A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
3answers
758 views

Two Printers Deployed via Group Policy - Same Drivers, Same Model, but different icons

Two Printers Deployed via Group Policy - Same Drivers, Same Model, but different icons. The printer model is Toshiba e-STUDIO6550C. All the settings appear to be the same. Has anyone experienced ...
1
vote
0answers
374 views

Can't make updates with LDAP from Linux box to Windows AD

I have a webapp (built using Zend Framework - PHP) that runs on a Linux environment which needs to authenticate against Active Directory on a Windows server. So far my webapp can authenticate with ...
0
votes
1answer
965 views

Server 2012 AD-DS Setup Fails (Microsoft.Directory.Services.Deployment.DeepTasks.DeepTasks not found)

Good Morning everyone, I am currently trying to promote my 2012 Server to a Domain Controller but when I am at the first step in the setup I get the Error Message (German, Original Message): [...
-3
votes
3answers
6k views

How do I change the domain name of my AD DS? [closed]

I recently set up a server with AD DC and used a mydomain.local address for it. I now would like to be able to access the server through remote desktop from outside my local network. So I have ...
4
votes
1answer
2k views

Bulk update displayname attribute to match cn attribute for all AD groups

We are setting up ADFS for identity federation with a Microsoft Online service. The documentation states that "Groups without a displayname will NOT get synchronized..." We have over 250 groups that ...
1
vote
1answer
365 views

Active Directory rendom /upload “Search to find Configuration container failed”

I'm trying to rename our Active Directory domain, following the instructions here: http://social.technet.microsoft.com/wiki/contents/articles/1347.renaming-a-windows-server-2008-active-directory-...
2
votes
0answers
139 views

SBS 2011 Essentials and too many new Mac users

We currently have about 15 users on a Windows SBS 2011 Essentials Server. I've just been informed that we plan to bring aboard about 15 more users that will be using Macs. We'll be using a Mac ...
0
votes
1answer
2k views

Windows Server 2008 - Non-Domain users can see my server shares

Windows Server 2008 - Server Machine Windows 7 Professional - Client Machine I have a domain. It was setup by the client. The shares on the server are restricted correctly when a user logs on to the ...
3
votes
1answer
117 views

Upgrading Active Directory from 2000 to 2008

Our config is currently: 1 Windows 2000 domain controller running ISA2000, dhcp, dns 1 Windows 2003 domain controller as main file server, prob cert server as well, dhcp, dns 1 Windows 2008/...
0
votes
1answer
542 views

Domain accounts not visible in ACL on Windows Server 2008

We have two new servers running Windows Server 2008. One is a file server and one a DC. The file server is joined to the domain, but when we attempt to edit NTFS ACLs, domain objects are not available....
4
votes
4answers
5k views

Can you have multiple writable, authoritative BIND DNS servers for the same zone, like AD-integrated DNS?

In an AD-integrated DNS system, there really isn't a concept of one "Master" DNS server; all AD-integrated zones are authoritative and updatable across all DNS servers, and send updates to each other ...
0
votes
1answer
7k views

How to use Active Directory's homeDirectory attribute for Samba?

I currently have a Samba share setup where I would like to share Unix folders with Windows users, with Active directory as the backend. I see that there is an attribute called homeDirectory in Active ...
1
vote
0answers
300 views

Winbind info shows local users that do not exist

I am setting up Samba on a Linux machine running CentOS 6 (called localhost, and the AD computer I am connecting to is dc.companyname.com), and I have done everything successfully, except when I type ...
1
vote
1answer
87 views

User profile unable to access file server

I have a user whos is unable to access the file server from his workstation, his user account can access it from other machines, I'm able to access it using my account on his computer. I'm assuming ...
0
votes
1answer
984 views

GPO Startup Script can't modify HKU Registry?

I've been scratching my head with my current problem. You see, I have this Startup Script that I pushed via GPO. Problem is, although the script starts alright (I see the event it created when ...
1
vote
2answers
493 views

Strange permission errors with Windows Server 2008

I just don't know a better way to describe my issue that is driving me nuts. I am trying to establish a test domain with virtual machines on a box that has Win7 with VMwware workstation installed. The ...
2
votes
2answers
86 views

Is it possible and safe to store active directory users data on a linux file server?

