), and our servers (server01.contoso.com and server03.contoso.com). Now ...
0
votes
0answers
66 views

Office 365 - Outlook For Mac Not Authenticating

We have Office 365 (for business) and a few users who want to use O365 apps on their Mac. Outlook is causing a problem when trying to authenticate / authorise the application (before adding the email ...
0
votes
0answers
182 views

Provisioning Zentyal 4.0 for OpenChange after joining existing Samba AD PDC

I have an existing Samba AD primary DC. For now, I have another server that acts as mail server and queries the Samba DC for LDAP account information. We want to migrate to the Exchange protocol, and ...
0
votes
0answers
115 views

LDAP query to obtain distinguished name of a list of users

Hi im working on a migration process on which we are migrating users from one server to another domain controller. Right now I have a list of users I migrated, but I also got another of them I didnt. ...
0
votes
0answers
46 views

Events ID 4013 For DNS and 1844 for Active Directory

I have newly registered a virtual private server (windows 2008 R2). My problem is when i install an Active Directory and DNS Roles, it raises events 4013 for DNS and 1844 for Active Directory. What ...
0
votes
0answers
57 views

Using DSCONFIGAD to bind computer objects to a specific OU using a FQ LDAP DN

The DSCONFIGAD utility for OS X has a -OU parameter that allows one to generate and bind computer objects to a specified -OU via a FQ LDAP DN argument. This is taken directly from Apple's DSCONFIGAD ...
0
votes
0answers
15 views

SVN server - User test.user1 not found: /SVN/testrepo

My subversion SVN is causing recently lots of troubles and I can't access any repository with the newly created AD account. Let me explain briefly how everything works or it used work. My SVN ...
0
votes
0answers
78 views

Create active AD user with samba net rpc user add command

I have a mixed Windows and Linux Environment. I want to create new Active Directory users with Samba tools. This command will create a new AD user, but they aren't active: net rpc user add ...
0
votes
0answers
114 views

How can I resolve element not found in AD CA?

I had to move our AD CA from server 2008 32bit to server 2008r2 64bit, both domain controllers too! I now know this was BAD. Is there any way to resolve the "Element not found" in AD CA? Or do I ...
0
votes
0answers
29 views

Cannot add Domain Users to SQLServer security

I installed a win2008 server (WSQL) Its has successfully joined another Win2008 server which is the domain controller. Now back to WSQL machine, I connect it to the domain... And I install ...
0
votes
0answers
42 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
0
votes
0answers
22 views

Builtin group membership not updating on client machines

I have a small active directory setup which is semi-live (i.e. being used by only a few of the computers in the network), however when i try adding members to the builtin groups, and more specifically ...
0
votes
0answers
40 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
0
votes
0answers
38 views

Lync 2010 - Search Returns “Presence Unknown” for E-mail Address

I've inherited Lync infrastructure and my knowledge of the product is limited. This issue appears to affect only one account. Searching for the specific account on a Lync 2010 client returns ...
0
votes
0answers
19 views

SQL Client failing SSL certificate encryption under a AD Domain

I have a client machine (web server) that is attempting to connect to a SQL server. The SQL server is 2008 and has the force encryption flag turned on. Both servers are joined to the domain. The ...
0
votes
0answers
32 views

Do kerberos constrained delegation with protocol transition on IIS to another IIS need my own application for very simple redirect

Please excuse me if its a very basic question but i'm totally lost on this as Im new to IIS and kerberos delegation but have understanding of auth protocols. Need you peoples help please as i have ...
0
votes
0answers
36 views

Need set of event ids that occurs in event viewer during file creation event

I need the set of event ids that occur in the event viewer when I created a file in shared folders (auditing was enabled for the folder) in domain controllers. I know the fact that the event id 4656 ...
0
votes
0answers
23 views

SQL Reporting Denying Access to User After Move to New Group

We have a SQL Server 2008 server setup with reporting services so that users can log in and run certain reports. I have a user that was granted browse permissions to this as we had their initial ...
0
votes
0answers
28 views

How do I use simple_allow_groups with AD groups that have no GID in CENTOS 7

We just built a few test CentOS 7 boxes, and the configuration that we were using for 6.5 is not working for us. As best we can tell, it comes down to using simple_allow_groups and using AD groups ...
0
votes
0answers
38 views

SSH from Windows to Linux with certificates generated by a central PKI stored in AD

I would like to have a central PKI where certificates are issued for all sorts of services and devices as well as users. I would like to push these certificates to one or more active directories. (so ...
0
votes
0answers
37 views

RPC Ports getting reset to 5000-5002 on reboot

I've run into a very common issue with RPC Endpoint Mapper ports not being available. The default RPC ports are 5000-5002. When I edit the registry and set the ports to a wider range (say, xx100 - ...
0
votes
0answers
55 views

EFS decrypt access denied

I have a very weird behaviour here on a Windows 7 box (in AD). The user has (good boy) stored the files encrypted with EFS on his local disk. When he wants to open a file, e.g. in Word, he receives ...
0
votes
0answers
32 views

Strange behavior from demoted DC

We used to run our own domain (referred to as OLD) but are now in the process of completely removing it and using the campus wide domain (referred to as CAMPUS). We have 2 DCs still active for our ...
0
votes
0answers
40 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
0
votes
0answers
72 views

Restoring read only domain controller from VM checkpoint

I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
0
votes
0answers
27 views

Priorities or ambiguos DNS reverse zone with Bind

In my internal DNS running on Bind9 all machines are available at up to 3 different domain names, i.e. all machines are listed as machine.legacy.domain and machine.new.domain. Some machines are joined ...
0
votes
0answers
140 views

Cannot configure Exchange Server 2010 on mobile device because of “the connection to the server failed” error

I have a server with Exchange Server 2010 in a Win2008R2 domain. The fact is that whenever I try to configure Exchange access from a mobile device I get the following error in the event viewer: Log ...
0
votes
0answers
161 views

Site to site active directory for hyperv replication

We have two dedicated servers across two different sites. They host hyper v virtual machines for email hosting etc. I'd like to have hyper v do replication between them and so I have a copy elsewhere, ...
0
votes
0answers
37 views

How to get free hours of a user using EWS?

I'm trying to find the free/busy information of a user in my Exchange Organisation. I'm using GetUserAvailability operation for this purpose. This method is returning only busy and tentative ...
0
votes
0answers
39 views

Active Directory Root Permissions

We currently have way too many users in our Domain Admins group so I'm working on redesigning our active directory structure and I'm looking at the current permissions and looking at the root our our ...
0
votes
0answers
17 views

Enabling constrained delegation on DC computer account

Is it necessary to have constrained delegation enabled on Microsoft AD domain controller computer account? If yes then why and what are consequences of disabling it? I'm mainly interested in current ...
0
votes
0answers
44 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
0
votes
0answers
282 views

Unable to add Exchange mailbox for user in domain trust environment

We have a domain trust set up between two domains (DomainA, DomainB), and when attempting to add an Outlook mailbox that resides in DomainA for a user that belongs to DomainB - it fails. However the ...