Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

0
votes
1answer
45 views

Prevent Users From Logging Into the Physical Server's Active Directory But Allow Workstation Logon

I'm fairly new to group policy management. I'm running Windows Server 2008 R2 with Active Directory setup. I have setup my users, assigned them to the proper groups, which consists of regular users, ...
-2
votes
1answer
50 views

Deploy Software using active directory without remote login [closed]

I'm looking for a way to deploy a package(Maybe MSI) trough the Active directory, I know it's possible, but as I know it requires a remote login on the servers in order to download the package and ...
1
vote
1answer
84 views

Log onto Windows AD Domain via SSH using private key

I would like to log into a windows domain from a linux box using a private key in place of username/password. I am using FreeSSH on the windows box and have no problems using keys for local accounts. ...
3
votes
2answers
286 views

My AD domain and DNS domain names are the same. Can this be resolved with SRV secords?

My company has a website with the domain name of acme.com. It also used acme.com as the AD domain name. External DNS is set up properly. Internal DNS has to resolve to the DC, for obvious reasons. As ...
-4
votes
2answers
265 views

How to allow standard user access windows server locally

We've setup first Windows Server 2012 R2 Essentials edition. Our office is small & sometimes fellow users may use server as a workstation. By default, only Administrative accounts can login ...
5
votes
2answers
161 views

checking for missing values in WQL or (WQL/WMI filter to return `true` for desktops/servers, but `false` on laptops)

I have a challenge where I want to use a GPO to set a Power Plan. Working on constructing a WMI Filter (using WQL), I ran into a problem of determining a set of WQL statements that would always ...
-1
votes
1answer
87 views

Some computers in my subnet do not recognize names of other pc's

I have two subnets: 192.168.0.1-255 192.168.50.1-255 Ewerything works via VPN (because physically computer from both subnets are in different locations). We also have active directory. Now, the ...
-1
votes
1answer
52 views

Unable to determine forest/domain functional level

I already have a domain controller setup on Wind2k8 R2 Standard and am trying to get another system running on Win2k8 R2 Enterprise to also become another domain controller for the same domain. For ...
3
votes
1answer
85 views

Turn off “user must change password at next logon” checkbox by default when creating new user

On Windows Server 2008, when you add a new user (manually, i.e. using Server Manager > Roles > Active Directory Domain Services > Active Directory Users and Computers > [site name] > ...
2
votes
3answers
457 views

Windows server 2012 essentials GPO AD/SYSVOL MISMATCH

I am having an issue with Group policys and will do my best to describe the issue below: GPRESULT, ADSI and GPT.ini shows the group policy with mismatching AD/SYSVOL versions, the SYSVOL version ...
3
votes
3answers
124 views

Update a network driver through GPO/AD

Our organization has just deployed new computers with Windows 8.1. Roughly 50 of them. We've run into an issue with the driver on the new computers which is flooding the network with ipv6/multicast ...
2
votes
1answer
98 views

Migrate samba domain to Active directory

i have a Samba3 domain and i want to migrate to Active Directory (W2k8 or 2012 server). How can i achieve that? I read that ADMT tool can do that, but didn't find any feedback. I also read that we ...
0
votes
0answers
28 views

Run active directory logon script as an admin user [duplicate]

I have a logon (powershell)script for a certain non-admin user. The script retrieves some files from a server and places them in certain folders on the machine (and some other stuff as well). I don't ...
2
votes
1answer
119 views

Access an AD attribute in a first-time logon scenario?

I have been tasked with improving our current image deployment. Right now we do a fair amount of manual setup after imaging to reduce the work for users who get a newly imaged machine. I would like to ...
0
votes
2answers
398 views

Win 2012 AD, can't login with some users: there are currently no logon servers available to service the logon request

I have a Windows Server 2012 R2 with a fresh AD created, I have the admin user and test1. I added to the domain another Windows Server 2012 R2 machine and I can't log with the admin user, I get that ...
1
vote
0answers
154 views

SecErr: DSID-031A1190, 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to change the password of the currently logged in user via ldifde using this command: ldifde -i -f pwd.ldif -t 636 My AD server is running in SSL mode with a self signed certificate. The ...
1
vote
0answers
189 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
0
votes
0answers
10 views

What is happening/where is the error when multiple accounts have the same certificate mapped?

In our environment if multiple accounts (such as a basic user and an administrative account) have the same certificate mapped this causes access issues with our web applications. By removing one of ...
0
votes
2answers
96 views

Restore ActiveDirectory from System Image Backup after OS reinstall

One of my clients has a single-server Windows 2008 R2 setup which is serving as the Domain Controller. The server got in a situation where it would constantly boot into "Preparing to configure ...
1
vote
2answers
233 views

AD Read-Only Account (for Authentication)

I have experience with Linux server administration, however when it comes to Windows I'm pretty much a newbie. I have a lot third-parties applications that use an AD admin account to perform its ...
4
votes
4answers
177 views

Windows Password Sync without using Active Directory

I have a number of Windows servers running in AWS. As the number of servers grows, managing Windows logins across all the servers has become a headache. I need some sort of password synchronizer ...
2
votes
1answer
84 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
0
votes
1answer
142 views

cannot login to domain - kerberos issue?

We cannot login as domain admin on one server but can on others. When I looked at Active Directory, I can see that the computer object doesn't exist for the server we can't login to. There is, however ...
0
votes
1answer
44 views

Active Directory Trusted Sites

I have two business units that I need to setup an AD trust(win 2008) between the two different domains, however one of the sites has a DR solution in place (We replicate the DC's etc to an offsite ...
1
vote
0answers
79 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
4
votes
2answers
281 views

Should I be able to log into a locked out active directory account by disabling internet connectivity?

