Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

1
vote
1answer
8k views

Windows 2008 Active Directory Install - DNS Issues?

I am attempting to setup a standalone Windows 2008(R2) server with Active Directory Domain Services. This install is purely for development purposes. I have installed the OS just fine, and I been ...
0
votes
2answers
182 views

Promoting a Windows 2003 R2 as DC in an existing 2003 R0 domain

I've run into a small problem which I'd like to be absolutely certain about and I hope that you can aid me in this. We have an existing 2003 domain - schema version 30 - where I've identified a ...
0
votes
2answers
325 views

Automate setup of constrained kerberos delegation in AD

I have a web app that uses some backend servers (UNC, HTTP and SQL). To get this working I need to configure ServicePrincipalNames for the account running the IIS AppPool and then allow kerberos ...
0
votes
1answer
212 views

Does hosted MS CRM integrate with my local Exchange and AD?

One of our clients has on premise Microsoft CRM 4.0 Workgroup edition and Exchange, and I'm looking into the possibility of moving CRM off site to a specialist company as a hosted (SaaS) solution. ...
1
vote
1answer
1k views

How do I allow a specific AD user to add computers to the domain, limited to a specific OU?

I'm in the process of putting together a puppet recipe which will install Likewise Open on Linux machines and join them to a specific OU in our AD structure. Since the only practical way to do this ...
0
votes
1answer
162 views

Logging on to Kerberos / Kerberos Constrained Delegation from a pc not in the domain

Can a client pc authenticate against a Kerberos / KCD authenticated service (that is - not use NTLM) if they have valid domain accounts, but the pc they're using can't access any of the DCs and / or ...
0
votes
1answer
63 views

Change active directory server

Situation is right now I have pc, and test server. I don't have production server. If I create domain on test server first, and let all pc join the domain. What I need to do when production server ...
0
votes
1answer
66 views

Deploy active directory on poor network

Situation is I have about 100+ pc and deploy over 50+ locations. We don't have local server on each location. And some locations have poor network. Is it possible to deploy active directory? And ...
1
vote
1answer
134 views

Need help on ghost computers and deploy active directory

Is it possible to set up pc to join domain, then ghost it to many pc. Is there any side effect for both original pc and all ghost pc?
0
votes
1answer
106 views

How can I tell what external hard drives a domain user has plugged in?

Is there any way to track what hard drives currently are, or have been plugged in to a domain computer? All of the workstations are windows xp and the domain controllers are server 2003. The closest i ...
1
vote
2answers
189 views

Manage Microsoft DHCP from Linux

Is it possible to manage a DHCP server that runs on a windows 2003 machine from linux? I have searched but can't find anything. I am hoping to script something up in linux (whatever language), that ...
2
votes
2answers
8k views

How to export all e-mail addresses from Exchange 2003?

I'm trying to gather a list of all e-mail addresses being used by our Exchange 2003 system, which includes not only the normal user addresses, but distribution groups and aliases as well. I also need ...
0
votes
1answer
3k views

Computers not authenticating to RODC in their site

I've got an RODC in our local site and a PDC in our co-location facility. I run SET on any of the computers in our local site and they all say LOGONSERVER='PDC'. They should all be authenticating to ...
10
votes
3answers
21k views

How do I bulk reset passwords for all users in an OU?

I'm a developer at my organization, but I've been tasked with resetting the passwords on 10k e-mail users in an OU in Active Directory. I was given the proper permissions, then sent the following ...
2
votes
1answer
903 views

The administrative limit for this request was exceeded

I have a command to wipe out our Active Directory (AD) structure and rebuild it for testing. The command will also be used in Prod to do the initial setup of the AD structure. On our dev sandbox AD ...
2
votes
1answer
2k views

Domain Trust 2008 to 2003

I'm having trouble setting up the trust relationship between a Windows Server 2003 and a Windows Server 2008 AD. Domain a is Windows Server 2003 Forest functional level. Domain b is a Windows Server ...
1
vote
3answers
31k views

“The RPC Server is unavailable” when replicating domain controllers

I have two domain controllers: DC1: Win2k3 R2 EGDC1: Win2k8 R2 When I try to replicate these two (via Manage Sites and Services and under NTDS Settings) by selecting Replicate Now, I get the error ...
2
votes
2answers
328 views

