A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
1answer
49 views

Pull AD users from new AD server Windows Server 2012 R2

we finally made an upgrade. Originally, we had 1 server running NAS, DNS, AD and DHCP. We just got another server strictly for AD, DNS and DHCP. I have everything installed and ready to go. The ...
4
votes
2answers
107 views

How can I view/export/determine the configuration of a Windows ADCS CA?

I'm in the process of setting up a new root ADCS (Active Directory Certificate Server) certificate authority for a child domain in a multi-forest environment that already has a number of existing CAs. ...
2
votes
1answer
39 views

Replicate to a test network, AD loses trust and network location

We have a separate VMware ESX 5.5 server that we use as a test environment, where we replicate production machines. It runs replicated VMs on a vSwitch that is physically separated from the production ...
9
votes
1answer
239 views

What are the practical risks of enabling the unsecure DNS updates on Windows?

What are the practical risks of enabling the unsecure DNS updates on Windows? As far as I found enabling the unsecure DNS updates is a requirement for enabling DHCP Linux clients from registering ...
3
votes
1answer
40 views

How to display zone configuration with dnscmd?

I am trying to display/export the current zone configuration using the dnscmd (Windows) but so far it seems that the /zoneprint does output only the records from the DNS zone but I am interested about ...
1
vote
3answers
40 views

Group Policy Loopback for OU or Security Group of Computers

I have a rather complex setup in mind, and I am quite new to Active Directory. I want to configure group policy loopback processing so that: Certain users (in different OUs), on certain computers ...
1
vote
1answer
30 views

SSSD - start LDAP-search with logging-in user

Situation today: we've got a functional sssd-config on multiple Ubuntu-clients. This config contains authenticating against a LDAP-server. The SASL-Mech is as "gssapi" specified and uses a ...
2
votes
2answers
90 views

MaxTokenSize on Server 2012 R2 and Groups

I fixed an issue yesterday where a 2008 R2 machine did not want to communicate with the DC. I discovered warnings in the event log relating to the kerberos buffer, so I increased the size in the ...
2
votes
1answer
20 views

Creating custom AD claims in ADFS v1.x

I'm sorry if this is an uneducated question, but I'm growing a bit desperate here. At work, we have a few customers that are still using ADFS versions prior to 2.0 which went the SAML2 route, and I'm ...
2
votes
1answer
53 views

Which kind of active directory [closed]

We exist in a big enterprise (with an active directory where we cant get administrator privileges obviously) and would like to setup a local Active Directory for our development department. This ...
0
votes
2answers
67 views

How to find existing or moved out machines on domain controller?

I am migrating around 850 existing machines from 2003 Active Directory Server from Forest A to Forest B on Server 2012 R2. Basically changing the domain name on each machine and joining to a new ...
0
votes
1answer
79 views

Access is denied errors starting ADUC on non-domain controller

I have a primary domain controller running Server 2012 R2. It is running just fine. I have a secondary server running Server 2008 R2 Datacenter. The 2008 R2 server is not a domain controller. The ...
1
vote
0answers
19 views

Reversing, Restoring, and taking over Active Directory Roles

I am out to upgrade our 2003 Windows Server to a 2012 Windows Server. From what I read I will be using dcpromo to promote a 2012 Server to take over a 2003 servers master roles. Questions: 1-- Given ...
1
vote
1answer
41 views

Active Directory Recycle Bin on child domain only

We got a root domain contoso.com which contains some child domains like sitea.contoso.com, siteb.contoso.com. etc. I'd like to enable the Active Directory Recycle Bin on one of these child domains and ...
0
votes
1answer
33 views

Dynamically assign extension based on active disrectory SID with asterisk

I'm new to Asterisk. Basically all I need to do is set up Asterisk to have dynamic extension numbers based on Active Directory (LDAP) SID. AKAIK the SID is always the same prefix, followed by unique ...
1
vote
1answer
494 views

Windows 10: AD Domain Admin with missing rights?

