A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

4
votes
2answers
1k views

What's the risk of running a Domain Controller so that it is accessible from the internet?

I have three remote dedicated web servers at different webhosts. Adding them to a common domain would make a lot of administration tasks much easier. Since two of the servers are running Windows 2008 ...
1
vote
1answer
833 views

How do you manage two users with the same name in AD?

I have two users on the network. One is John Smith. The other John Smith Jr. How do you as a sys admin set these two users up so they do not conflict in AD(active directory) and or FileMaker?
0
votes
1answer
97 views

Can't enable share on clients in my network

I installed on my subnet a win 2003 server as the domain controller, with DHCP and DNS options too. the clients, win xp pro and and win 2003 server. In my clients when i log in via the domain, i ...
0
votes
3answers
3k views

Can't log anymore with RDP on my server after adding it in my domain

I have two dedicated with Windows 2008 R2 servers which I am using for Web hosting. One Server A is a domain controller, Server B should simply be added to the domain controlled by Server A. So I ...
2
votes
1answer
8k views

Reset local Certificate Revocation List (CRL) manual

How can I reset local CRL (in OS local cash) in Windows OS (XP, Windows 7) manual? We need to reset local CRL because otherwise the OS will use local CRL until "next update" period. As described in ...
1
vote
3answers
5k views

How can give group in active directory folder access by group policy

I have windows server 2003 64bit and my clients running on windows xp 32bit. My clients have user rights so they can't install any program. I have some programs needs admin rights for example I have ...
5
votes
1answer
102 views

optimum configuration for AD and exchange 2010

We are a small business (~100 emp) with a creaking server running AD, Exchange 2003 and more. We need to upgrade the hardware and it has been proposed to put Win Svr Std 2008 on one new server with AD ...
1
vote
0answers
244 views

Kerberos Service Principal not found in AD

I've got a strange problem with an Active Directory SPN Account. This does not work: kinit HTTP/my.host.com@MY.REALM However, "setspn -l SA_MyUser" lists "HTTP/my.host.com" as registered service ...
1
vote
1answer
259 views

Full Permissions on Shared Folders for Local Administrators

I am not sure if this is normal or not, however it seems network shares on our domain are given full access to users that are admins on their local machine if the server\Administrators security ...
0
votes
1answer
384 views

What is precedence of NETLOGON drive mapping vs Active Directory home directory?

If a) a user's logon script maps a user's home drive to a home directory and the same homeDrive but different homeDirectory are set on the user object in Active Directory, which method takes ...
0
votes
1answer
591 views

Group Policy Preferences Filtering

I'm having issues getting a 2008 Policy to apply on my 2003 domain. I attached Group Policy Management from a 2008 server to the domain and setup it's own policy. The policy is User Configuration > ...
0
votes
1answer
758 views

Active Directory Lightweight Directory Services (AD LDS) best practice for clustering

We decide to use Active Directory Lightweight Directory Services (AD LDS) for our application. But we cannot find the guide for clustering this service. Can anybody suggest or give a link to the ...
1
vote
2answers
158 views

Active Directory User Connected to Internet

Which event logs should be watched to see when an Active Directory user connects to internet? For example user is logged in to PC offline then connected to internet, is it possible to see user is ...
2
votes
2answers
770 views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
0
votes
3answers
2k views

Comcast Business Class router setup

I do know a little about networking but im having some trouble trying to figure out in my head how to make this work before comcast comes to do the install on thursday. Right now we have AT&T DSL ...
3
votes
1answer
227 views

Active directory (AD) best-practice for clustering

We want to use AD as a regular LDAP for storing and accessing our application data in fast and reliable way. We have two physical server and want to organize some sort of clustering for AD and its ...
6
votes
3answers
4k views

Best way of integrating Mac OS X clients with Active Directory

I have more than 50 Macs on the network and I think it's time to put some controls in place so I'm scouting for ways to integrate the Mac OS X clients into Active Directory. The primary objective is ...
0
votes
1answer
511 views

Windows SBS 2008 - Applying user restrictions

I have a SBS2008 server and I need to restrict program access on a per group basis, see below for the view from Active Directory. How do I go about restricting the User's in the group "Advisors With ...
2
votes
2answers
163 views

Determine when a Domain Controller was promoted

On Windows Server 2003 standard is there a way to determine when a domain controller was promoted? This is for an Active Directory 2000 functional domain. The event logs don't go back far enough.
1
vote
2answers
3k views

Why does my domain controller refuse to talk to a client on a different subnet?

