Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

0
votes
0answers
71 views

Quest Migration - AD account that doesn't sync properly

I have an issue with an AD account that has been "migrated" using Quest Migration Manager for Active Directory, version 8.8. This organisation currently have two forrests. Let's call them ad.local ...
0
votes
1answer
39 views

Can AD Domain Services authentication be influenced by custom code?

I am wondering if it is possible to cause AD to service authentication requests in any way besides simply consulting its internal password hashes. Ideally, I'd like to have it call code I provide ...
1
vote
1answer
70 views

Windows domain grant desktop access only to some users

I must grant only domain admin members to open a server desktop session. How to limit desktop access to some computers (typically servers) for some groups only?
1
vote
1answer
90 views

What do the error messages and codes mean when creating and installing Managed Service Accounts?

When using the PowerShell Cmdlets for creating and installing Managed Service Accounts, certain errors can be thrown. What does each error mean?
-1
votes
1answer
50 views

How to check if a AD group is being denied access to a file or a folder

How to check if a particular AD group is being denied access to a particular file or a folder, using bat /powershell 2.0
8
votes
2answers
403 views

Demoted domain controller still authenticating users

Why is a demoted domain controller still authenticating users? Whenever users log onto workstations with domain accounts, this demoted DC authenticates them. Its security log shows their logons, ...
1
vote
1answer
60 views

Windows Server 2008 R2 CA not issuing more than 2 years

I have active directory environment in 2003 R2. I have installed 2008 R2 Enterprise Edition CA. Then I have created custom template from web server template and add expiry date as 15 years. my root ...
1
vote
0answers
126 views

Slow first login to a AD-joined Samba box

I have joined my first Debian box to an Active Directory (2008 R2). It works, I can log in with AD credentials, browse Samba shares. There is just a problem with the time it takes for someone to log ...
1
vote
1answer
96 views

Fake Recycle Bin via Group Policy

Is it possible to create a fake recycle bin where the files aren't actually deleted using MS AD/ Group Policy? The goal is to be able to recover 'deleted' files after, let's say, a dirty resignation. ...
0
votes
0answers
41 views

Creating a template/default roaming profile

With Windows Server 2012 R2 Datacenter and running Windows 8.1 machines, is there a way to create a default or template that will contain shortcuts and files for a new user when they are created? ...
2
votes
1answer
234 views

Active Directory Administrative Center over Active Directory Users and Computers

Is there any difference using Active Directory Administrative Center over Active Directory Users and Computers? In training videos I've seen people mostly use the older look Active Directory Users and ...
-2
votes
2answers
32 views

Why setup domain.com as my ADDS domain, the “.com” is disappear? [closed]

Recently I setup a test environment for my self-test. On a win2008 I add ADDS role. I type in "domain.com" as the domain name. Everything is fine and installation completed without problem. However I ...
0
votes
0answers
15 views

Using existing/active Domain Name for Active Directory Domain Name [duplicate]

I have an active domain name: example.com - registered and hosted with a web hosting provider. Can I use example.com as my active directory domain name? Are there any documentations covering this ...
0
votes
0answers
31 views

Where does the biometrics domain settings change when the windows client interface is used?

To enable biometrics one would change the group policy for an OU to allow for domain login. This can be accomplished by changing settings in Group Policy on the server: Adminitrative Templates ...
1
vote
1answer
64 views

Create kerberos keytab from AD file with more than one SPN

I need to create a Kerberos keytab file from Active Directory with three different SPNs. It's no problem to add different SPNs with setspn -a but when I try to create a keytab file with ktpass ...
0
votes
1answer
12 views

Server Manager Remote Connection and Visual Studio unable to publish after password change

I have a developer user who changed his password in our Windows-only environment. Now he is unable to connect remotely to another machine via Server Manager and unable to publish to another server ...
3
votes
0answers
177 views

