A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

2
votes
3answers
53 views

How to use Group Policy to force user compliance

I need recommendations for using group policy to restrict a user's computer/network access until the user takes an action, in this case acknowledging he has read an acceptable use policy. The user ...
0
votes
1answer
27 views

unable to change environment variable using setenv()

I have an a member server with a windows PDC with active directory. Security=ads. I am trying to set an environment variable(credential cache) using C: setenv("CCACHE","cache_name",1); However, ...
1
vote
1answer
116 views

Mass updating Group Policy, may be with scripts

Sorry for long preamble and thanks in advance to one who could read it all. I have about 60 network printers. Some are in HQ, some are in distant locations (from 1 to 300 km away of HQ). Some ...
2
votes
1answer
141 views

Active Directory member servers in the DMZ [duplicate]

I want to be specific about terms. When I say DMZ I'm talking about a place where you would put servers that expose a service to untrusted networks like the Internet, or in some cases merely networks ...
1
vote
2answers
70 views

Unable to change domain password even if the password is complex

I have a problem with users not being able to change their passwords. When they try to change the password, they get this error: "Your new password does not meet the length, complexity, or history ...
0
votes
1answer
20 views

How to recover default background of domain computers

I have set a default logon screen for computers on a WinSrv 2012 , but for some stupid reason have ticked the "Remove this item when no longer applied", and now I was re adjusting the policy and after ...
0
votes
1answer
266 views

Security-Kerberos Error, event ID 4

I have two new Domain Controllers on new Forest. Servers have DFS and IIS services installed. Everything seemed to go Ok for a While. After updating servers I got new errors. Now once in hour ...
0
votes
1answer
42 views

Active Directory multi-site “trust proxy”

We have a multi-site domain with several sites in a hub and spoke-design. From the hub site, we have established a one-way trust to another domain though a VPN tunnel. Now, when someone from the ...
1
vote
2answers
45 views

Active Directory and usage of Sites

I have been reading through the AD articles in here and still have a fog going about Sites compared to Child Domains. I have been using a Windows 2012 R2 Domain and Functional level to manage a mini ...
2
votes
1answer
25 views

Configure startup programs for a user AD-wide

Sorry if this has been asked before, neither the search feature here, or Google was of any help. I'd like to configure startup programs for my own AD user that run whenever I login on any computer in ...
1
vote
2answers
287 views

Windows server 2012 Active Directory VS Windows server 2008 Active Directory

I want to do a test to compare "Windows server 2012 Active Directory" and its earlier version "Windows server 2008 Active Directory" in performance and functions. My question is, where should I start? ...
0
votes
2answers
77 views

Active Directory Users Delegated Permissions

This is probably a dumb question, but how does the delegated user access ad to make these changes? I have set this up but a user cannot launch the active directory users and groups tool. Only admins ...
-2
votes
1answer
28 views

Migrating an Active Directory hub and spoke workplace to an Office 365 and a cloud AD solution

Hi Serverfault / Stack Exchange Community, I was looking for a few points of view on a solution that I am working on for a SMB to be more mobile that is about 40-50 people in size. They are ...
1
vote
1answer
46 views

Domain names on 2 similar windows domains (active directory)

I am fairly new to windows administration (Server 2008r2), but I am putting together a new environment, and am setting up active directory domains. I have broken my system into 2 parts, management ...
0
votes
1answer
114 views

Can a base DN for LDAP queries be a group DN?

I am trying to do LDAP integration for user authentication in HP NNMi. (NNMi on RHEL6 to Active Directory on W2K8 R2) I know I can get it to work if I use the OU that my users are in as the base DN ...
3
votes
1answer
221 views

How to remove an orphaned Child Domain on Server 2012

I have a domain (working on Server 2012 functional level) and multiple child domains. I'm really stupid and therefore deleted the only domain controller on the child domain before demoting it and ...
1
vote
1answer
54 views

Do Explicit Deny ACLs apply to a Domain Administrator account?

I've had a need come in a client with a two way trust (source company doesn't want us to have full admin rights, so we're having lots of permissions issues). We effectively need Domain Admin rights ...
1
vote
1answer
87 views

authentication error on WS2012 (trust relationship failed)

Given the following lab setup: HOST1 on Windows Server 2012 R2 (host running Hyper-V, joined test.local domain, static IP) DC1 on Windows Server 2012 (VM under Hyper-V on HOST1, AD and DNS roles, all ...
4
votes
1answer
69 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin ...
-2
votes
2answers
41 views

Place Date in Description when moved to different OU [closed]

I am not sure if this is possible, but i am wondering if i could create a powershell script that would move any/all users listed in a CSV file to a different OU and add the date in the Desription ...
0
votes
0answers
85 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
2
votes
2answers
50 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
4
votes
1answer
184 views

DNS settings for DCs in remote sites

I have our main DC here at the main site acting as the DNS server by itself, I have plans to put an additional one later. This is how its IP is configured DC1 IP: 10.10.5.201/24 Preferred DNS: ...
0
votes
1answer
51 views

How to deny access on files to several groups easily?

Currently I'm working with permissions on files on the network with Windows Server 2012 Active Directory as follows: I set up one domain controller, on the domain controller I create users and groups. ...
-1
votes
2answers
99 views

Add user to a group in Active Directory using powershell

I am trying to add a user to a group in AD using powershell. I am using the following command: Add-ADGroupMember -Identity ...
2
votes
0answers
65 views

Adding multiple users from a group to an Active Directory group using Powershell

I have a powershell script that is supposed to go through a specific ou and store the groups into a variable $groups. Here is the code I use in the script: $Groups = Get-ADGroup -Properties * ...
2
votes
1answer
55 views

ADDS: Mandatory Profiles through powershell

Intro I'm a networking student from Belgium and I just got assigned a big project. Basicly i'm responsible for the ADDS. We have to create several OU's and every OU needs at least 20 users or more. ...
1
vote
0answers
67 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
0
votes
0answers
76 views

SoftEther VPN not allowing clients to connect using AD credentials

We are trying to get SoftEther VPN to work on a SBS 2003 domain but it is rejecting apparently valid user credentials. (The server application is running on our actual SBS 2003 domain controller and ...
0
votes
2answers
93 views

How to setup DNS correctly for computers inside a domain?