I have an office subnet (say 192.168.10.x) and a guest subnet (192.168.99.x) which both use a pfSense box as their gateway/router. The office subnet is "controlled" by Active Directory using Windows ...
5
votes
5answers
2k views

Read Only Domain Controller for standalone/off-site testing location

In a bit of a pinch: a client needs to test an Active Directory enabled CRM system that consists of a SQL 2008 Server and a Windows 2008 Standard Server (the application server). As far as I know, ...
1
vote
1answer
167 views

Migrate Active Directory Groups to Local Windows Server Groups

This may seem like an odd scenario, but for reasons that I have no control over I need to migrate a large list of user groups from an Active Directory server, to the local group policy of a server ...
0
votes
2answers
54 views

Exchange 2003 email addresses

I have approximately 20 users within exchange 2003. I just added a new domain name within the Default Policy Properties under Recipient Policies to be added to every user account's email address. This ...
1
vote
0answers
463 views

Manually remove last legacy exchange server from the domain after the exchange server has failed

Before we completed the migration from sbs 2003 to sbs 2011 the server running sbs 2003 failed so we were unable to carry out the steps required to remove the last legacy exchange server i.e we can ...
2
votes
1answer
527 views

ActiveDirectory add backup domain controller on other computer

I have Active Directory and need to move to another ActiveDirectory(PDC) on the other computer and I want to do it this way: Add a Backup Domain Controller Synchronize the settings from Primary ...
1
vote
2answers
1k views

Will the global catalogs in two forests with transitive trust replicate data?

Suppose I have two Active Directory forests, each with one global catalog. There is a transitive trust between these forests. Does this imply that data is replicated between the two forests? Can I ...
0
votes
1answer
171 views

“Hide” Users in Active Directory Search

Is it possible to "hide" users when searching Active Directory Users and Computers? For example, if I do not want administrative accounts or groups appearing in the search results.
1
vote
1answer
724 views

Is there any downside to having two ADFS servers in a domain?

We are working with a big client who wants to have two completely separate environments for a CRM 2011 installation. And that would go down to having two separate ADFS servers in the domain. Are ...
1
vote
1answer
2k views

exchange 2010 - updating distribution list members via outlook address book

I'm having trouble updating distribution list memberships using outlook. on exchange 2010: groups properties - group information I have added myself to the managed by list in active directory ...
2
votes
3answers
3k views

Unable to unlock account in AD

I have an AD user account which cannot be unlocked, AD is running on Win2k3. I can uncheck the "Account is locked out" check box and click Apply then OK, but the next immediate moment when I open the ...
1
vote
1answer
185 views

Problem viewing Active Directory users from external server

I'm trying to set up a website on an external web server (IIS 6 on Win 2k3) such that: Anonymous access is denied Users have to log in with their Active Directory username / password I can grant ...
3
votes
1answer
290 views

Restoring deleted AD object

I have a Windows 2003 domain and Windows 2003 domain controller. I accidentally deleted the whole container. The container contains some child container objects group object and some ...
8
votes
3answers
23k views

How do you trace/debug LDAP connections against Active Directory?