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
5
votes
1answer
122 views

Different ACLs on two OU's with same “protect object from deletion” setting

Background After I configured our Active Directory so that the ability to move computers was delegated to helpdesk staff, I started hearing reports that computers would get "stuck" in specific OU's. ...
1
vote
1answer
75 views

Querying GPO Details

I need some help on querying GPO. I want to know how many total GPOs applied for each OU. GPO with out no parameters and no link GPO's With less than 2 parameters and less than 2 links Can any ...
1
vote
1answer
180 views

Nagios NRPE plugin check_ad - Fixed

i've reading about this problem much and trying to solve it on my own ways but still not luck. I've running debian 7 as nagios server. Problem is that i cant check state of my Active Directory Domain ...
4
votes
2answers
964 views

Active Directory Time Synchronisation - Time-Service Event ID 50

I have an Active Directory domain with two DCs. The first DC in the forest/domain is Server 2012, the second is 2008 R2. The first DC holds the PDC Emulator role. I sporadically receive a warning ...
3
votes
1answer
41 views

recomended order for changing AD groups?

I have a number of domain local resource groups that need: a) to be changed into Universal groups. b) renamed. c) have the users of their member groups collapsed into this group itself. d) remove the ...
1
vote
1answer
172 views

Exchange 2013 really slow outside of localhost

We've got a 12 core xeon, 24GB of ram 2012 server. We've recently migrated from exchange 2010 (which was on another server) to exchange 2013 which resides on our new 12 core server. Accessing the OWA ...
0
votes
1answer
64 views

How to resolve SSPI context error without changing Service Account from MSSQL

There is a issue while connecting from new Windows 8.1 Clients to SQL Server 2008 running on Windows Server 2008 R2. The SQL Service running under account Domain\mssqlservice on a machine thats works ...
-2
votes
1answer
197 views

Loganalyzer LDAP

Iv installed Loganalyzer and now im trying to configure to authenticate with LDAP. And i have the following in loganalyzer config.php file: $CFG['UserDBEnabled'] = true; $CFG['UserDBServer'] = ...
0
votes
1answer
58 views

Joining an AD domain from Workgroup with runas

I've got an user A who is connected to a Workgroup. From this Workgroup, now, I want to connect, with the console, to the user "john" who belongs to an active directory (MYAD) Though I try : runas ...
1
vote
2answers
70 views

Account name changes

The way we currently handle account name changes is quite cumbersome and wondering if there is an easier way to go about things. Name change request comes through and we create a new AD account, ...
1
vote
0answers
85 views

Linux SSO for multiple windows domains

I have successfully implemented SSO on apache for windows users in the same AD domain that the apache server is in: AD domain = example.com Linux server = linux.example.com KDC = ad.example.com I ...
1
vote
1answer
26 views

Unable to delegate Replicating Directory Changes to a user in AD - option missing from wizard

Disclaimer: I originally asked this over at SharePoint SE, but I figured I'd ask it here too as it's more of an AD problem than a SP specific one. I'm trying to delegate the Replicating Directory ...
0
votes
1answer
74 views

Linux Active Directory Authentication without domain name?

Is there a way of authentication Linux users to Windows Active Directory without using the server domain name. Currently the syntax that I use to log in is this ssh Domain\user@ipaddress all I want ...
1
vote
1answer
90 views

Connecting to a domain-joined SQL Server from a non-domain client

I struggled for some time yesterday, attempting to log into a SQL Server 2008 instance on a domain-joined server from a non-domain-joined client. The computers in question: -fhsvr is a domain-joined ...
0
votes
2answers
114 views

Can't get AD inter-site replication to work over VPN

Background: We have a single-forest single-domain AD for our little company. We have two geographically separated sites with different subnets. Both sites have been added as sites with appropriate ...
0
votes
1answer
274 views

Migrate handful of users from one child domain to another

We have a forest SiteA We have child domains SiteB SiteC SiteD We have a few users who are on SiteB and need to be migrated over to SiteC. We used to be setup like SiteB.Comapnyname.local\USERNAME ...
0
votes
1answer
71 views