Suppose we have the following situation: there's one network with a router on which the internet access is configured and this includes the DNS IP's. Then we set up Active Directory on a server on ...
1
vote
2answers
112 views

Getting All Users From Active Directory Groups Using Powershell

I have a powershell script that I've written that gets all of the groups from an OU and stores them in a variable $groups. I want to be able to access the users of each group but seem to be having ...
0
votes
0answers
106 views

How can I Deny permissions to logon to Remote Desktop Session Host server in powershell script?

I am need of some assistance please. I am a system admin and I am trying to create a script that will assist with the tedious tasks I have to do with disabling a user that no longer works for the ...
0
votes
1answer
58 views

Exchange Server 2013 EXPR Section missing from autodiscover

We have a client who is having an issue with their autodiscover. They have an Exchange Server 2013 with CU1. After attempting to run an update on the server (Win 2k8R2) I needed to revert the ...
1
vote
0answers
26 views

DNS query from active directory is reaching reaching firewall in the same subnet

DNS query for root dns from active directory is reaching firewall which is in the same subnet. Default route for this active directory is L3 router which has no route to firewall unless traffic is ...
2
votes
4answers
143 views

How to get Microsoft license authentication for all machines on a network?

We have a small network (~150 desktops, ~20 servers) much of which is Linux. MS keeps wanting to audit our MS products every 3 years or so. I really don't have time to go around to 80-90 desktops and ...
0
votes
1answer
28 views

Why must a previous computer name be removed from directory before the workstation can join with new name?

Sorry if the question is convoluted and it's difficult to search in case it's a duplicate question. I don't have keys to the castle, so as a low level tech I was wondering why I was unable to leave ...
0
votes
2answers
55 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
2
votes
2answers
114 views

Importing users to AD with CSV, cannot get some fields to work

Been trying to build a CSV file to import users into Active Directory. I can get everything to populate, except for E-mail, Password, and Enabling the user. Just using this cmdlet in Powershell. ...
0
votes
1answer
379 views

WS 2012 r2 DNS server issue: Access was denied

I have a Windows Server 2012 r2 virtual machine as DC1 and DNS server running on Windows Azure and a Windows Server 2012 r2 local machine as DC2, DHCP and DNS server on-premise. I found my DNS server ...
0
votes
0answers
14 views

How to authenticate RHEL 6.6 to Windows Server 2012 Active Directory and LDAP? [duplicate]

Need help with setting up LDAP on Windows Server 2012 R2, I have AD setup already, but not sure what all I need to do to get LDAP running. Then I can't find any good resources online to authenticate ...
0
votes
2answers
123 views

Active Directory: Track old password changes and expiry dates?

Is there anyway to find out when the last 2 passwords changes were made for an account? I reset a account password but I want to know if it already changed hours or minutes before I reset. OR maybe ...
4
votes
2answers
892 views

How to check who reset the password for a particular user in active directory on a windows server?

I have the details about a user account when it was last modified (a password reset was done). But I would be interested to know who reset the password for this user. Is there any way I can find this ...
3
votes
1answer
51 views

Centralizing Remote AD DCs?

Background: I'm one of two IT people managing five libraries (all part of the same library system), and each library has been set up with their own AD DC. I'd like to centralize this. I'm assuming I ...
0
votes
1answer
78 views

Group Managed Service Account (gMSA): get authorized hosts / install-adserviceaccount unknown error

After having successfully created a Group Managed Service Account (gMSA) using the command below: add-adserviceaccount -name gmsaAccount -PrincipalsAllowedToDelegateToAccount gmsaGroup -DNSHostName ...
6
votes
1answer
66 views

Any danger in copying latest ADMX (& lang files) into AD Central Store?

Is there any danger in copying the newest set of ADMX templates into my AD Central store (overwriting the old ones)? I've already upgraded my schema and copied one ADMX file in to add the new Windows ...
0
votes
0answers
63 views

What is the authentication flow when Exchange 2013 proxies to Exchange 2010?

Issue Outlook users, who are on LAN, and have an email address that is different from the UPN get prompted for authentication. Topology 1,000 clients connect to a central DAG & CAS array on ...
0
votes
1answer
120 views

ADFS without domain

Is it possible to run a ADFS 2.0 without connecting the server to a domain? We are using Shibboleth as claims provider, so we actually don't need active directory here. We manage to setup the ADFS ...
0
votes
0answers
41 views

WES09 Client not registering with dns suffix

I have HP thin clients, some running Windows Embedded Standard 2009, and some running WES 7. They are all getting DHCP addresses from our Server 2012 R2 DHCP server, with AD integrated DNS. With both ...
0
votes
0answers
55 views

Unable to view trusted domains in ADUC

My domain is Server 2003 (domainA) and the remote domain is Server 2008R2 (domain functional level) (domainB). At some point in the recent past, I lost the ability to view domainB (ADUC -> open a ...
1
vote
0answers
72 views

DNS Server gone and now I get Zone Not Loaded by DNS Server

We have several domains in our infrastructure, separated by differing subnets (obviously). From our primary domain (call it domain A), we have a DNS forward lookup zone to domain B (which consists of ...