A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
122 views

ADFS without domain

Is it possible to run a ADFS 2.0 without connecting the server to a domain? We are using Shibboleth as claims provider, so we actually don't need active directory here. We manage to setup the ADFS ...
0
votes
0answers
41 views

WES09 Client not registering with dns suffix

I have HP thin clients, some running Windows Embedded Standard 2009, and some running WES 7. They are all getting DHCP addresses from our Server 2012 R2 DHCP server, with AD integrated DNS. With both ...
0
votes
0answers
56 views

Unable to view trusted domains in ADUC

My domain is Server 2003 (domainA) and the remote domain is Server 2008R2 (domain functional level) (domainB). At some point in the recent past, I lost the ability to view domainB (ADUC -> open a ...
1
vote
0answers
73 views

DNS Server gone and now I get Zone Not Loaded by DNS Server

We have several domains in our infrastructure, separated by differing subnets (obviously). From our primary domain (call it domain A), we have a DNS forward lookup zone to domain B (which consists of ...
0
votes
0answers
67 views

Trying to add group to the security tab of an extended right

. The only problem is that the rights are not propagating to the extended attribute, even in the advanced tab :(. If I go in to adsi and check the security tab of the extended right it shows ...
0
votes
0answers
33 views

AD Migration and SharePoint configuration

i have a SharePoint 2010 and o365 (AD Synchronized) account. And some guys are working on the migration process from 2010 to o365. At the same time, I'm migrating users to the new domain but all ...
4
votes
1answer
182 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
1
vote
0answers
115 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
0
votes
3answers
96 views

Mess of a system : Where to start? [closed]

I just started a role as the sole "IT guy" in a company of over a hundred people. This is a company that has had a troubled history with IT, managing to go through 6 people in as many years. During ...
0
votes
0answers
54 views

Active Directory Schema Upgrade not enough to add new policy items

I recently upgraded my AD Schema to 69 in the hopes that I would get the Policies / Admin Templated / Windows Components / Windows Update / "Always automatically restart at the scheduled time" for my ...
1
vote
1answer
77 views

Moving Azure Virtual Machine which is Domain Controller to another region

I want to move an existing Virtualized Domain Controller from North Central Azure Region to East Region. I am aware about how to move VHDs and basically migrate it to another region. Though my ...
3
votes
1answer
126 views

Add security rights to an extended rights guid

Any help would be greatly appreciated! Please ask if you don't understand something. I am trying to explain it as best as I can. The value I am trying to edit is ...
-1
votes
2answers
126 views

Best practices for secondary DNS in case of a single Active Directory

I have a setup with only one Active Directory (not redundant). What should be configured on the client pc's to ensure the best DNS resolution ? Currently somebody configured the IP address of the AD ...
1
vote
1answer
35 views

SSO while still allowing offline use?

I am thinking of implementing Single Sign-On for a whole company. PROBLEM: Some employees of that company need to be able to work offline, without having to switch user/environment. Is there any ...
2
votes
1answer
55 views

Merging SIDs between Forests?

Currently, I have two forests, domain A and domain B with an external, two-way, non-transitive trust. Users in Domain A also have an account in Domain B (not all users in Domain B have an account in ...
4
votes
4answers
352 views

Which ports are required in order to authenticate against a ldap server in another domain which is behind a firewall?

I have a Linux domain running with sssd, let's call this domain NJ. I'd like machines on the NJ domain to be able to authenticate against an Active Directory ldap server which resides on a different ...
0
votes
0answers
42 views

Domain Guest Group with Azman delegation in Windows Server 2012

I am new to Microsoft Windows Server and Active Directory. I have created a user called viewer Then I configured deny the Network Access Permission no callback deny user permission to log on to ...
0
votes
1answer
57 views

Roaming Outlook Settings without using roaming profiles

Is there a way to roam my Outlook 2013 settings from workstation to workstation without using Active Directory roaming profiles? As you can see from my question I am no Exchange expert...
0
votes
0answers
146 views

Jenkins with subversion plugin using AD athentication

I'm configuring a Jenkins instance installed as a windows service. In order to download the source code, I would like to use the subversion plugin, but I'm getting an authentication error when I add ...
0
votes
1answer
475 views

Client not found in kerberos database while getting initial

I am installing Squid3 on Ubuntu 14.10 and I want to integrate it ADDS on windows server 2012 using kerberos 5. My infrastructure are as follows: Default Gateway: 192.168.1.1 DNS & Domain ...
0
votes
2answers
179 views

Linux-SSSD: always getting incorrect password when su'ing to domain users, but why?

I've built a new Linux environment at my work place. I've configured sssd and bound it to one of the Active Directory domains of the company. I can tell that the sssd is partially working, let me ...
0
votes
1answer
60 views

Active Directory Naming

I have a test active directory domain named ad.example.com and have joined some Windows clients stations to the AD domain. I'm able to log on the client station as AD\username. However, when I try to ...
-3
votes
1answer
38 views

Windows File Shares inside an Organisation [closed]

I came across to a security weakness that potentially can put information at risk in my organisation. Whenever I access other's computer in the network through the command: \\192.168.20.4\c$ I ...
1
vote
0answers
113 views

CentOS 7 doesn't recognize new Active Directory accounts/settings

I joined a CentOS 7 system to a Windows domain by syncing the time with the DC and running realm join --user=admin@mydomain.local mydomain.local. This allowed me to authenticate my login to the CentOS ...
4
votes
2answers
174 views

When do you need a new AD forest, and when do you need a new tree?