Allowing user read/write access to a folder during a particular time period - Windows Server

I'm looking for a safe and secure way to grant a user access to a particular folder during a strict period of time. For this example let's say, from 8:00AM to 8:30AM, Monday to Friday. My reasoning ...
0
votes
2answers
2k views

Active Directory SYSVOL not synchronized across domain controllers

I have two domain controllers and I noticed that their SYSVOL shares were inconsistent when a random sample of client machines started to fail at executing their logon scripts (they were executing an ...
2
votes
2answers
209 views

utility native to OS X for administering AD accounts (without “magic triangle”)

EDIT: So far I have explored Centrify Suite (Spoke with a rep who didnt believe they offered a solution for this) Thursby ADmitMac (I have seen evidence that a tool exsists, but I'm failing to find ...
1
vote
1answer
305 views

How to preserver active directory users when demoting domain controller, then reimport into different domain?

We actually don't have an domain installation, just 1 server, which is domain controler with local domain TLD. But we want to implement domain, first off changing domain controler name to ...
3
votes
4answers
1k views

Can I manage Windows 7 machines with an open source server?

Can I manage a small office of Windows machines with an open source solution? (~15 users) (XP Pro, but will be moving to Windows 7 Pro as we get new computers over the next few months... as budget ...
0
votes
1answer
100 views

Tool to manage IP map?

Is there a tool which can manage the maintenance of an IP map? If no, it is possible to make a Powershell script which can get hostnames and their IPs, but it'd be nice if a tool exists to do this ...
1
vote
1answer
86 views

What are some of the pitfalls of reusing a user name in Ubuntu?

First, let me state, this was an IT goof up. They deleted an account, went "oops" and created a new account with the same credentials. I can't fathom why. Regardless, I've got a Linux (Ubuntu ...
0
votes
1answer
301 views

Virtualization Hardware and Software Advice; Terminal Services; Active Directory

Here's what I have in mind, understand I am ignorant: A core OS running virtual machine software - Linux (which distro?) with VMWare? A Terminal Services virtual machine for up to 50 thin clients - ...
1
vote
1answer
323 views

How do I modify users that have been delegated control over an Active Directory OU

We made the mistake of Delegating Control over an OU to a user rather than a group. We would like to correct this by removing the user from the OU's delegated control, but can't find where to modify ...
0
votes
1answer
363 views

is it possible to restrict printer tray usage on a printer using AD Group membership?

I have a multi tray laserjet printer that has a drawer dedicated to printing checks. I was curious if I could use Active Directory Group Membership to restrict who can print from that drawer to ...
0
votes
1answer
172 views

Send As with Protected Groups?

Hoping for a little help here as frankly I'm struggling. I need to be able to do "Send As" for a user to be able to send as some accounts that are in protected groups (the actual application is ...
0
votes
1answer
1k views

VBScript to export the Groups an Active Directory user is member of?

Is there some way, using a VBScript, that I can export all the groups an active directory user is a member of into a text file? Additionally, is there a way of doing this for multiple users from the ...
4
votes
5answers
4k views

Is LDAP the only way to authenticate an web application against Active Directory?

I'm a PHP programmer and I've never work with active directory or ldap. I need to integrate my web app with an active directory and after ask the IT guy of the client company he said to me that isn't ...
0
votes
2answers
4k views

Local user accounts have disappeared after installing Active Directory and running dcpromo

I'm kinda newbie in this Windows 2008 Server R2 configuration stuff, so I would appreciate any help regards the issue I'm facing. After a Windows 2008 Server R2 clean install I created a couple of ...
1
vote
1answer
321 views

Forest or Domain for a DMZ

I am designing an Active Directory with multiple domains. At this point I am trying to decide if our DMZ should be in a separate forest or in a separate domain. I recognize that some of this ...
1
vote
2answers
4k views

Active directory 1355 0x54b ERROR_NO_SUCH_DOMAIN

I have 3 domain controlers 2x 2008 1x 2003 server When i use the nltest /server:dcN.domain.local /sc_verify:domain.local i get: on the 2 of them OK status on one of them i get I_NetLogonControl ...
2
votes
3answers
384 views

What is my Active Directory site?