List current Principals in group Managed Service Accounts

Is there a way to list the current list of all the groups and/or hosts in the PrincipalsAllowedToRetrieveManagedPassword property of a gMSA (group Managed Service Account)? There isn't any help on ...
4
votes
2answers
301 views

How to force active directory replication from one DC to another

I am having issues replicating AD from one DC to another. Both servers are Windows Server 2008 R2 SP1. I have used the GUI option in sites and service to force replication. I have also tried repadmin, ...
1
vote
0answers
27 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
1answer
249 views

Linux LDAP query to AD : missing group members

Two different Linux servers (CentOS & Ubuntu) on my LAN cannot see certain members of an AD group when performing an LDAP query. We're setting up a software appliance which can use LDAP for ...
6
votes
1answer
101 views

Active Directory Country capitals (letters)

Does someone know how to solve the problem of changing all country fields at once and probably why the country field is multiplied each time I select + apply a country change until the Object is being ...
1
vote
0answers
37 views

Netatalk authorizing with Windows Active Directory Clients

We have an Ubuntu server that we intend to use to share videos and other content over AFP to our client Macs. AFP works flawlessly by setting the allow list to one single user. The problem arises when ...
1
vote
1answer
171 views

How to debug SASL authentication via LDAP towards active directory

I am trying to configure SASL running on Centos 6.5 to allow authentication towards the corporate active directory server. The end goal is to authenticate access to some subversion repos which are ...
0
votes
1answer
51 views

Authenticating Apache HTTPd against Active Directory

We're using Apache 2.2.12 to authenticate against one Active Directory domain using a .htaccess configuration file. Our current configuration is: AuthBasicProvider ldap AuthType Basic AuthName "AD ...
2
votes
0answers
460 views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
1
vote
3answers
85 views

Displaying all groups that a user from another domain is a member of

My team and I are stumped on this one. We have two domains at work, OldDomain and NewDomain. We are working on migrating from OldDomain to NewDomain as mandated by ParentCompany. The trust is one ...
0
votes
1answer
192 views

Centos 6.5, Active directory and ldapsearch

I need to query the ldap part of an Active Directory DC from CentOS 6.5. ldapsearch allows me to do that, but I have found two bumps in the "ldapsearch" road: ldapsearch wraps long text to several ...
0
votes
1answer
448 views

Which file sharing protocol (SMB/AFS/NFS/SMB2/SMB3) is best for an mixed client environment within an ad?

I'm just setting up freenas with ZFS and was wondering which file sharing protocol / data transfer protocol is the best to use? Has anyone experiences? I guess i have a very typical business setup. I ...
1
vote
1answer
51 views

Active Directory inter-domain trust questions to thwart malicious programs

I'll start my question by explaining my situation. My company has been facing random, but kind-of-periodic, lockouts involving lots (if not all) of accounts. My team had been suspecting that there's ...
0
votes
1answer
657 views

What's the upgrade path for ADFS 2.1 to 3.0 (Server 2012 to 2012 R2)

I have several domain controllers running Windows Server 2012 with a domain and forest functional levels at Windows Server 2012. Two of the DCs are running ADFS (2.1) in a farm for users in my ...
-1
votes
1answer
74 views

Deploying software on active directory [closed]

I am not sure if this is the right place to post this question but I figured since some users here are familiar with Windows Servers and Active Directories, that I might to get some information about ...
-1
votes
2answers
89 views

Windows Server 2012 Essentials static route [closed]

Does anyone know if this possible? We have an SBS 2008 domain controller on our network. We also now have a Windows Server 2012 Essentials server. Ideally I'd have this join the existing domain, but ...
1
vote
0answers
31 views

Remote User Authentication with Active Directory vs. Azure Directory

I am a little confused about the added topological complexities that seem to be advocated when designing remote authentication for Active Directory. I want to have single-sign on for all computers ...