A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
38 views

Active Directory - Migrate objects from Win Server 2003 R2 to Win Server 2008 R2

I am about to migrate some users and objects from a domain managed by Win Server 2003 to a domain managed by Win Server 2008 R2. I heard about AD migration tools, but are there issues concerning ...
2
votes
1answer
40 views

Enable application to send emails in Exchange 365 hybrid deployment

Question from a still-learning Exchange administrator: Is there a recommended way to create & configure an email account to be used solely by an application to send messages (alerts, reports, ...
1
vote
1answer
39 views

Is there a way to know what version of Exchange a users mailbox is on via AD?

In Active Directory there is a property against a user called "homeMDB" That will give me the users exchange database, but is there a way to know if the user is on exchange 2013 through Active ...
0
votes
2answers
84 views

AD Existing Forests Best Practices Setup

My company was acquired by another company. Both companies have existing AD forests and domains. The company that acquired us ,also has international sites.What would be the best practice/solution to ...
0
votes
1answer
44 views

LDAPs using Anonymous Access to AD forest

There is a problem related to AD which I cannot understand what configuration is missing to fix the issue. I have two DCs: testa and testb and both contain AD. I'm logged in to testa and I'm trying ...
1
vote
0answers
144 views

Migrating AD Lightweight Directory Services (LDS) or ADAM data to Azure Active Directory (WAAD)

We currently have an ADAM instance that we authenticate our ASP.NET web users against. We have a requirement to replace this instance with an Azure Active Directory instance instead with a new schema ...
0
votes
1answer
113 views

Windows server 2008 R2 Certificate Authority error event viewer

I am getting the error "The windows default policy module initialize method returned an error. The specified domain either doesn't exists or could not be contacted the error code is 0x8007054b. The ...
0
votes
0answers
121 views

Samba Login with Trust Domain User

I'm studying Two-way Domain Trust between Samba and AD. I configured Trust, and I can login with Trust Domain User on Windows Client. But I can't login with Trust Domain User on Linux Client. I ...
0
votes
1answer
38 views

Is there a way to change which wireless network is connected to when authenticating windows 7 AD clients using single sign on over wifi?

The situation: Two domains. Two wireless networks. Each domain's users have their own network for security reasons. B is a child domain of A (A = domain.com, B = child.domain.com). Users in domain ...
0
votes
0answers
136 views

Error: “ chgrp invalid group 'domain users' ” when setting up shares

I'm following this tutorial: Samba Shares with Active Directory Login on Ubuntu 12.04, and when I enter the command: chgrp -R "Domain Users" /sharing/ , I get " chgrp invalid group 'domain users' ". ...
3
votes
4answers
84 views

Implimenting a new password policy without locking out users

Background: we have had a very relaxed AD password policy for years. Users have had 'password never expires' set and we were not enforcing strength or anything. We now want to rectify that and have ...
3
votes
2answers
157 views

Is the whenChanged Active Directory attribute editable?

I've been searching for tools to change Active Directory object attributes, and I noticed the tools and articles and found so far are explicitly not mentioning capability to edit the whenChanged ...
0
votes
1answer
36 views

ADFS allows to login only to Office 365

I need to authenticate users on my web application using AD FS, but when they are redirected from my website to the ADFS login page they receive a page with error and they cannot introduce their ...
0
votes
1answer
544 views

Account lockouts not in Event Viewer

I am having trouble getting Windows Server 2008 to log when domain user accounts are being locked. My Domain Controllers are all Windows Server 2008 R1. I am able to find Audit Failure events (ID ...
0
votes
0answers
51 views

Active Directory - Set permission if user is present in all of the specific groups

The bussiness isue: implementing RBAC (Role Based Access Control) using Active Directory Groups mechanism. imagine having the following AD "Organization" groups: Core Development Team Sales Team ...
0
votes
1answer
71 views

Capturing LDAPS traffic with tcpdump

I have an app server that authenticates against Active Directory using LDAPS. I am connecting to the AD server over port 636. I'm trying to troubleshoot/debug some performance issues and am beginning ...
0
votes
0answers
32 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
1
vote
2answers
278 views

Possible to authenticate Samba via Kerberos but without domain-join?

