A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

3
votes
3answers
728 views

Allow members of a group to be unlocked by a specific account on AD

Background I'm creating a service to allow support staff to enable their firecall accounts out of hours (i.e. if there's an issue in the night and we can't get hold of someone with admin rights, ...
1
vote
1answer
180 views

Active Directory not replicating

I have a windows server 2003 as a PDC ("server 1"). I am attempting to take it offline once I get several issues cleared up. I have two other windows server 2008 servers that have been promoted as ...
3
votes
2answers
152 views

One active directory server for one geographical site?

we have an 2008 R2 active directory server on our main site. Recently we opened a small secondary site. My question is pretty simple : our 2 sites are connected with a VPN, is it mandatory for us to ...
1
vote
1answer
797 views

Need an Active Directory server to use stand alone DNS

I have the need to add 2 AD servers to our domain but at each of these particular sites would like DNS to be stand alone (not AD integrated). I can't say I have every tried this before as I have ...
0
votes
1answer
968 views

Active Directory Administrative Center in Windows Server 2012 can not delete any domain controllers

I need to delete an otherwise "non removable" domain controller box that runs windows server 2003. Normally I use dcpromo to remove domain controller roles from active domain servers. I tried to do ...
1
vote
0answers
4k views

Active directory over SSL Error 81 = ldap_connect(hLdap, NULL);

I have been several day to getting AD over SSL (LDAPS) I followed exactly this guide. I have Active Directory Certifica Service installed (stand alone Root CA), I can request cert, install certs. ...
4
votes
1answer
3k views

Define an “alternate” login domain for Active Directory

A buddy asked me this question - and I quite honestly don't know enough about Active Directory and how to operate/configure AD to answer this. A customer of my buddy has an AD domain DomainA and ...
0
votes
1answer
42 views

Try exchange in real domain

We (as a company) 'd like to try exchange server to replace our mail server. I downloaded the demo version from Microsoft website, but during the installation it wants administrator access to domain ...
-2
votes
3answers
4k views

Domain controller malfunction

We have one domain and two domain controllers (on Windows Server 2008 Enterprise). For about a week, we have enormous problems: some users can't log in to Windows (domain could not be contacted). ...
0
votes
2answers
93 views

How much time do I have to remove a domain controller that was lost using metadata cleanup?

I am wondering how long after a Domain Controller has been permanently lost, from the domain due to it dying from hardware perspective, do I have before I have to clean up references of it using meta ...
2
votes
2answers
1k views

Windows 2003 and 2008 AD integrated DNS zones

We have a Windows 2003 server DC1 which is our primary DC holding all FSMO roles. It also is a DNS server for our domain domain.local which is an active directory integrated zone. We also have a ...
1
vote
0answers
280 views

Squid on Linux Windows Pass through authentication

We are setting up a new proxy based on squid on an ubuntu server, and would like to have pass through authentication work for the Windows/Internet Explorer client. We have put the line into the ...
0
votes
2answers
167 views

Logging into Linux server gives users 'domain users' for default group can it be changed?

I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be ...
2
votes
1answer
5k views

How do I detect ActiveDirectory Schema master from the command line in Windows Server 2003 and WS2k3R2?

This spectacular MSDN article details how to do it in C++. And it vaguely mentions some utilities that don't appear to be on my system at all, and gives no ideas how to do this from a regular Windows ...
3
votes
1answer
7k views

Impact of increasing the MaxTokenSize for Kerberos Tickets

Recently by migrating form Netware to Windows file servers we have ended up creating a boat load of AD groups. We have now run in to some problems with authenticating and gaining access to resources. ...
2
votes
1answer
8k views

GPO: how to limit the users able to logon to PC?

In an active directory domain I'd like to have some PCs assigned to single people. For example on computer_a, the only people allowed to logon should be person_a plus the various administrators. ...
4
votes
2answers
2k views

Active directory integration not working properly with winbind and samba

I'm trying to get my linux box to use active directory authentication. I believe I have almost everything setup correctly. I'm able to issue wbinfo -g and wbinfo -u and see all the groups and users ...
1
vote
2answers
264 views

How can i use one Domain Controller to manage 3 separate small firms

currently we have one Domain Controller that have 15 users and cup off services(hMailServer, IIS, DNS, Active Directory). Now the owners of the firm created two new firms which computers and networks ...
1
vote
2answers
306 views

How can I determine why a users password change did not succeed?