I'm new to AD and Windows Server, and this sounds like it should be pretty obvious, but I can't seem to figure out the distinction between a tree and a forest. According to the book I'm reading: ...
5
votes
3answers
467 views

Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?) [duplicate]

How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos? I know that ...
0
votes
1answer
32 views

New work server accessing active directory

My Department recently bought a small server running windows server 2008. But given its a business managed server IT refuses to provid e me with any support. At the moment I can only create loc al ...
0
votes
2answers
104 views

Why can I not use a duplicate DC computer name for a subdomain as a parent domain?

I am new to AD and Windows Server in general, but from what I've seen on youtube, companies can have something like this: www.example.com www.eng.example.com I figured this meant that there is a ...
0
votes
1answer
27 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
3
votes
1answer
42 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
2
votes
0answers
75 views

Fingerprint log on, domain wide

All the users in my company use laptops with fingerprint readers built in. I use this on my laptop but the fingerprint is only stored locally. Is there a way to make it domain wide using the AD ...
0
votes
1answer
52 views

Allow in-house application administrative rights within corporate AD domain

We have a couple of in-house developed application in the company and those application need to be able to use "C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe" in order to register ...
1
vote
0answers
56 views

Getting Group Policy identifier in PowerShell

Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. ...
1
vote
2answers
129 views

Duplicated domain admin user profile?

Our domain admin logon on PCs or Servers used to have only one profile located on c:\users\administrator Somehow, now we got a duplicated profile called c:\users\administrator.domain Does ...
0
votes
0answers
91 views

Active Directory And Solution Permission/Security in MVC

I hope you guys have a great day. I got a problem when designing permission solution for my client and I really need your adivice. My project is using ASP.NET MVC 5 and we are implementing the ...
-1
votes
1answer
65 views

IT for a small organization: mailing lists, file server, hosting [closed]

I've been asked to help manage my church's information systems. We're small (~3 staff, ~150 parishioners), which puts us below the needs of a lot of the "Church Management" software I've seen. The ...
0
votes
1answer
53 views

rsync windows active directory deployment

Is there any tool that let me do a massive rsync installation through Active Directory for windows machines??, I was searching but i do not find anything... until now. I am looking for something like ...
0
votes
2answers
43 views

Tracking Computer Lab Logins

My department is in charge of several computer labs, and we'd like to track how many times someone logs into each computer. Users log in via Active Directory accounts. I've seen some indication that ...
0
votes
0answers
35 views

Folder Redirection for user logging into workstation and server

We have 4 admins that administer multiple Windows 2012r2 servers. Our IT Manager has asked that we change the way we log on to servers now for auditing reasons after an ex admin went rogue. We have ...
0
votes
0answers
67 views

active directory simple bind always anonymous (event 1219)

I am getting event 1219: "Active Directory could not initialize simple bind authentication. Therefore, simple bind authentication against this LDAP interface will result in binding as an ...
0
votes
1answer
114 views

Best practices for time syncing a WS2012R2 domain controller that is a Hyper-V virtual machine?

What are generally the best practices for keeping time in a WS2012R2 domain controller? Right now I have left it as installation and honestly, there is no problem ("If it aint broke, don't fix it") ...
0
votes
1answer
102 views

Connecting Office 365 to multiple Azure Active Directories

I have an existing Office 365 subscription which is connected to an Azure Active Directory (I believe they all are by default). I have a requirement to host another Azure Active Directory but need to ...
1
vote
1answer
25 views

Single, parameterized GPO for managing group membership

We have a OU design in our domain in which each "system" (web services and similar) has it's own OU, under which is nested the servers and accounts that it uses: ... + System A + Servers ...
1
vote
2answers
124 views

Trying to join servers (on remote VPNed network) to Active Directory without forwarding all DNS queries over the tunnel

At our company, we have a coloc at a local datacenter (where we host our public Web Servers) and a Site-to-Site VPN set up between the coloc and our office. We would like to join the servers at the ...
-4
votes
2answers
117 views

How to use multiple User login name to authenticate to AD - UPN

How can I assign multiple User login names to an AD user so he/she can authenticate seamlessly. Here's an example: User name 1: FJohnson User name 2: domain\Fjohnson User name 3: FJohnson@domain.com ...
0
votes
1answer
33 views

Report active directory history for new/removed objects

I've been tasked with finding a way to generate a report to document new desktop\laptop computers that are both joined and removed from Active Directory (Server 2008). Is there a way to pull a ...
1
vote
1answer
60 views

Need to create multiple emails with different domain names - PowerShell

I'm being tasked with creating a script that polls AD for specific information and then creates an appropriate email address based on that information. Please allow me to give you a bit of a rundown. ...
2
votes
3answers
147 views

What should happen when I browse to my Windows domain name via UNC?

A while back I setup a DFS namespace \\my.dom.com\somecrap. Its working great, but I've always notice something that confused me and I never asked about it. When I just browse to \\my.dom.com it ...
1
vote
1answer
34 views

Gpresult provides wrong output on vista machine regarding UAC settings

I have two workstations running Windows 7 Professional 64bit with SP1 and Windows Vista Business 32bit with SP2. Both are in the same OU and have a GPO linked named Hardening_Computers_Clients. This ...
0
votes
2answers
51 views

Connecting AD to multiple networks. Use firewall rule or dual NIC?

We want to connect our AD to multiple networks. There is a firewall between these networks. I wanted to find out if it is best practice for us to open up a firewall rule for the DNS/AD or to connect ...