A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
1answer
67 views

“HTTP 503 - Service Unavailable” when trying to access ADFS password change page from an external network

I'm using ADFS 3.0 federated domain (SSO with Office-365) and I've successfully set up the password change page to work from any workplace joined device. I'm currently trying to set it up to be ...
0
votes
0answers
22 views

Active Directory DDNS update with a DNS Hidden Master

Active Directory queries DNS server for a SOA(master DNS) record before sending out Dynamic DNS updates to the master DNS. Would AD still work if we set up a hidden master for DNS ? Usually Hidden ...
1
vote
0answers
15 views

ADSI Editor modifiedCount explanation [closed]

I would like to adjust the properties for my DC in ADSI Editor but I'm not sure what the "modifiedCount" property means. I couldn't find documentations online to explain this. Would appreciate your ...
0
votes
1answer
29 views

AWS Server 2012 R2, adding clients

I have a AWS machine running MS server 2012 R2. Setting up as a domain controller. I have both public and private IP address associated with the machine. the internal network is on 172.xxx.xxx.xxx ...
1
vote
1answer
72 views

Clients can't update dNSHostName attribute after DNS suffix change

We have a bunch of Windows 7 and Windows Vista clients that belong to domain contoso.com. The clients are registered in DNS to client.contoso.com. We have changed the DNS suffix via GPO from ...
0
votes
0answers
26 views

Active Directory Corruption

We are looking at the topic of DR at the moment and I would like your expert help in the creation of a DR plan in the event that our Active Directory somehow becomes corrupt. We have 4 domain ...
0
votes
1answer
55 views

multi instance failover clustering (sql server)

just want to straighten my concept properly - when we are talking about SQL multi instance failover cluster, e.g. on a 2 node cluster, it means that each node can run its own sql instance, but each ...
-2
votes
1answer
54 views

How to Map Network Drives Using Logon Scripts & Group Policy Objects? [closed]

I want to know how do I map network drives using the logon script method and the group policy objects method? If anyone could post me a in depth answer for going about these methods and explaining the ...
1
vote
1answer
37 views

Windows Security Policy not Updating - Admin templates work fine

I have a domain with a mix of physical and virtual servers. Some time ago another admin may have performed some manual scripted updates at the client level that are now preventing changes in the ...
0
votes
2answers
77 views

Server 2008 R2 PS script cannot update Active Directory

I have a Powershell script that updates users attributes in Active Directory that runs just fine from the PowerShell ISE. However when I try to run the script as a scheduled task it cannot access ...
0
votes
1answer
43 views

Powershell command regarding AD groups

We have a security group, SQL DBA. I need to know all servers that are part of this group. Is this possible? I'm a backup admin, just starting to learn AD/Windows, so apologize if its a stupid ...
1
vote
1answer
32 views

Authenticate Users based on AD group membership. Ubuntu 14.04 , Cant find help anywhere

Been Googling for two days now. I am not new to Linux, but am new to AD and using it in Linux. So. I have an AD system ( not run be me ) and its joined happily. I followed this procedure: ...
2
votes
1answer
67 views

When I add users to a Security Group using Powershell, they don't show up in AD

I have a script which has the following for adding users using a CSV file, in Powershell. Windows Server 2008 R2. looks like this: Import-Csv "C:\Users\me\Desktop\users.csv" | Where-Object {$_.Name} ...
0
votes
1answer
39 views

Active directory domain owned externally by third party

I've inherited a network where the .com domain name used by active directory internally is owned by a completely unrelated third party externally (Along the lines of companyint.com). This AD domain ...
1
vote
0answers
123 views

Multi-Factor Authentication on Windows Domain [closed]

In our network, we have a couple of Windows machine (server/desktop) configured in order to be part of a domain MYDOMAIN.BIZ under Active Directory. Some sample login scenarios are as follows: ...
-2
votes
1answer
42 views

Active directory overwriting existing computers [duplicate]

while adding another user with same computer name active directory i overwriting old one. Is there any way to prevent this? I mean can i get some message or access denied when i try to add second ...
2
votes
1answer
26 views

2000 member server, 2003 FFL/DFL, only 2012 DC [closed]