I've set up a new domain user account for one of our client's employees. I randomly generated a password for the user account and set it up so the user has to change the password on first log in. We ...
-6
votes
1answer
2k views

Removing File Services Role From A Domain Controller [closed]

Someone in my office install the file service role on the domain controller, while trying to remove the role for the domain controller. I get the message that I have to remove the active directory ...
3
votes
2answers
3k views

Trusted Connection to SQL fails after connecting to a VPN

I have a development server with an SQL 2008 EXPRESS instance running on it. The domain is called DEVAD, and the instance is enabled for Shared Memory, Named Pipes and TCP/IP. My workstation PC is ...
5
votes
1answer
117 views

Error connecting ESX 5.0.0 to domain

I am trying to connect an ESX 5.0.0 to our Domain Controler, in order to give a Domain group specific roles security. But I do not see any groups after the host connects to the domain. Under ...
2
votes
2answers
887 views

A Powershell script which runs on a list of computer accounts and sets the security -> permission : “Allowed to authenticate”

As the topic says I'd like to automate the process of running on all computer accounts in my domain and setting this option to enabled otherwise people are unable to log into the servers using RDP. ...
1
vote
2answers
134 views

Add users in Windows machine without AD

I have several development machines where I am the administrator. We are using AD in my organization but is maintained by and offshore IT group any request takes a long time. We are currently ...
-2
votes
2answers
265 views

User with Mandatory Profile can log in to Windows 7 but not to Windows XP

I have a Windows Server 2008 domain with both WinXP and Win7 PCs. Users are usually fine to log in to either OS, but there is one user who can't login on XP. It fails to create his profile. I believe ...
3
votes
2answers
215 views

Found a service which logs on using the account name “.\AccountName” - What does “.\” mean? [duplicate]

Possible Duplicate: Is there a specific name for the “.\” (dot-slash) shorthand used to log onto a Windows machine? I came across a server on an older windows server 2003 box today which ...
3
votes
1answer
971 views

Active Directory DNS SRV records for LDAPS

I would like to be able to automatically detect the LDAP servers of the Domain Controllers for a Windows Domain. Additionally I would like to use SSL to connect to the LDAP servers. As far as I know ...
1
vote
1answer
910 views

EFS Remote Encryption

We have been trying to setup EFS across our domain. Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error. Another worrying fact is that I managed to ...
0
votes
1answer
1k views

Seamlessly Authenticate with a Second Active Directory Server (when primary is down) [duplicate]

Possible Duplicate: What is Active Directory and how does it work? How do you get workstations to (seamlessly) authenticate with a secondary Active Directory server when the primary one is ...
0
votes
1answer
55 views

What is the impact of deleting and recreating a windows account on team foundation server? [closed]

If I delete and re-create a windows account with the same name and permissions, what would be the impact on team foundation server?
1
vote
1answer
2k views

How to autoenroll certificates from a Certification Authority in a trusted domain?

I have two Active Directory domains in two separate forests, all at Windows Server 2008 R2 functional levels. There is a two-way forest trust between the domains. Domain A contains a Windows Server ...
2
votes
2answers
337 views

Hyper-V Manager - Host Access During a Catastrophe

How can I ensure that I can always have Hyper-V Manager access to a Hyper-V server, even in the event that the Active Directory Server is down (in a domain-login environment)? Background: The one ...
2
votes
1answer
3k views

Windows Server 2008 R2, how to define local administrator on each machine?

I need to get a little help in tuning my Active Directory. I would like to be able to give the right of 'local administrator' to a group of users already defined in AD. This is in order not to have to ...
1
vote
2answers
2k views

How to authenticate web users against AD?