I want to store the redirected folders of 40-50 roaming users on a Linux server, is it possible and safe ? I really need to get those folders out of my Domain Controller, and I got only linux servers. ...
-1
votes
1answer
510 views

Manage computer from active directory manager [closed]

Within dsa.mac when I right-click on a computer and choose "Manage", it displays the following error message: Can't find path to computer \\computer.domain.tld. If I try ping computer.domain....
0
votes
3answers
2k views

Why Does A/D Account Need SQL Server Login?

I need some help on understanding the differences between Windows and SQL Server Authentication: We have a SQL Server 2008 set to SQL Server and Windows Authentication Mode. There is one A/D user -- ...
-3
votes
2answers
139 views

Designing a network architecture [closed]

I am building a network architecture from scratch for a small company (~20 users). I plan to use the "classical" model: -A server that contains Active Directory -A server that contains Exchange server ...
1
vote
1answer
414 views

Active Directory domain membership for a colocated server and its hosted VMs

I will be setting up a single hardware to be colocated in a data center to host several Hyper-V guests, all of which will have Windows Server 2012 installed as the operating system. I will be managing ...
1
vote
1answer
112 views

Sharepoint 2010 server farm

Here is my current Sharepoint 2010 setup. I have 3 VM's running on the same server. The 3 VM's are as follows (all Windows 2008 R2) 1) Active Directory server 2) Sharepoint server 3) SQL Server ...
0
votes
3answers
881 views

Is it possible to prevent a node's primary DNS suffix from changing when it joins an active directory domain?

I have a Win2K8 node with dns suffix vm100.eng.mycompany.com. And I want to join it to an AD domain (which uses a different DNS suffix. ad.mycompany.com) but I don't want the node's primary dns ...
0
votes
1answer
347 views

DCPromo Before or After?

I have an older Windows 2003 Server that is doing moderate duty right now -- small SQL database and an LOB application. I plan to: Make it a DC. Install DHCP/DNS/WINS as backup for the FSMO role-...
4
votes
2answers
457 views

Introducing a Windows Domain Controller into an all mac-client network

A company is about to hire me to be their I.T. Admin. (They currently have no Admin). In the interview, they stated one of the things they want me to do is put in a MS Domain Controller. The thing ...
10
votes
1answer
586 views

In a multi-domain forest, what EXACTLY happens when some, but not all, of the Infrastructure Masters are on Global Catalogs?

There are plenty of TechNet articles, like this one that say that phantom object don't get updated if an Infrastructure Master is also a Global Catalog, but other than that there isn't a lot of in ...
2
votes
2answers
8k views

Windows Server 2012 DC loses time sync after reboot/dcpromo

I'm currently experiencing an issue that has baffled me for the past few days as none of my searches here or google yielded in any positive results. Our current environment has 19 sites with as many ...
1
vote
2answers
232 views

Active Directory LDS classes: what's the difference?

I'm creating some AD LDS objects. In AD I'm prompted with this window. What's the difference between 'container' and 'group'? Is there a web resource that lists the difference? I haven't been able ...
4
votes
2answers
2k views

Practical limit on groups in AD?

Our company is trying to rethink our approach to managing permissions among employees for access to project files in our domain. We're considering creating a new AD Group for each office project and ...
1
vote
2answers
80 views

Centralized change of resolution in Windows

How can I change the screen resolution of several Windows 7 machines from a central point, i.e., a server running Active Directory?
2
votes
1answer
1k views

(Powershell) Method to return a list of groups where a specific user has 'write member' security

We use a piece of web-based software that users can log on to in order to manage access to shares controlled with AD groups. The list of groups a user can manage are the groups on which they have '...
3
votes
3answers
915 views

Does active directory log authentication success/failure with the OS?