With a Kerberos config file... [realms] DOMAIN.COM = { kdc = dc1.domain.com admin_server = dc1.domain.com } ...it is possible for Linux to talk to Active Directory for password ...
0
votes
1answer
40 views

hide data in active directory to a specific account

We are contemplating using Windows AD as LDAP for an DMZ Ubuntu environment and discovered that a simple LDAP query from a DMZ ubuntu server resulted in a complete listing of all AD objects. (We ...
3
votes
0answers
50 views

Active Directory Administrative Center - resize membership part

User can be a member of 3 groups at most to be visible in ADAC without scrolling. But in reality, users are members of 5, 10 even 20 groups. We have to scroll the "member of" list to check the ...
1
vote
0answers
150 views

reset lost administrator password for Windows Server 2003 (AD)?

I've been contacted by a local golf course that has lost login access to their Windows 2003 server (suspected cause is a password change by a disgruntled ex-manager). When I visited the site, they ...
0
votes
0answers
25 views

Having trouble getting dovecot to authenticate with samb4 DC/AD

I have a Slackware64 14.1 system configured as a Samba4 (4.1.11) Domain Controller/Active Directory. The DC/AD bit works fine. I have AD users configured and working redirected folders. I've ...
1
vote
1answer
44 views

Windows Server 2012 hide external HDD for non-admins

I am setting up a server where people connect to via Remote Desktop. It uses AD DS and uses an external HDD with a share on it for people's data. However when these people log on, aside from the ...
1
vote
2answers
68 views

Will a Windows domain rename require new SIDs?

If I rename my local windows domain on my domain controller will all of the user accounts associated with the "old" domain name need to be recreated? Will the user SIDs still be valid and would my ...
1
vote
1answer
17 views

Can you manage Server 2012R2/Win8 GPO's on a Server 2008R2 DC?

Having a little trouble clarifying an issue I'm having and google is unable to grant me a precise answer. We have a new Windows 8.1 tablet that we are testing in our environment, this obviously needs ...
1
vote
1answer
102 views

What does “Assigned” mean in the Azure AD Application user list?

Within the Azure portal, inside an Active Tenant I have an application with users listed, of which are created in the tenant. What does the term Assigned mean? I incorrectly assumed that it meant ...
2
votes
2answers
203 views

Colossal Failure After Domain Rename

The backstory... I recently upgraded a MS Server from 03 to 2012. The server needed to be a domain controller and for simplicities sake I named it foo.com instead of naming it something different ...
-13
votes
1answer
145 views

forget my old password. how can i recover that [closed]

I am an AD admin. I changed my colegues password. He is also an user in active directory. Is there any way to see his old password. I need to set his old passwprd back.
2
votes
1answer
104 views

Radius Client IP Address when setting up Wifi with WPA2 Enterprise?

I have taken over a server setup (as part of my job) which is setup of the following: Server setup with Threat Management Gateway (serving as the firewall) - 192.168.1.1 Server with Domain ...
0
votes
2answers
30 views

How to isolate servers from other machines connected to a single active directory?

I have few machines connected to an Active Directory. In that, i want to isolate 3 servers (these 3 are distributed environment set up for testing purpose). I don't want other machines to connect with ...
1
vote
0answers
353 views

Why is a domain user unable to log on into a Windows 7 machine when Samba server signing is enabled?

I have an up and running Linux-based domain controller running Samba. The server functions properly as I am able to join Windows 7 machines to my domain and then log on into the machine using my test ...
1
vote
1answer
60 views

Cross-Domain / Cross-Forest Group Policies

Our company has a domain forest with two domains (domain.EMEA and domain.GLOBAL) We previously acquired a company (domain.LOCAL) and all the workstations at this site are members of domain.LOCAL, but ...
4
votes
1answer
76 views

Virtualizing branch office servers

I have several branch offices with a single server at each site. These servers each functions as domain controller, DNS, DHCP, file and print server, and ConfigMgr distribution point. They currently ...
1
vote
1answer
57 views

