A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
74 views

Cross Domain NTLM / Kerberos Auth with Chrome on Mac OS X / Linux

I'm trying to configure Chrome on my MacBook Pro to use kerberos to authenticate to web sites so I don't get prompted to enter my username and password constantly. I've added the AuthServerWhitelist ...
0
votes
0answers
30 views

openldap ppolicy users login Access denied

I'm having trouble logging in User created after following steps from Youtube link https://www.youtube.com/watch?v=_ZvnNVwWk-M&list=PLrUFyg1unBb8n0SJxJqQYMo9kRcY2Mly0&index=7 This video ...
3
votes
1answer
65 views

Re-join same computer to Windows domain without domain admin privileges

Is it possible to have a previously domain connected client computer re-join a Windows domain after a clean re-install of the OS, to assume again it's old identity, all without the explicit say-so of ...
0
votes
2answers
54 views

Safe guarding against a duplicated test AD environment if it connects back to production

This article explains what a simple process it is to duplicate your AD setup to a test machine in an isolated network. The obvious issue is that if the isolated forest gets physically connected to ...
7
votes
1answer
354 views

DNS security & .com AD Domains, What are the dangers to my AD Domain if someone squats my public .com domain

I am aware that best practices currently dictate that my Windows AD Domain name should be a subdomain of a purchased, globally unique namespace (ie ad.namespace.com). That's just fine and dandy. My ...
1
vote
1answer
84 views

Mapping One Network Drive On Multiple Computers Via The Same AD Login Credentials

OS: Windows Server 2008 R2 SP1 So say we have one user that has a mapped network drive on his computer at work. This user also maps the same network drive on his personal laptop to work from home. ...
0
votes
1answer
148 views

Opensource alternative to MS Active Directory

As part of an undergoing IT infrastructure building, I need to implement LDAP directory using opensource communities backed solution. I'm not pretty sure about Openldap and Samba. Do they offer ...
0
votes
1answer
67 views

Understanding Microsoft Server 2012 R2 service account

I come from a unix background and is trying to managed some Window Servers right now. I cannot grasp the concept of the different service accounts available and what they are used for. During the ...
0
votes
0answers
24 views

Upgraded Wintel Environment from 2003 to 2012R2, now only 2 Win10 clients can't see network shares or print, all other 78 W7Pro can

Over the last week I've migrated all of our services running on Server 2003 to our 2012R2 environment successfully. This included: AD, DHCP, DNS, Print server, File serving using the migration tool, ...
1
vote
1answer
93 views

rundeck unable to auth against Active Directory

I'm trying to setup rundeck so that it authenticates against Active Directory I keep getting this error The wiki contains information about the 403. Reason: !role error ...
0
votes
1answer
25 views

azure active directory services - mydomain.lan will it work?

I'm looking at using azure active directory domain services to replicate our accounts upto Azure in order to be able to use our local domain accounts to authenticate against services like dropbox, ...
0
votes
0answers
26 views

debian active directory join issue

I have interesting issue. If I install debian with preseed file, Cant authenticate AD. but If install debian with manual installation I can authenticate AD AD Server : Windows Language : English ...
3
votes
0answers
79 views

How can I programmatically unbind IPv6 from a network interface on a Windows 7 machine?

I need to unbind the IPv6 services from a number of client workstations running Windows 7. ("Untick" the selected box in the screenclip below.) For what it matters, they currently all have a ...
21
votes
4answers
4k views

Accidentally deleted entire Active Directory [closed]

While re-partitioning a Server 2003 R2 domain controller, we accidentally deleted the partition that held the Active Directory database folder (D:\AD\Data). The D:\ was a partition on a disk shared ...
0
votes
0answers
53 views

pam_sss(sudo:auth): authentication failure

I'm having some CentOS 7 machines joined a windows domain with the following steps: #yum -y install realmd sssd oddjob oddjob-mkhomedir adcli samba-common #nmcli c modify eth0 ipv4.dns 192.168.3.18 ...
0
votes
0answers
24 views

Single LDAP Query that returns usernames starting with “X” on multiple different containers

I have an assignment to send a daily report of users starting with "X" (or whatever) on multiple different containers (ContainerA, ContainerB, ContainerC). I could simply create a Saved Query for ...
1
vote
1answer
26 views

Best client server protection [closed]