For example, if I use an AD account to login on Windows 7 and then Windows 8, will I be able to tell in logs setup by default? If not by default, how would I set this logging up?
2
votes
1answer
681 views

How Does A PC Know To Use Another Domain Controller When Its Regular Domain Controller Is Offline

I condider myself to have a very good understanding of Active Directory and I am aware of the obvious benefits of having more than one domain controller in a domain. My question is basically this. ...
2
votes
2answers
448 views

SVN Active Directory authentication with ProxyPass redirect in the mix

We have a BitNami SVN stack running on a Windows machine which holds our SVN repository. It's set up to authenticate against our AD server and uses authz to control rights. We need to be able to ...
0
votes
1answer
991 views

Default username format in Active Directory

Since Windows 2000 NTLM has been replaced with Kerberos. Thus Kerberos uses UPNs to identify the users. UPN is also the preferred usernaming format. Now, why does Windows 7 still display a logged in ...
1
vote
1answer
4k views

How do you get around security warnings when redirecting AppData?

I've recently set up folder redirection for my user profile in a domain. For now, I've redirected AppData, Desktop, Pictures, Documents and Favorites. So far, so good. But now I've noticed a quite ...
0
votes
1answer
603 views

Cannot leave domain - specified domain does not exist or cannot be contacted

I have a Windows Server instance joined to a domain. I need to join it to a Workgroup temporarily but when I try to leave the domain it gives me the below error "The specified domain either does not ...
-1
votes
2answers
400 views

Access a remote active directory

I'm currently trying to query a remote Active Directory on a Windows Server 2008 R2. However, I'm not able to query the directory if I enter the following string in the cmd line: dsquery user -name m*...
2
votes
1answer
470 views

Authentication failure unless the user account is locked in AD

Have you ever seen authentication failure happening consistently, unless the offending user account is locked in AD? I am entering my credentials to access a network share that I have authorisation ...
2
votes
4answers
3k views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
2
votes
1answer
396 views

Active Directory Administrative Center doesn't list users?

I opened "Active Directory Administrative Center" on our domain controller and when I add the criteria "Users with disabled/enabled accounts." it returns nothing, but I know we have users accounts ...
3
votes
1answer
890 views

Searching users by country, and have the result summed pr. country

I am trying to use Get-AQDUser to get a summed list of users per country. So far a have this $Country = Read-Host "Please Enter the country of which you want to see users " Get-QADUser -...
1
vote
3answers
3k views

shutdown -i all computers in active directory domain

I'm not sure if this is possible, but this is my goal: At the end of the day, I want to be able to turn off all the computers in the domain from a client. My account has sufficient privileges to ...
1
vote
1answer
3k views

w2k3 AD DC Demotion fails with “no other AD DC for that domain can be contacted”

i've a small office with a single w2k3 sp2 DC(bad idea, but it is real), now, i want to make a clean install of that pc, so, i got another one, install w2k3 sp2, add it to the domain, dcpromo and set ...
1
vote
0answers
394 views

Windows Server 2008 R2 Software Deployment on Active Directory - Schema Issue

We have two servers, one running Windows Server 2003 SP2 and one running Windows Server 2008 R2. Both servers have their own versions of Group Policy Management (1.0.2 on 2003 and 6.0.0.1 on 2008). ...
3
votes
1answer
374 views

Powershell script for setting password expiry

Due to mistakes by the helpdesk staff, I found that over a 100 user accounts in my company AD have been set so that their passwords never expire. To avoid the situation in which all these users ...
2
votes
3answers
903 views

Automatically add ActiveSync users to AD group?

Is there a way that, upon first successful sync via ActiveSync, a user could be added to an Active Directory group?
25
votes
3answers
13k views

How are cached Windows credentials stored on the local machine?

How are cached Active Directory domain credentials stored on a Windows client? Are they stored in the local SAM database, thus making them susceptible to the same rainbow table attacks that local user ...
0
votes
2answers
90 views

How to protect files from been access outside the network?

i am trying to find a solution regarding an issue that i am facing, we have a small server that is only used for sharing company files, their are some files that are created on employees company ...
0
votes
2answers
73 views

Relocating user Workstations home, No AD Access

We are closing one of our offices and I have to move a handful of workstations to our user's homes. Since AD is no longer reachable, I assume I have to dis-join them from the domain first? What will ...