Maybe my title is not correct but I wouldn't know how else to name it at this point. If I log into a Windows 10 machine with the main AD Domain Admin Account, I get an error message when entering ...
0
votes
1answer
25 views

Windows client join AD in a specific ou dns driven

given my AD domain as: EXAMPLE.ORG if I have a client with dns name: client1.hq.example.org which steps do I need before joining client1 to EXAMPLE.ORG domain in order to have client1 inserted in the ...
0
votes
0answers
22 views

Samba AD - Member server necessary?

For a small windows network (5 users with their own machines) I set up an AD DC using Samba 4 on Arch Linux on a HP Microserver. Those users have files they will need to access from a central ...
0
votes
1answer
48 views

GPO unable to override a restricted group policy

We have a global GPO that grants Local Admin permission to "Domain Users" via Restricted Groups. I was asked to remove the Local Admin to few users by applying a security filter on their computers. ...
1
vote
1answer
88 views

iControl REST Remote Authentication BIG-IP v12

I have an issue while trying to use remote authentication on iControl REST API. I have tried to configure remote authentication using the following article Configuring Remote User Authentication and ...
0
votes
1answer
75 views

Active Directory domain name conflicts with web server DNS

I took over support for a Windows 2008 domain that was set up by another system administrator. The DNS name of the domain is admin.example.com and a web site is also using the same DNS name. The ...
4
votes
2answers
102 views

Where should I install DHCP server

On enterprise or medium size company where is DHCP server installed? What is normal practice followed, in terms of DHCP server? Here, I have DHCP server installed on one of my core switch. Problem ...
2
votes
0answers
102 views

Use 2008 R2 and 2003 server domain and LDAP with Windows 8.1 and Windows 10?

I have two server domain one with Windows Server 2003 server and other Windows Server 2008 R2. With this can I use Windows 8.1 and 10 clients to connect with domain and apply policies?
0
votes
0answers
24 views

Secure only Dynamic DNS update don't work

Domain Controller - Windows Server 2008 R2 , it is also DNS Server but i have DHCP Server configured on Switch, which gives ip address to all Domain member computer. Here, problem is Secure only ...
1
vote
1answer
126 views

Permission to enable\disable devices in device manager without admin rights?

Short question: Can you use group policy to allow users to disable\enable devices without giving them full administrative rights to a machine? More detailed: We have machines that crash on ...
0
votes
1answer
35 views

Missing Account audit events on DC's

I recently discovered that all of our Domain controllers (2008 R2, domain and forest fuctional level is 2008 R2) are no longer logging AD account logon events to the Security Log. The Default ...
-2
votes
1answer
77 views

How can I join a Windows Server 2008R2 server to a FreeIPA domain (LDAP/Kerberos)

In an infrastructure which consists of over 100 linux machines and only a single Windows Server (which will be replaced in two years with a linux server), it makes no sense to configure cross-forest ...
2
votes
2answers
184 views

Printing from a windows service in one domain to a print server in another windows domains without trust

I face the the following problem: We have one Windows domain with an application running in an user context of user of this domain (let's call this domain "A"). This Windows service has to print to an ...
1
vote
1answer
29 views

Group Policy: Screen Saver Timeout is not being honoured by some client machines

I am having a hard time trying to solve this issue. Recently I created a GPO on a Win2k8 R2 domain controller to set the screen to lock after 30 minutes. The settings are then applied to a security ...
1
vote
2answers
42 views

Internet Explorer 10 group policy

This question is related to Internet Explorer 9 & 10 Group Policy Preferences missing I have about 20 domain controllers and when I try edit a group policy object then go to user configuration > ...
2
votes
1answer
36 views

Removing one failed Exchange server from Hybrid/Office 365 Configuration

Our setup is as follows: Site0: Exch00 - Original On-Prem Exchange server. CAS, MBX, and all transport roles. Was not configured to perform any hybrid/management work with 365. DC0 - Site local DC to ...
0
votes
0answers
27 views

LDAPS with AD Server 2008R2 certreq -accept fails

I'm having the issue listed here: Active Directory SSL Certificate Private Key Not Attached however they don't explain what to do to fix the private key not attached if the certreq -accept fails. ...
0
votes
1answer
28 views

Restoring an Active Directory user using Restore-ADObject

I am following this link https://technet.microsoft.com/en-us/library/dd379509(v=ws.10).aspx that explains how to restore an Active Directory user using Restore-ADObject. I am using the following ...
0
votes
1answer
50 views

Prevent specific computer names from attempting to authenticate. +

I have 2 users that are repeatedly getting locked out of the domain by a couple of computers that are repeatedly trying to login to their Exchange Accounts. The story is, these 2 users were using ...
0
votes
1answer
36 views

Active Directory & SRX - User Groups

I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange ...
1
vote
4answers
87 views

How can I tell which of my nested AD groups a user is member of?

