A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
310 views

Create root windows domain named subdomain.domain.local in the same forest of domain.local

Is it possible to create a new windows root domain named subdomain.domain.local in the same forest where the root domain domain.local already exist? Please note I am not saying to add a child domain ...
1
vote
1answer
483 views

passwd for ldap users

I'm trying to enable linux hosts to authenticate against an active directory server using port 389 and tls. I seem to have that much working, but the users cannot change their passwords via passwd. ...
1
vote
1answer
1k views

Reboot loop after sysprep of AD machine

Major screw-up here and I need to find out how much trouble I am in. I have an AD machine that is running Server 2008 R2, hyperv, DHCP and DNS. On the hyperv machine, I have a backup AD instance ...
0
votes
1answer
85 views

Remote access dialog doesn't show users

I am trying to set up remote access for her but the computer doesn't have any local users and the computer has nothing except for the computer in the places dialog box when I go to add users to the ...
1
vote
2answers
457 views

Accidental sysprep of AD machine

Major screw-up here and I need to find out how much trouble I am in. I have an AD machine that is running Server 2008 R2, hyperv, DHCP and DNS. On the hyperv machine, I have a backup AD instance ...
2
votes
1answer
156 views

Test Environment Domain Controller

I'm going to be testing some software, MDT 2010 and Configuration Manager. I would like to create a virtual test environment. The Host box will be running Server 2008 R2 and the clients will be Hyper ...
0
votes
1answer
707 views

WMI Security issue

When I am trying to access WMI from a remote domain controller using WMIMGMT.MSC, I keep getting "Failed to connect to \(remote server) because 'Win32: Access is denied.'. Does anyone have any ideas ...
1
vote
1answer
2k views

Cannot bind to AD from Snow Leopard

Mac OS X Snow Leopard cannot bind to my Active Directory (Tiger, Lion can with no problem). I go to Accounts > Login Options, click Join and enter the details. Upon entering the correct FQDN ...
1
vote
1answer
203 views

Adding 'manager' from seperate trusted domain

I have 2 domains that trust each other. I need to change a single user's manager attribute to a user from the other domain. The selection window for this only allows me to select the domain that ...
1
vote
2answers
2k views

Change Domain Controller time +5 minutes

I have medium-sized Windows network of 60 workstations and 10 servers (2 of which are Domain Controllers). One DC holds the FSMO roles including the PDC Emulator. This the DC with PDC does not sync ...
1
vote
5answers
3k views

Windows : Only Run Install Startup Script if Directory Doesn't Exist

I want to install some programs via a startup script, but once it has run for the first time it'll just reinstall wasting time and overwriting. It's a Server 2008 R2. Somewhere I found this IF NOT ...
5
votes
2answers
596 views

Where is my AD-Integrated stub zone data being stored?

I have an Active-Directory integrated stub zone that appears to be functioning properly (zone data is populated on every DC). It is stored in the DomainDNSZones partition, but I do not see any dnsNode ...
2
votes
2answers
175 views

Changing the network address of a Windows 2000 AD domain

The situation: Two formerly completely separate Windows 2000 AD domains need to be connected to a common router. (The reason why is not important.) Unfortunately (for me), both domains currently have ...
1
vote
1answer
83 views

Domain Controller authentication

The idea is to find number of users logged on to a particular logon server. We have one physical windows 2003 server and one virtual windows 2008 server as part of domain. The aim is to backup 2008 ...
3
votes
2answers
2k views

Windows Server 2008 R2, reinstall without losing AD

I need to re-build a Server 2008 R2 instance, but I don't want to lose all the current Active Directory info, what's the best way to go about it? The reason I'm rebuilding over repairing is great, as ...
4
votes
2answers
4k views

Block computer from joining a domain if it has the same name as another computer object in ADUC

At work we have a Domain Controller running Server 2008 R2. Our desktop support group has the ability to join computers to the domain using their network credentials. We are now running into a problem ...
2
votes
1answer
1k views

can dc metadata cleanup be done manually on Server 2008?