We will be hosting a web app on a server in the DMZ. This server is not a member of the domain. The users have existing AD accounts. How can I authenticate my users of this web app against AD? ...
8
votes
6answers
23k views

Fix error determining whether the target environment requires adprep in windows server 2012, during domain controller promotion

I am unable to promote my newly installed Windows Server 2012 machine to a domain controller. I have two existing domain controllers. The primary is at Windows Server 2003 level, and is running ...
5
votes
3answers
9k views

0x19 KDC_ERR_PREAUTH_REQUIRED in my event log

So I have a server, and every time a user or service account logs on to the machine, an error event is generated in the System log: A Kerberos Error Message was received: on logon session ...
1
vote
1answer
23 views

Active Directory login Errordd

I've configured an AD-DS with two user accounts. then I logged in to these accounts using my laptop separately. But after server shut down still I can logged in to these two accounts using client ...
2
votes
2answers
1k views

Allow a non-admin user to modify CNAME records in a limited domain under DNS zone

We're running a Windows DNS (Server 2008, Active Directory) on our network. I have created domains under our zone for each of our web developers, and configured an A record under that domain. While I ...
0
votes
1answer
282 views

Moving SharePoint to new server but retaining hostname

I am trying to make WSS3 accessible on a new server. Currently it resides on a Win2003 SBS server. I have migrated to a Win2008 R2 server, but I am having difficulty accessing the site outside the ...
4
votes
1answer
408 views

Server 2008: Link security group to organisational unit

I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck. I've created an OU called User ...
7
votes
2answers
1k views

Sudoers file allow sudo on specific file for active directory group

I have active directory sign in working on an Ubuntu 12.04 box. When the user signs in, I have a script that runs that needs sudo permission (since it modifies the samba config file). How would I ...
5
votes
1answer
978 views

Add active directory user to linux group upon sign-in

I have Active Directory sign in working on an Ubuntu 12.04 box. When an active directory user signs in, I would like to add them to the group sambasharers. Where and how would I add this ...
3
votes
4answers
2k views

Windows 7 accounts on a 2008r2 DC keep getting locked out randomly

As the title states, this happens randomly to Windows 7 accounts on our Windows 2008R2 domain controller. We just had this start happening after changing from 123together hosted exchange to Rackspace ...
0
votes
1answer
6k views

Error when adding to the domain : the specified server cannot perform the requested operation

When we add computers to the domain in Windows 7, we get the error: Changing the Primary Domain DNS name of this computer to "" failed. The name will remain "domain.com". The error was: ...
7
votes
1answer
19k views

Which firewall ports do I need to open in order for a domain trust to work?

I have two Active Directory domains in two different forests; each domain has two DCs (all of them Windows Server 2008 R2). The domains are also in different networks, with a firewall connecting them. ...
1
vote
3answers
281 views

How to run a logon script but not as the current user

I want to create a log of when people login or logout of computers in a computer lab. My first idea was to just create login/logout scripts that contact a server, but the problem is since these ...
1
vote
1answer
1k views

Cannot Access Windows 2008 R2 Member Servers From The DMZ Zone to the Internal Network Domain Controller

I have 2 Sharepoint Servers and 1 Fast Server(All Windows 2008 R2) moved From Internal Network To The DMZ layer. Now these 3 servers cannot communicate with the DC & DNS(Windows 2000). All the ...
4
votes
1answer
2k views

Using PowerShell, in Active Directory, how would I change all the DNS A records that have a given IP to a new IP?

We've been moving data centers and I have a lot of old records that were not correctly but in DNS as CNAME records, but A records that have a direct IP (e.g. 192.168.100.n) and they're all moving to a ...
4
votes
2answers
41k views

I need to export a list of all users on our domain and I am not familiar with DSQUERY or DSGET?

I am really struggling to create the query that will export the following: Account FirstName LastName the OU that the user resides in Ideally I would like it as a CSV. I do not have access to the ...
2
votes
1answer
86 views

MSSQL 2008 Service Account

Background: We are a smallish company that prefers to keep things simple and not have to manage our Active Directory very much. My company uses a single administrator account to setup and do all the ...