A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

learn more… | top users | synonyms (2)

2
votes
0answers
61 views

Is it possible to use Active directory without a trust relationship for FreeIPA passwords?

I am looking to integrate FreeIPA with an Active Directory environment that I do not have full control over and most likely will not be able to get a trust relationship setup with my FreeIPA install. ...
1
vote
1answer
197 views

Check If A Service Account Has Logon Interactive Privileges

I want to loop over all my domain service accounts and make sure that people can't log on the server using that account. How can I check if a service account has interactive logon privileges and/or ...
1
vote
1answer
302 views

how to create a folder on desktop everytime a new user is created?

How can I configure the system so that whenever I create a new user, and automatically available on her/his desktop a directory called "project"?. Is there something related to C:\Users\Default??
10
votes
1answer
108 views

How many FSMO roles are there?

I've always understood that there are five FSMO roles, but sometimes I see something that says there are seven. How many are there, really?
4
votes
2answers
76 views

every 5th AD query is very slow, why?

I’m binding a FreeNAS box to AD for student logins to SMB mounts. That all works fine. I have a bash script that runs on the FreeNAS to build an index.html page pointing to a subdirectory of each ...
2
votes
1answer
83 views

Manually (re-)create Active Directory schema objects msExchRecipientDisplayType and msExchRecipientTypeDetails from Exchange on Samba AD

Somehow, my Active Directory has "lost" (at least) 2 objects from the schema. msExchRecipientDisplayType and msExchRecipientTypeDetails are what I need to recreate. I believe they were lost, because ...
0
votes
1answer
33 views

Windows security event log showing lot of firewall rule changed alert

n my server i am getting lot of event id 4946. A change has been made to Windows Firewall exception list. A rule was added. i am getting this alert every day. can you help me to reslove this. Regards,...
1
vote
1answer
422 views

OmniOS r151018 file server visible in samba4 Active Directory but not in Windows Network Neighborhood

I have a test setup containing: 3 AD domain controllers (set up to replicate between them), all running Samba 4.3 on Univention Corporate Server 4.1 1 Windows 7 SP1 client joined to the domain 1 ...
0
votes
0answers
14 views

Windows 7 delete fingerprint from profile

I'm facing the following situation: I have a computer, joined to an AD with roaming profiles and with fingerprint logon enabled. A problem with a user profile had me delete the said profile and ...
0
votes
1answer
122 views

Group Policy Object not applied to client computer

I am taking over our entire Microsoft based management, this includes our AD servers, GPOs, etc. So with that being said, I don't know everything about how this setup is configured. However, I have ...
0
votes
0answers
61 views

Trying to add user to Active Directory via ldapadd using the admin user fails with INSUFF_ACCESS_RIGHTS

This is the ldif file I'm trying add: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith displayName: John_Smith sAMAccountName: jsmith ...
1
vote
2answers
144 views

Add AD entries using ldapadd failing with “unwilling to perform”

I'm trying to add entries to an Active Directory using ldapadd. Here's my ldif file: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith ...
0
votes
1answer
39 views

Restrict Group Membership for users not from particular OU

I need to configure two type of users that can administer AD users and security groups: Type 1 - Can only create users within particular OU. Type 2 - Can only change group membership of users ...
4
votes
1answer
145 views

Suggestions For IT Staff Delegation

looking for some suggestions or tips on how to setup our IT admins with delegation and server access. I started at a new organization and saw that every IT staff member is a domain admin. Looks like ...
1
vote
0answers
45 views

How to find out why joining a NAS to AD running on Samba 4.4 / Debian fails?