My active directory account just got locked out. On a whim I unplugged the ethernet cord and turned off the wifi radio switch and I was able to log into my account. I plugged the ethernet back in and ...
4
votes
2answers
178 views

Can I set up conditional forwarding for a parent DNS zone?

If my domain is ds.usepowershell.com, can I set up a conditional forwarder for usepowershell.com and not redirect my internal queries (since technically, ds.usepowershell.com is a subdomain of ...
0
votes
2answers
73 views

Setting up a LAN with load balanced internet

I have been looking and researching for the last week on this but haven't found anything conclusive which might apply to the situation that we are trying to solve. I have a small start-up which now ...
1
vote
2answers
56 views

Force domain password change in the future?

I want to force all my domain users to change their passwords, but I want it to happen on a specific day in the future. Is there a way I can automate that today, either using a GPO or PowerShell ...
1
vote
2answers
63 views

Importing Active Directory objects using LDIFDE or CSVDE

I'm going to make some changes on an Active Directory environment (mainly deletions), before doing so I'd like to make backup of few objects using LDIFDE or CSVDE. The distinguished names of these ...
5
votes
1answer
1k views

Powershell query lastlogondate (lastlogontimestamp) returning mostly blank values (not matching the ADSIedit value for corresponding user attribute)

I am running a very short script to simply print out all users and their last logon time: get-aduser -filter * -property * |ft name, lastlogondate I noticed only a small handful of users have a ...
3
votes
2answers
203 views

How Active Directory Dynamic DNS updates works behind the scenes?

I've looked through the AD documentation and I was not able to find any conclusive answer to this question. It's plain simple, but hard enough to be answered. How DDNS of AD works behind the scenes? ...
0
votes
0answers
26 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
-4
votes
1answer
52 views

Configure Active Directory on Windows 7 [closed]

I am to configuring Active Directory on Windows 7. I have followed this link and installed AD LDS. But i am unable to create a new user in the active directory. Also, I am able to browse the ...
2
votes
2answers
65 views

Get OU management status from User object?

In a Windows Server 2008 R2 AD, is it possible to get a list of OUs managed by a User from the User object or does one needs to parse the list of OUs? (ie, is there representation on the User object ...
1
vote
1answer
51 views

LDAP connections favoring 1 DC over the other in same site

Observing spikes in "AD Search Subops" counter and "PROC LSASS%" counter daily on DC A relative to DC B; its not in maintainence windows; its at start of business hrs daily. -> Eliminated the point ...
1
vote
1answer
292 views

Correct way to change domain name in Active Directory

I'm trying to fix an existing AD infrastructure that was implemented using the external domain name as root domain name in the Active Directory. So it's running on "contoso.com". I want to put the ...
1
vote
2answers
86 views

Samba share with AD authentication is only authenticating users on some windows machines

I've searched high and low for help with this. What I've found is that most have given up. I have found that I can mount the samba share from a few different windows hosts with different users. ...
0
votes
0answers
31 views

Server 2012 SysPrepped Image Prompts to Approve Eula after Domain Join

I am trying to upgrade our base web server image from Server 2008 R2 to Server 2012. Our cloud vendor allows us to SysPrep an IAAS instance, image it and then restore it. I have this part all ...
15
votes
4answers
1k views

Common wisdom about Active Directory authentication for Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for Linux servers and modern Windows Server operating systems (CentOS/RHEL-focused)? Over the years since my first ...
0
votes
3answers
430 views

Migrating SBS AD to an Server 2012 AD with diffrent domains

The situation, I have a SBS 2008 server which also is the DC for the domain. The name of the domain is Example: DomainA. The other server is a W2012 server, which will be replacing the SBS server. The ...
2
votes
1answer
70 views

Auditing anonymous binds to AD LDAP

We're about to commence an AD upgrade to 2012 R2, and I have just found to my horror that anonymous LDAP binds have been enabled in the 2003 domain. We've certainly been issuing accounts for LDAP ...
0
votes
1answer
614 views

Samba server authenticating against Active Directory. Is it possible to reboot and still connect to the domain?

I have tried to setup Samba File Server with AD authentication. The authentication via Active Directory is successful but if you reboot the server the linux Samba file server will NOT join the domain ...
2
votes
0answers
4k views

Windows 7 there are no logon servers available to service the logon request subdomain

I've read other solutions, but my problem is slighlty different. Problem occurs in domain environment. We work in a subdomain, but we also have some employees coming with notebooks registered in top ...
0
votes
1answer
274 views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
0
votes
1answer
57 views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
0
votes
2answers
257 views

SID's role in joining domains and AD authentication?

Thanks to recent answers to my questions, I was able to use sysprep to create a Windows 7 system image ready for deployment in our organisation. I learned that the process of using sysprep creates a ...
1
vote
1answer
108 views

Backup Active Directory users' files, deploy via GPO? [closed]

Am looking for a solution which can be configured to be deployed via group policies. I've looked into Windows Backup, but it doesn't fulfill our requirements. We need something like this: Runs ...
0
votes
1answer
100 views

Exchange Server 2013 has dependency on old PDC

I am in the process of completely upgrading a Exchange 2007 system running on server 2008 R2 Hyper-V VMs hosted on a Exchange 2008 R2 domain controller. It had all the FSMO roles on it, and it was the ...
4
votes
6answers
421 views

Powershell assistance for Active Directory Cleanup

I just started a contract to clean up an Active Directory system for a large company. I was told it would be quite the busy work but after reviewing the system and seeing how disorganized and messy it ...