I have around 80 laptops connected to Active Directory server.(Windows Server 2008 r2). Currently all the laptops have Avast free antivirus on them. Is there any way I can check for unprotected ...
2
votes
1answer
141 views

Cannot create new users in Active Directory (Using Samba4 as DC and AD)

I setup Samba version 4.1.17-Ubuntu as domain controller and active directory, and everything seemed to go smoothly, but when I try to use the administrator account on one windows 10 PC domain member ...
0
votes
1answer
74 views

Cloning Windows 2012 R2 domain controllers with KVM

Virtual domain controller cloning is a new feature from Windows Server 2012 that I use because it's a very useful and simple way to add additional domain controllers to an Active Directory domain. ...
-1
votes
2answers
57 views

Subversion access control for repo sub-folders

Platform/Versions: Windows Server 2008 R2 Std SP1 (64 bit) CollabNet Subversion Apache 2.2.23 (win32) CollabNet Subversion Client Svnserve V1.7.8 Authentication using SSPI (active ...
1
vote
0answers
70 views

MS Active Directory with Google Authenticator

I am currently designing our new internal IT services, including IAM and e-mail. We currently use more or less no IAM or single sign-on solution. We have a WordPress based website, postfix + dovecot ...
-1
votes
1answer
206 views

dcpromo prerequisites for Active Directory preparation failed

Cannot promote a new Server 2012 R2 server to domain controller on an existing domain. The prerequisites check fails. Verification of prerequisites for Active Directory preparation failed. Unable to ...
0
votes
2answers
55 views

Are there any specific tools for troubleshooting Domain Controller & Client connectivity?

I am setting up a test rig on Amazon Web Services comprising of 2 web servers, 1 database server and 1 domain controller. All the servers are Windows Server 2012. I have had random occurrences of the ...
4
votes
2answers
148 views

“Disable machine account password changes” Group Policy setting - when should it be enabled?

I am setting up a test environment on Amazon Web Services comprising 2 web servers, 1 database server and 1 domain controller. All of them are Windows Server 2012 and joined to the domain. ...
4
votes
2answers
179 views

Do Linux servers using AD/Kerberos for authentication/authorization need computer accounts?

I am confused about whether Linux servers using Active Directory (AD) and Kerberos need computer accounts created? Does the Linux server as a machine need to join and AD domain and in doing so have a ...
0
votes
1answer
48 views

In Active Directory Users and Computers, can you display the DNS name instead of NetBIOS?

In Active Directory Users and Computers, the computer names are listed as their NetBIOS (Computer name) names not their DNS or the computer name that is actually used for the machine. So in ADUC the ...
1
vote
1answer
93 views

2008 / 2012 r2 mixed mode upgrade

We're planning to upgrade our ad infrastructure from 2008 R1 Standard to 2012 R2. In the past when adding domain controllers you changed the functional level to mixed mode, then after removing old ...
3
votes
1answer
83 views

ADFS 3.0 Need Powershell command to remove Homelink

I am working on a Microsoft Windows Active Directory ADFS 3.0 (2012 R2 specifically) server. I was testing the Set-AdfsGlobalWebContent -Homelink and -Homelinktext options. I'd like to now ...
1
vote
1answer
150 views

Displaying an Business 2 or Notes field in Outlook contact card company wide?

A manager in our organization wants a quick and easy way to see a person's extension number when he looks at the contact card from office (the small one that appears when you hover or a name not the ...
1
vote
2answers
151 views

Servers unexpectedly change to BDC on AD? [closed]

I've got two AD virtual machines runnning on HyperV. AD1(PDC) syncs its time with pool.ntp.org and AD2(BDC) syncs with AD1 to get the time correct. Both are windows server 2008 servers. This worked ...
0
votes
0answers
24 views

Copy specific entries from Active Directory to Openldap

I am handpicking some entries from Active directory and I want to populate it to openldap. The entries are somethings like dn, cn, unix attirbutes like uid, gid, memberrOf, manager, phonenumber, etc. ...
0
votes
1answer
74 views

Importing ExtensionAttribute via CSV with Powershell

I am trying to populate the attribute ExtensionAttribute7 with a CSV file. The CSV file has two columns: samAccountName and ExtensionAttribute7 I import the Active Directory module and have been ...
0
votes
1answer
27 views

Run service under AD account

I am trying to run a custom service (made in visual studio) on a networked applications server that has been joined to a domain. I would like the service to run under a very specific account ...
1
vote
1answer
273 views

OpenLDAP and pGina vs Active Directory (Using Samba4 Domain Controller)

Note: I know there are some questions talking about similar topic, but they were all a couple of years old, therefore I prefered to mention my exact situation to get the most proper solution according ...
2
votes
1answer
104 views

How can a Windows user change the initial password from the command line in a remote domain?