I am currently trying to join a Seagat Black Armor 220 NAS to my Active Directory Domain (2008_R2) controlled by Samba 4.4 running on Debian Jessie. But this will fail all the time giving me the ...
1
vote
2answers
71 views

Recover deleted mailbox and user- no AD recycle bin

I deleted a users mailbox in the ECP- AD user was of course also deleted. The recycle bin is not enabled. Is the only way to recover the user and mailbox with an authoritative restore?
1
vote
2answers
82 views

Setup Domain Trust fictitious domains on dynamic IP's with Windows Server 2008 R2

Have a customer with two separate offices / companies, eg: domainone.local (Windows Server 2008 R2) domaintwo.pvt (Windows Server 2008) Each office has a dynamic IP when connecting to the internet. ...
2
votes
0answers
64 views

Group Policy - Not automatically running on all machines

We are facing an issue on one of our domains where machines are not all running group policy refreshes at its default interval. I am not seeing the 1501 events logged in the system log, I occasionally ...
3
votes
2answers
174 views

creating an SPN from a linux build server

I'm setting up a process which would automatically create the SPNs for newly exposed service URLs. I am aware of how to create an SPN with Windows using the setspn -A command with the right priviliges....
4
votes
0answers
152 views

Questions about ktpass/kerberos with Active Directory

I got a few questions about Kerberos with Active Directory, specifically about the ktpass tool. The example AD I'm using (everything is on 2012R2 level): Active Directory Domain Name: ad.example....
2
votes
2answers
494 views

Configure same Internet Explorer zone mappings with and without ESC via GPO

Our Active Directory domain consisting of Windows Server 2012 R2 servers and Windows 7 workstations configures Internet Explorer security zones using this Group Policy setting: Computer Configuration/...
1
vote
3answers
96 views

Secure Administration AD Domain

I have a project to securize my Active Directory infrastructure. To do that, one of my colleague told me about the possibility to create another AD domain in the forrest just for administration. That ...
0
votes
2answers
74 views

Export Active Directory Users as *.contact

Is there a way to export AD Users to a *.contact file? (each contact = 1 file)
2
votes
1answer
72 views

AD Server 2012 - Make an admin account that can only add new users

I have been looking all over the web trying to find an answer but no luck. Does anybody know, if it's possible, how to make an admin account, that ONLY have access to add in new users to the Active ...
0
votes
2answers
115 views

How do you reset the default “IP Security Policies on Active Directory” back to their factory settings?

How do you reset the default "IP Security Policies on Active Directory" back to their factory settings?
1
vote
1answer
311 views

How to get ADDSDeployment module on Windows Server 2008 R2 SP1

I wonder to use AD DS Demployment CMDLets (Install-ADDSDomain, etc.) on Windows Server 2008 R2 SP1. I have installed AD-Domain-Services feature and in the list of available modules (Get-Module -...
0
votes
1answer
25 views

New site is not listed when adding new domain controller

I inherited this network and I'm trying to figure out what I am missing. I created a new site in Chicago and I want to add a domain controller to it but the new site is not listed when I go to ...
1
vote
1answer
42 views

Can Active Directory Lightweight Directory Services corrupt or interfere with a (non-light) Active Directory installation on the same network?

I'm a programmer with a limited understanding of Active Directory. I once asked the IT manager if I could install Active Directory on my development computer and he told me definitely not as it would ...
3
votes
3answers
383 views

Domain Controller on Hyper-V-Failover-Cluster: Chicken and Egg?

I am designing a solution to move users to Office 365 / RemoteApp With a Dirsync connection back into the on site AD servers to handle local logins / local file server. The plan is to have two Hyper-...
1
vote
0answers
52 views

Active directory user password change by ldap client

I have written a LDAP client program in C. With that I am trying to authenticate against Active Directory. I have created some users in active directory and trying authenticate with my LDAP client. ...
0
votes
0answers
14 views

Event Forwarding

I am taking the MCITP 70-685 Windows 7 Enterprise Desktop Support Technician and am trying to set up Event Forwarding. My setup (As I need three separate OS' which I'm running on two computers) is ...
0
votes
0answers
49 views

Kerberos-based SSH login requires local user account

I've recently set up a linux system (Debian-Jesse) which has joined an MS-Based Kerberos domain and been set up to allow Kerberos-based authentication for remote access. The only issue is, ...
0
votes
1answer
54 views

Correctly remove exchange server

We have an intranet domain where an Exchange 2013 was installed for testing purposes. This is no more used and can be deactivated. Now I need to format the server where Exchange was installed. I'd ...
-2
votes
1answer
107 views