Is there a quick way to discover what Active Directory site the current server you are logged into is? I googled but couldn't find anything.
1
vote
3answers
1k views

AD, DNS, DHCP, WSUS, FCS, SQL, WDS/RIS, IIS in one server

Currently I have it setup like this: SVR1 - 2.8Ghz Dual Core, 6GB RAM, 2x160GB 7200RPM Drive NO RAID VM1 - PDC, DNS1 VM2 - BDC, DNS2 VM3 - DHCP, WSUS, SQL, FCS, WDS/RIS, IIS VM4 - Spiceworks, ...
0
votes
1answer
719 views

Mass/bulk create user account in Active Directory with Exchange mailboxes

Hey, Every couple of months we have to create 30+ accounts so I was wondering what's the best way to bulk-create the accounts and their mailboxes. We have AD on 2003 and Exchange 2007.
1
vote
1answer
2k views

Share Access between domain and workgroup

I am having trouble accessing a windows share on another computer that is in a Workgroup. A little big about our setup. We currently have 2 networks networkA which is a domain netA.net and networkB ...
0
votes
2answers
919 views

the active directory is rebuilding indices

I have windows 2003 and active directory domain controller installed on it. I also have raid 0 + 1 on that server. One disc failed. So that I removed it and everything was ok but I wanted to ...
0
votes
1answer
178 views

File sharing for normal users in win7

Using a domain environment UAC is on Is there a way to enable users to create file shares without needing elevated permissions? Thanks!
0
votes
1answer
722 views

Apache showing 500 error during Active Directory LDAP authentication

I have Apache (on Windows Server) set up to authenticate one directory through Active Directory. Config settings are as follows: <LocationMatch "/trac/[^/]+/login"> Order deny,allow Allow ...
0
votes
1answer
1k views

Cannot start WDS service

I built this WDS server that I made into a RODC also. After running the dcpromo, it get this error message that the WDS service is not started and could not start. I found this so I tried changing ...
3
votes
2answers
11k views

Reverse DNS not automatically updating on Windows DNS server

We use windows server 2003 for DNS on our network. The forward DNS entries ("A" records) for windows machines on the domain are populated automatically. However, the reverse DNS entries ("PTR" ...
1
vote
2answers
2k views

Active Directory domain.local corrupt

We have a small business server 2008 running in windows hyper-v, yesterday the hyper-v manager reported the SBS server was in ‘Pause Critical’ state. This turned out to be because of snapshots ...
1
vote
4answers
10k views

Unable able to run remote Powershell using Active Directory

We are trying to connect to a remote server via Powershell and use the ActiveDirectory module. When trying to do this locally, everything seems to be fine. PS C:\Users\bar> Import-Module ...
0
votes
1answer
60 views

aggregate local events in AD

How can I aggregate events from event viewer log (logins with local Administrator) from all computers (atleast the servers - 2003,2008,2008r2) in an AD domain?
0
votes
1answer
275 views

User accessing Windows share keeps receiving username/password request (across OpenVPN if that's relevant)

At my work, we have set up an OpenVPN system for our remote users to access the machines in the office. The office machines are set up on a domain. I have created a domain user for her. A new ...
4
votes
2answers
1k views

Migrating Mailstore from Exchange 2003 to Exchange 2010 in a new domain

Proposed project ahead, and a whole lot of documentation and options out there, so I was looking for opinions or advice. I'm creating a brand new domain and installing Exchange 2010 in the ...
-1
votes
3answers
2k views

Hidden OU and hidden users in active directory [closed]

everyone How to find The Hidden OU and hidden users in business active directory . i tried to use gpresult in CMD but i didnt find what iam looking for please any help
0
votes
2answers
411 views

Temporarily disable an AD server

Topology and setup We have main office A, and branch office (abroad) B. Our ISP somehow messed up the MPLS, and office A<>B will not be connected until a few days. At location B, we have an AD ...
1
vote
2answers
387 views

list all computers except domain controller

I'd like to get the list of all computers within a domain. Searching on google I've found dsquery * domainroot -filter "(objectClass=Computer)" -attr name -l -d my.domain > c:\computers.txt Is ...