I am spoiled, and have been doing most of my LDAP work with eDirectory, which has a utility called DSTrace which is lovely, and for LDAP specifically, will show you all the bind attempts, the source ...
7
votes
3answers
4k views

Place a computer object in an OU based on the user who added it

Is there a way to auto place a computer in a specific OU based on of the user who joined it to the domain? For example, I have 5 OUs, and site admins can add PCs to the domain, but can't manage any ...
2
votes
2answers
156 views

Changing Domain Admin Password on Live Running System

I have an employee that is taking some forced time off, but I need to mitigate risks in case they go AWOL. If I change a domain admin password on a live running system can anything go wrong? I don't ...
3
votes
3answers
3k views

How do you discover what permissions an AD group has, if you have no documentation?

You just got hired at company A and the old administrator is no longer there. Requests start coming through for adding users to the internet restrict group. When you look at the groups none of the ...
1
vote
2answers
428 views

Configure monitor orientation through GPO?

Is it possible to force a particular monitor orientation through a GPO? I've got a bunch of Windows 7 PC's that are used for displays, and I'd like to be able to drop a computer into a group that ...
2
votes
1answer
1k views

Active Directory faking account lock outs

I am having some issues on my domain with user accounts refusing to log in because the account is locked out, but in active directory (users and computers) the account is not marked as being locked ...
3
votes
2answers
4k views

How can I tell if a certain Active Directory login has been used today?

How can I tell if a somebody used the login 'Accounts' today to log into a pc in my Active Directory domain? It seems to be causing errors if 2 people are logged in using the same username and I ...
5
votes
4answers
2k views

Login using Active Directory in Linux using Kerberos 5

I have a problem with setting up auth for users on Linux (Fedora Core 15 to be exact) using Active Directory on Windows 2008 Server with installed support for UNIX systems. I've successfully setup ...
2
votes
1answer
960 views

After Users import from CSVDE User Logon Name is incorrect

I have imported a load of Active Directory Users using CSVDE into my Windows 2008 R2 test domain but am having problems logging in with them. The import went successfully and the users were created ...
-1
votes
1answer
91 views

Can you configure Microsoft Exchange Server 2007 to ignore the domain being used from internet and to just use a local domain?

Is this even possible to configure Microsoft Exchange Server 2007 to ignore the chosen domain on the internet and just to utilize the domain locally? Or is this totally not in context of what ...
1
vote
1answer
2k views

List _all_ AD user properties with powershell

We have a former Win2k AD domain, which is migrated to W2k3 servers, and has a slew of schema extensions (Exchange, msSFU, and self-defined) from the past and various parts of the forest. Searching ...
3
votes
3answers
3k views

AD Replication Monitor

Is there something like Replication Monitor (in Windows 2000) available in Windows 2008 R2? What tool do you use to check replication health?
5
votes
2answers
1k views

Migrate linux dhcp to active directory

I need to migrate/convert a dhcp server from linux to active directory. It's currently running fine on a sles9 box. There are 136 subnets defined and about 1200 fixed-address reservations. It would ...
3
votes
1answer
4k views

Can I nest security groups (not mail-enabled) inside a Distribution List, to have members of the group receive mail to the list?

I would like to manage my distribution lists indirectly, via security group. So that when I add a user to the appropriate security groups, they will automatically be members of the appropriate ...
3
votes
2answers
1k views

Authenticate CentOS against AD without Samba/Winbind

We currently have our CentOS 5.5 servers authenticating against our Active Directory environment (Windows 2003 R2) utilizing Samba & Winbind. It's served us well but we need something more robust ...
1
vote
1answer
1k views

Deploy MS Access Runtime via group policy

I am trying to deploy Access 2007 runtime via group policy and I am having a problem. So, i downloaded the AccessRT.exe and run accessrt.exe /extract to get the msi file. Then when I try to attach the ...
2
votes
2answers
3k views

How can I hide projects in TFS source control from an Active Directory group?

We have a group of contractors that need to have limited access to source control under TFS. I added the contractors to an Active Directory group and explicitly denied all permissions to Source ...
0
votes
1answer
439 views

Authenticate logons with Active Directy for EC2 Sharepoint server?

Sharepoint is installed and running swimmingly on "the cloud." I was able to have the server join our domain by installing a mobile VPN client and connecting it to our network. I don't want to leave ...