Can't log in to the DC remotely as Admin

I need some assistance ASAP my old IT Manager who got fire mess up our DC. Now I can' login to DC remotely as Administrator. Non of the 5 Windows servers that I have. This is the error message " To ...
1
vote
1answer
114 views

Windows Server 2012 - Domain Admin: Can't change printer ports

I'm a domain admin of my network and some of the printer settings don't allow me to change. I'd have to logon to the local admin to be able to change printer settings. Can this be enabled for domain ...
0
votes
1answer
172 views

Creating active directory users with powershell - the mapped home folder is not mapping until edited

I'm creating active directory users in bulk from a .csv using powershell. Each user has their profile home folder path mapped to a drive letter. The script runs through fine, users are created and ...
0
votes
1answer
235 views

Windows Server 2012 R2 Primary Domain Controller locks old computername

Before updating to 2012, old DC-name was: SERVER1 Now Primary-DC name is: SERVER2 SERVER1 was added to computer as DNS-CNAME-alias Then we installed secondary DC: SERVER3 and tried switch SERVER1-...
-1
votes
1answer
73 views

How to create or change unmanaged computer account to managed computer account in Server 2012R2

My DC Server use Windows Server 2012R2. I want to use Windows Deployment Service but I don't see any computer account in active directory prestaged devices. From this Ref, I must change computer ...
0
votes
1answer
18 views

Configure IIS to use Active Directory authentication

I have hosted a website on a server within the Enterprise network. The website needs to be accessible from machines(PC/Mac) in the network as well as from devices like tablets outside the network(...
-1
votes
1answer
115 views

Samba file server as domain member: error when joining domain

I would like to set up samba 4 to share a local directory, so that domain users are allowed to mount the directory. I don't want domain users to be able to log in the linux machine, they should only ...
0
votes
0answers
45 views

Configure Azure AD Connect

I'm trying to set up an domain in Azure AD Connect on a Workgroup computer. The challenge that we have is, we have a dedicated domain controller for the purpose of Azure AD Connect and the other ...
2
votes
1answer
44 views

Centralize the update of Internet Root Certificates

I would like the client machines in my organization to update the Root Certificates from a centralized location INSIDE the organization. This used to work with WSUS, but Microsoft left this way aside ...
1
vote
0answers
27 views

OU Search base in LDAP AD integration using CUCM

If i dont define an OU when creating user search bases in LDAP will it use the whole domain instead of a specific OU?
0
votes
1answer
54 views

Importing Bulk Users from .csv file leads to user logon name and domain being blank

I have the following issue when adding bulk users through a .csv file: the user logon name and the domain are blank, however the user logon name (Pre windows 2003) is showing ok. Because of this, I am ...
0
votes
1answer
33 views

Sharing permissions doesn't apply to sub directories as required

I have few Windows 2008 Enterprise servers with SP2 on a domain environment. Below is a scenario what I was trying to achieve and where I am stuck with. I have created certain Security - Global ...
2
votes
2answers
119 views

Best Practices for AD DS Backup and Recovery?

So Microsoft claims that "you cannot use a network shared folder as a backup target for a system state backup", but I've seen plenty of posts where people indicate that they are able to do this from a ...
0
votes
1answer
32 views

Possible reasons for SEC_E_INVALID_TOKEN

We have 2 domains. Domain A is resource domain Domain B is user domain Domain A contains a web site With Windows authentication The Group All Domain Users in domain B is given Access to the web ...
1
vote
0answers
50 views

Windows 10 Active Directory Administrative Center to manage untrusted domain

In a windows 7 environment, all the rsat tools are able to manage untrusted domains by using the runas /netonly command to launch said tools and connect to the domain. In windows 10 however, the ...
0
votes
2answers
74 views

windows can't find ADDC

so my problem is this I have 3 servers: Server A: running ubuntu 14.04 with openldap and samba Server B: running ubuntu 14.04 with bind9 and dhcp (dns server) Server C: client windows 2008 Server ...
0
votes
1answer
79 views

Windows Domain-joined PC cannot RDP to a PC on another domain

I created an AD DS and domain called NEWDOM. Then I added a Win2012 machine "newPC" with a local account called "userA" and joined it to the NEWDOM domain. If I use my personal PC on home network, I ...