I have a 2000 member server in a 2003 FFL/DFL domain with a 2003 DC. I'm hoping to stand up a new 2012R2 DC, transfer fsmo roles and demote the 2003DC. If I keep the FFL/DFL at 2003, will the 2000 ...
0
votes
0answers
17 views

Tomcat 7 auth constraint role name active directory

I integrated waffle into my tomcat 7. I need to define the users in the active directory group that can visit the site, web.xml looks like: <security-constraint> <display-name>not ...
-1
votes
1answer
112 views

Need Required Active Directory Ports for Isolated Environment

We have a 100% isolated environment that needs to communicate with our AD infrastructure outside the isolated environment. I need to know all the ports and whether they're incoming or outgoing. These ...
-1
votes
1answer
101 views

Windows Server 2012 R2 DNS internal and external records issue

I am running into an issue with with DNS on Windows Server 2012 R2 acting as Active Directory domain controller AND DNS server I want to be able to setup certain records that will resolve internally ...
-1
votes
1answer
31 views

Active Directory Authentication from the Internet [duplicate]

I need some help finding a good solution to this problem. I know AD just fine, but admittedly, I'm not an expert. And I know I don't want to expose it to the internet... I inherited a workforce at my ...
3
votes
2answers
196 views

Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain

I'm using federated identity for Office-365 single sign-on. I have added the password change endpoint to my ADFS 3.0 server, and successfully opened the adfs update password page. However, whenever I ...
0
votes
0answers
70 views

Cannot log into Windows Server 2008

I am running into an issue with my Windows Server 2008 machine. I have an Administrator account with 2 active directory users. However, recently I cannot log into ANY of the accounts locally on the ...
0
votes
0answers
48 views

Very Corrupted User Profile Always Logs in as Temporary

The server side version of one of our database administrator's profiles managed to become corrupted over time. It is currently logging into a temporary profile on various servers. We are using Server ...
0
votes
0answers
21 views

domain user added to local admin group denied permission when not connected to domain controller

I have a windows 7 computer that was joined to a domain that is no longer available. It still has a domain user account with a cached domain login credential (i.e., I can still login using my domain ...
1
vote
2answers
96 views

Migrate to new Exchange 2010 server in different AD site

We currently have a domain with two AD sites. Site A has one Exchange 2010 server which currently holds all the mailboxes. I set up the new site, Site B, and it is connected via site-to-site VPN. Site ...
0
votes
1answer
30 views

DHCP reservation with virtualized AD DS

My main purpose is to provide SQL Server Analysis Services (SSAS) on a single physical machine running on say cloud provider premises. Just a remote box that should be accessible worldwide through ...
0
votes
1answer
26 views

Added second Exchange 2010 server, getting delivery delayed to external users

We have on Exchange 2010 server in our domain, on-premises. We added a second Exchange 2010 server in our cloud environment, which is also part of our domain and connected with a site-to-site VPN ...
0
votes
1answer
130 views

Cannot Join Client Computer to Server Domain (Windows Server 2012 r2)?

I'm having trouble with trying to join my client computer to the server domain. My client is Windows 7 Professional and the server domain OS is Windows Server 2012 R2 Standard. I tried the usual ...
1
vote
1answer
50 views

Push batch script to AD clients

Is it possible to force Active directory clients to run a specific batch script now (without having to restart their computer) ?
7
votes
1answer
177 views

Error promoting 2012 R2 server to domain controller on 2003 domain

When attempting to promote a 2012 R2 machine as a domain controller on a 2003 forest\domain level domain I get the following error when it goes through it's adprep and forestprep procedures: ...
1
vote
1answer
43 views

WIFi Authentication with Windows Active Directory [closed]

What would you recommend for scenario. Office with 100 employees multiple device platforms(Apple , Windows and Android). Existing Windows Active Directory on Windows 2008 but not all devices use this ...
0
votes
0answers
33 views

Samba4 AD with MS Excel 2013 locks file with hyperlink to itself

I work on a mid-size company where last month we implemented an Active Directory using Samba 4 on Linux Arch. We have not had any problems at all until today. The problems come when any user creates ...
0
votes
0answers
15 views

ec2 update active directory domain

I have a curious one on hand. We have a CloudFormation template that contains an Active Directory (a domain controller) and a remote desktop gateway server as well as a number of other servers. It is ...
0
votes
0answers
29 views