We have Windows 7 desktops and a Windows Server 2012R2 server. I have a user who needs to map a network drive which is on a server in a different AD domain from ours (over the WAN). I have created an ...
-5
votes
1answer
39 views

Dc Replication issue when on one of the Dc moved to another location [closed]

We have one Domain controller in Dallas office and other 2 in Chicago. An administrator in Chicago moved 1 domain controller to Salt lake, now the problem starts here Chicago location and salt lake ...
0
votes
0answers
40 views

LDAP Cassandra OpsCenter Configuration With AD

I have an OpsCenter that I need to connect to AD. The relevant configuration below: [authentication] enabled = True authentication_method = LDAP audit_pattern = ldaplog [ldap] server_host = ...
6
votes
4answers
336 views

What are Site Link Bridges

I have never understood what a Site Link Bridge actually does, and from all the conflicting info on the web it seems almost no one else does ether. But according to this guy (pretty reliable video ...
0
votes
1answer
101 views

Microsoft Active Directory Certificate Services Response from certsrv

I am trying to use certificates and private keys on embedded systems that were generated from Microsoft Active Directory Certificate Services . NDES and SCEP are currently out of scope so it will need ...
0
votes
0answers
15 views

What are these ACS containers under my subnet objects?

I have ACS folders under my subnet objects in sites and services. Did some googling and now I'm more confused. Apparently this is Windows QoS Admission Control Service- which is Windows ...
0
votes
1answer
73 views

Is there a way to mount a Windows CIFS share and bypass the password prompt without a password file?

I'm trying to mount a Windows cifs share (shared by Windows) onto a CentOS box, per user. Users are all in Active Directory. So, every user who logs into their Linux box should be mounting the drive ...
0
votes
0answers
82 views

How to run PowerShell ActiveDirectory command Get-ADObject over SSL

To query AD DS or AD LDS, I can successfully run the following Powershell commands: get-adrootdse -server 'localhost:389' get-adobject -server 'localhost:389' -searchbase 'dc=test,dc=com' ...
0
votes
2answers
117 views

Cannot run SAMBA (DC) and OpenLDAP, (The port is being used)

I installed samba and made it a simple domain controller, and I intend to set it to make the authentication over OpenLDAP. The problem is I can NOT run both slapd and samba processes at the same time. ...
0
votes
0answers
13 views

Are application partitions considered naming contexts?

This might just be semantics, but MS docs always seem to refer to NCs as the original Schema,Configuration,Domain Naming and then application partitions separately. Aren't application partitions ...
1
vote
1answer
27 views

Is _msdcs a separate application partition?

I have read in MS docs that by default DomainDnsZones.domain.com and ForestDnsZones.domain.com app partitions are created when dcpromo is run on the first DC in the forest. Isn't _msdcs not also ...
3
votes
1answer
42 views

Exchange 2010 address location

Can someone tell me where Exchange 2010 stores e-mail address information? Has it moved from the proxyAddresses attribute in ActiveDirectory? Does "(Get-Mailbox).EmailAddresses" give the same info ...
1
vote
1answer
39 views

ActiveDirectory LDAPS third-party certificate and internal names

I have an AD RODC running on Server 2012 R2 Core in my perimeter network. I am using this for external/hosted applications that can do LDAPS based auth. My problem is that the FQDN of the server is ...
1
vote
0answers
101 views

Radius server not responding to EAP requests

We are trying to setup a wifi environment using WPA2 security using Radius server and AD authentication. We've set up the radius server using the following guide: ...
1
vote
1answer
56 views

Join Computer to Domain with Seperate Active Directory and DNS Servers [closed]

I'm trying to understand how to join a client to a Windows domain that has a separate AD and DNS server. I have installed one server with the AD role and one server with the DNS role. Even if I ...
0
votes
1answer
38 views

how to fetch details from multiple domain

I am trying to create AD report in html via powershell but unable to fetch details from multiple domain, below is my code, # HTML Style $a = "<style>" $a = $a + ...