I have a set of nested AD groups: group subgroup1 subsubgroup1a subsubgroup2b subgroup2 subsubgroup2a userXY subsubgroup2b I'm using "group" to grant access ...
6
votes
2answers
182 views

Adding a 2012 R2 Domain Controller to a 2008 R2 functional level domain

Our current domain is at a functional level 2008 R2 and all the current domain controllers are built on Windows Server 2008 R2 OS. One of our remote site domain controllers is up for replacement and ...
1
vote
2answers
199 views

Powershell - Find all users with password never expires

I am looking to query AD via Powershell in order to see all user accounts within my forest who have their password set to never expire. I found a few scripts online using a quick google search but ...
-1
votes
1answer
86 views

active directory domain resolution - public DNS? [closed]

I am not sure how all these are being link up , but right now , my PC is joined to my company AD domain at "whatever.local" I am pretty sure that "whatever.local" is not resolvable in the public ...
3
votes
1answer
101 views

Proxy Kerberos Authentication - Kerberos Service Ticket Issues

I have a BlueCoat ProxySG that is able to authenticate users via Kerberos. It is set to "Proxy" so it requires user authentication for each new TCP connection. Users have a Single Sign On and their ...
0
votes
0answers
66 views

Domain user keeps getting locked out - Use of sensitive privilege - SeBackupPrivilege

I have a domain user who's account is regularly becoming locked out. When checking the security log on the domain controllers, the only audit failure for the account in question relates to a ...
7
votes
2answers
226 views

Why should you disable network login for local accounts?

This question is in reference to @SwiftOnSecurity's Twitter thread: https://twitter.com/SwiftOnSecurity/status/655208224572882944 After reading through the thread, I still don't quite get why you ...
0
votes
0answers
9 views

Group changes (user removals) audit [duplicate]

In our Active Directory domain we've encountered a major incident today when almost half of the global security groups have lost their members. Is there any way except Event Viewer logs to get any ...
0
votes
1answer
88 views

Migration and Domain Rename

We are migrating away from an old Windows 2003 domain controller, and moving to a Windows 2012 R2 domain controller. However, there are a few issues I need to clear up due to the configuration of the ...
0
votes
0answers
72 views

ZyWall USG20 L2TP/IPsec VPN Active directory auth

I have issues with connecting to my VPN. If I sign in as local user (the ones created in objects of zywall) it is fine. But as soon as I try to connect as domain user I get error message "The ...
1
vote
0answers
21 views

Allow log on locally custom message

I recently moved into a new position and we have a few computer labs that are currently restricting access by running a script on logon that checks the user's group membership and if not in the ...
12
votes
0answers
552 views

Server 2012R2 DNS server returning SERVFAIL for some AAAA queries

(Rewriting most of this question since a lot of my original tests are irrelevant in light of new information) I'm having issues with Server 2012R2 DNS servers. The biggest side effect of these ...
0
votes
1answer
26 views

local admin overwritten by Restricted Group

I use group policy to enforce via Restricted Group who is in the local administrators group. However, some users we have deemed should be a local admin on their machine and they drop out of the local ...
1
vote
1answer
37 views

Removing a “semi joined” Ubuntu workstation from an Active Directory domain

I am joining an Ubuntu workstation to an MS AD. I had 1 or 2 config issues when I first tried to run net ads join which resulted in an error message and the workstation not being added correctly I ...
1
vote
0answers
33 views

What would cause an Active Directory connection attempt to a workstation?

I'm trying to troubleshoot a freezing issue with our git server. We're running Atlassian Stash on a dedicated Windows Server 2012 R2 Standard virtual machine. The server will sometimes (a few times ...