I ran dcpromo to demote a W2K3 dc. The wizard completed without a hitch. However, there are now a few anomalies: Launching nslookup from the remaining dc (W2K8 R2) gives the result- Default ...
0
votes
1answer
99 views

Provisioning System for Enterprise

In our companie we have a lot of systems: CRM, ERP, payroll system, etc.. The problem is that NONE of these systems are integrated with our Active Directory. From a admin and security perspective ...
1
vote
1answer
207 views

Updating Client and Domain password domain and vpn

Win server 2003 R2 and Windows 7 Pro on VPN. Client computer will never been in domain without VPN. When I press ctrl+alt+del, and enter the new password i get the error: Unable to update password. ...
6
votes
1answer
5k views

Default full name format in Active Directory

When I create a new account in Active Directory, I enter the new user's first name and last name, and it auto-fills the full name in the form "First Last". Can I set AD to use "Last, First" instead? ...
3
votes
2answers
396 views

internal AD domain vs. internet domain

By mistake the internal Active Directory domain was named as an Internet domain that the company does not own. Exchange 2010 was installed and runs fine internally. The problem is now they need to ...
0
votes
2answers
824 views

Active Directory and VPN on single server setup

I've attempted this several times now and never got it exactly correct. I am looking to setup my ML5 server as a VPN Server, Domain server, DHCP Server and file server. However every time i have ...
0
votes
2answers
6k views

processing of Group Policy failed only on 2008 Servers and Name Resolution failure on the current domain controller

Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain. our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 ...
0
votes
1answer
5k views

Windows Server 2008 R2 drops packets

I seem to be having strange problems with my WS2008R2 Active Directory + DNS + DHCP + NAT configuration. It look to be some sort of an issue between DNS, NAT and LDAP. The first consequence is some ...
3
votes
1answer
3k views

How to debug the integration of a Windows 7 machine into a Samba 3 domain?

We are running a Samba 3 domain (Samba 3.5.6) with a LDAP backend. Lately, we installed Windows 7 on a virtual machine (called schnellwienix) and joined the computer to the domain, following the hints ...
4
votes
1answer
179 views

Limit Windows accounts for a specific IP only?

Is it possible to restrict a Windows AD account to only login from specific ips, using a non third party tool?
1
vote
1answer
84 views

Additional domain on existing DC

Is it possible to add a second domain to an existing Windows 2008 server? This server is already hosting a DC (dc1). I tried dcpromo and wizard prompted me that existing DC will be erased or ...
0
votes
3answers
120 views

Windows 2003 - several names for a server

I am trying to consolidate an old file server (named server3) onto a newer one (named server2). I want to give server2 a second name (server3), allowing every workstations to use it without any ...
2
votes
1answer
1k views

How important is LDAP over SSL with Active Directory?

I set out to integrate Active Directory with the iDRAC LOM for our Dell servers. One of the prerequisites is that the Domain Controllers be SSL enabled for ldap communication. The setup process in ...
3
votes
4answers
409 views

CEO Needs Two Exchange Mailboxes

Our CEO has requested a second mailbox for his personal email. His primary mailbox is visible to his assistant but he belongs to an external organization that requires that only he can see email ...
2
votes
1answer
2k views

How to migrate domain account to local account?

How can I safely migrate an account from domain to standard local account ? I have a plenty of software installed within this account and I do not want to reinstall it again. I assume there are so ...
1
vote
1answer
613 views

Windows 7 (roaming profiles) not seeing printers deployed with printer management?

I've got a network with about 15-20 printers deployed using printer management that is setup on a Win 2008 server. All the users have roaming profiles. All the XP machines get all the printers ...
2
votes
3answers
107 views

Primary domain controller for web hosting + SQL cluster

I was hoping to get some advice here on a web hosting query. We are building an eCommerce website that will basically reside on 2 x web servers (fronted by a load balancer) and interacting with a ...
0
votes
1answer
782 views

Google Apps For Business, SSO, AD FS 2.0 and AD

We are a small company with 22 people in the office. We had a lot of problems with e-mail in the past so I decided to change over to Google Apps for Business. It is the perfect solution for us, ...
2
votes
2answers
761 views

Kerberos constrained delegation to domain controllers

Setup: Forest Functional Level: Windows 2003 All DCs - Windows 2003 64 bit SP2 Requirements: Citrix server wants to use Kerberos delegation for SSO purpose. They want to create Kerberos constrained ...
1
vote
2answers
5k views

How to debug missing enterprise root ca certificate?