Become domain administrator

C:\>repadmin /showrepl ... DsReplicaGetInfo() failed with status 8453 (0x2105): Replication access was denied. Seems to be used only with DOMAIN\Administrator. Can user of groups [Domain ...
0
votes
0answers
26 views

Windows Authentication in a Parent-Child domain trust relationship

I have setup Windows Authentication for my application. I have 3 domains (xyz.com, abc.xyz.com, def.xyz.com). The domains have a two way trust setup between them. For setting up Windows Authentication ...
0
votes
1answer
32 views

New User Authentication to Azure Active Directory Portal

We're getting AD setup in our environment, so I have most of my users imported with requirements that they must change password at next logon. We're using Azure Active Directory (Premium). I want ...
-1
votes
2answers
79 views

Windows Server 2008R2 Active Directory Apply GPO only when connected to domain

We are trying to apply a SSID Restriction policy for computers where i work. We created a GPO which applies to computers in an specif OU without any security or WMI filters We want the computers to ...
0
votes
0answers
23 views

Group Policy Scheduled Task not asking for password

I'm trying to deploy a scheduled Task to our Servers via GPO, but something doesn't seem quite right. I want the Task to be run with a Service account, wheter the user is logged on or not. I know that ...
0
votes
0answers
26 views

Deleting two-way trusts in Windows AD

I want to remove two-way trust using netdom trust command on Windows Server 2012 r2, I am using "Run as Administrator" command prompt but still getting "Access Denied" Here is my command netdom ...
0
votes
1answer
54 views

linked mailbox ADSI Edit

I have a clean up task to do with my Exchange 2003/07 environment. The set-up is as follows: domain controllers - ( 2003, 2012, 2008) Domain Function Level is: Windows Server 2003 Server 2003, ...
0
votes
0answers
11 views

Windows 7 Not Showing Shared Folders Properly?

I have a shared folder set up on a network with multiple Windows 7 64 Bit machines. This is pretty random, but a couple of machines aren't "syncing" well: What I see on the machine is sometimes ...
1
vote
0answers
20 views

ActiveDirectory Samba4 SMBHome authentication error

I have a samba4 server up and running providing an ADC. One OS X machine joined this AD and is configured to use the UNC path for the home directory, but the login failed because automountd fails to ...
-1
votes
1answer
54 views

Can not promote server to domain controller because required ports are already in use

I have a Fresh Windows Server 2012 installation and installed all the Active Directory stuff. Now the Server Manager says that i need to "Promote this server to a domain controller." But when i do ...
0
votes
2answers
99 views

Multiple OU User Search for OpenVPN Server with AD/LDAP Authentication

I have an OpenVPN server that authenticates against a single AD domain. Here is my auth-ldap.conf that is used with OpenVPN <LDAP> URL ...
1
vote
1answer
52 views

Exact process that locks account?

I'm having trobule at work with an AD account (let's call it USER A) that keeps locking out all the time. Using ALTools I figured it out the computer where the lockout is coming from, it's a 2008 R2 ...
0
votes
0answers
45 views

How to integrate Debian 8 LTSP in Active Directory with realmd

I'm french student (please sorry for my english :) ) and actualy i'm trying to integrate thin clients in Microsoft network. To use thin clients on this network I need to join my LTSP server to the ...
0
votes
1answer
371 views

Could not get domain controller name from machine

While validating a Failover Cluster over two member servers I get the following two errors: Connectivity to a writable domain controller from node SQL2.domain.com could not be determined because of ...
2
votes
0answers
40 views

group policy being applied from offsite Domain Controller: why?

Site 2: I have a small branch with 1 DC and 4 clients. Site 1: Meanwhile my main branch has 2 DCs and lots of clients. I made some GP changes on DC-site2, and I was wondering why they weren't ...
1
vote
0answers
68 views

How do I ad Active Directory Schema to a MMC?

I have a Windows 2008 Small Business Server I wish to retire. Currently it holds the FSMO roles. When I go to add the Active Directory Schema snap-in to a MMC, so that I can transfer it to a new ...