Folder Redirection Issue

I am currently having a rather urgent issue with folder redirection. We attempted to move the files from the old server to the new server and everything works except documents. It appears to create ...
0
votes
1answer
76 views

Bare Metal Restoration of Child Domain (Active Directory Issue)

As i have a parent - child domain in my network as the parent is situated in other geographical location and they both are connected via VPN as i was working on a Bare metal backup & restore ...
1
vote
0answers
19 views

Setting environment variables based on passing Require directive

I finally succeed on configuring Apache as a SPNEGO reverse proxy for my app, and I'm using the AUTHORIZE_SAMACCOUNTNAME, AUTHORIZE_CN and AUTHORIZE_MAIL to figure out some information about the ...
1
vote
0answers
271 views

Login as domain user fails in Linux

Using pbis, joined a Linux (Ubuntu 14.04) node to the domain successfully. # /opt/pbis/bin/get-status LSA Server Status: Compiled daemon version: 8.2.1.2979 Packaged product version: 8.2.2979.68390 ...
0
votes
0answers
31 views

AD domain name: Did I choose appropriately? [duplicate]

Edit: I realize this type of question has been asked before as active directory domain naming practices is a common topic of debate. I have read past posts, but I don't feel they are quite ...
1
vote
0answers
39 views

Mysterious Terminal Server HTTPS issue

The University I work for recently got into Terminal Servers, and one of them has been plagued by an unusual HTTPS issue where, after enough users have logged in and logged out, eventually users can ...
0
votes
1answer
389 views

Can't open Active Directory Users and Computers, Group Policy settings issues

In the past I've been able to open "Active Directory Users and Computers" to manage the users and computers on our Windows Server 2008 R2 box. We just recently made some changes to our Group Policy to ...
-1
votes
1answer
77 views

Prevent internet from being monopolized by one user

In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers. However, we want to prevent the ...
0
votes
1answer
24 views

Copy data from Azure AD to vm AD?

Currently I only have Azure AD that work with Office 365. Now I am planning to create a vm to use RADIUS server. I need to copy user and groups from Azure AD to vm AD. So, how can I do that? I read ...
-2
votes
1answer
91 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
4
votes
1answer
54 views

Powershell - Merging Results in one table

I am new to powershell. I am trying to create a report that shows AD accounts that expire soon. The report should include the User Name, AccountExpirationDate and the Manager. I have the ...
2
votes
1answer
31 views

csvde to find 1 user based on SamAccountName

I want to use csvde to find 1 user based on SamAccountName and export all the details about that person to a CSV file. The problem I am having is filtering by SamAccountName csvde -f search.txt -p ...
2
votes
2answers
724 views

How to clone, disjoin & rename a Windows 2008 R2 VM offline, then rejoin domain online

I have a Windows 2008 R2 domain joined server, which should be cloned as test server in the same domain! There is an MSSQL 2012 instance and Team Foundation Server 2013 installed, but this shouldn't ...
0
votes
1answer
185 views

AD FS and DC on same Server

i have to connect AD with Azure AD but we have a 2008 r2 server and wwe don`t want to upgrade the server to 2012 r2. Is it possible to have the domain controller and the ADFS server on the same ...
1
vote
0answers
54 views

How do I workaround inaccessible DCs in a spoke site, in a hub and spoke configuration?

I have a Hub and Spoke configuration. The spokes can never see another spoke. SCOM is reporting errors that GPO can't access \company.com probably because every Domain Controller has an NS record, ...
3
votes
1answer
261 views

Integrating FreeIPA or RH IdM in an existing MS AD environment

I want to deploy FreeIPA or Red Hat IdM in my existing environment Currently my domain is managed by MS AD which is controlled by a separate group. Assume that changing anything in MS AD is going to ...
0
votes
0answers
137 views

Clients not authenticating with RODC - nltest gives SERVICE_NOT_ACTIVE

I am new to the Windows world and pretty much followed the guide from this Windows Server Blog For the life of me I can not get clients to authenticate with the RODC. When I have the on-site RWDC ...