We have a openssl offline root CA with a Windows 2008 R2 AD-integrated SubCA. The Openssl Root CA was published to ldap CN=ROOTCANAME,CN=Certification Authorities,CN=Public Key ...
0
votes
1answer
94 views

Seperate Network Cards - Clients cannot resolve

I have a domain controller that is also a DNS server for our internal clients it has two network cards within the Machine, presently one of them is disabled and the other is configured in the ...
10
votes
3answers
17k views

Restrict access to IIS site to an AD Group

Is it possible in IIS to set up a site in IIS and only let users of a certain AD Group get access to it?
1
vote
4answers
11k views

Domain Issues-Computers Seem to drop “off” the domain

I am having a issue with the domain at work (P.S I am not an IT prof.) and I was hoping someone could help me debug what is happening or point me in the direction of where to look. The whole thing ...
0
votes
3answers
1k views

Automatic Login to Active Directory via VPN

I need to connect a remote computer (physically outside of the domain) to the infrastructure at our data center which is controlled by active directory. I can VPN to the data center just fine, but I ...
0
votes
3answers
3k views

Cannot transfer Schema role to another Domain Controller

I've inherited a small data center that is setup with two domain controllers. The first domain controller (that is home to the five operational masters roles (win2003server) is an older server and I ...
0
votes
2answers
2k views

Connecting Vista/Win7 Clients to SBS2011 AD

With a new SBS 2011 server a customer ordered from Dell, I was trying to connect some Windows Vista Business and Windows 7 Professional clients to it, and I keep getting errors. So, I mustered up all ...
0
votes
2answers
113 views

2003 AD to 2008 AD upgrade causes random computers to flake out with Intranet

I rencently did an upgrade from 2003 AD to 2008 AD onto a new box. Ive kept the 2003 running as a secondary system, but i moved the FSMO files, ran everything properly including setting up the DNS. ...
2
votes
3answers
8k views

How do I reissue machine certificates for my Active Directory members now that I have a private CA?

So I have a working Active Directory. I've recently added a new machine to act as an Active Directory Certificate Authority. I've added a Group Policy (Computer level) for automatic certificate ...
-6
votes
2answers
402 views

Is There An Active Directory Alternative [duplicate]

Possible Duplicate: What Are Some Good Open Source Alternatives to Active Directory? Is there an alternative (preferably FREE/Open Source) to Active Directory. Either managed via Windows or ...
3
votes
3answers
330 views

Is there a way to do a “run as” in a command line?

So, we are trying to push out the full .Net Framework 4 to all out client workstations within an Active Directory environment via the login batch file in the SYSVOL folder. I added the following ...
4
votes
3answers
3k views

What are the consequences of an AD group that has as its member a group, that is already a member (Cyclic references)

I have been looking at an Active Directory that has several thousand groups, where pairs of groups are members of each other. GroupA has GroupB as a Member. GroupB has GroupA as a Member. Oy. I am ...
1
vote
3answers
700 views

UAC in an Active Directory environment

At work, we've recently received a recommendation to have two separate accounts for domain administrators. One account would be a standard user account with no admin privileges and one would be a ...
1
vote
1answer
2k views

Windows Server : role of SYSTEM and CREATOR OWNER users?

I'm working on a SBS2003 server, and I'm about to clean up on folder permissions. I notice that quite a few folders have the users SYSTEM and CREATOR OWNER set. Now, I've found descriptions of the ...
1
vote
1answer
1k views

squid3 auth thru samba using ntlm to AD doesn't work

some users here are spending to much time exploring the WWW. So big boss whats to get this under control. We use a squid3 just for some security reason and chace benefits. and now i'm trying to set ...