A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

-1
votes
3answers
483 views

Adding a user to the administrators group but doesn't work

I have Windows Server 2003 with Active Directory. When I try to create a user, then add it to the administors group the user still has the same privileges. In other words, when I try to give ...
6
votes
2answers
1k views

What's the default hash format / algorithm of Active Directory?

I'm wondering what format I need to put hashes in to write to userPassword via LDAP. Apache Directory Studio gives me several options, but I don't think any of them are it. Can anyone document the ...
1
vote
2answers
68 views

Extending GPO in MS Active Directory

Is there a repository/site or any update package for the administrative templates in the GPO (Group Policy) of the MS Active Directory?
3
votes
2answers
272 views

Should I phase out our Windows Domain entirely?

Over the last year we have migrated almost all services that used to run on our Windows server (SBS 2003 Premium) to another server running Linux. The last few services will shortly be moving to a new ...
3
votes
1answer
421 views

Which tool to use for managing GPOs: AGPM or SCM?

I am investigating the different solutions available to manage GPOs. I see that Microsoft proposes two tools, which are AGPM (Advanced Group Policy Management), part of the Desktop Optimization Pack ...
0
votes
2answers
623 views

VB6 Application Permission Denied Error 70 for Active Directory Users

I've setup a small Active Directory users for about 25, In every individual machine they run an old VB6 Application but some how the domain users can't run it, It raises an 'Permission Denied: Error ...
1
vote
2answers
630 views

Active Directory: currently logged in users with C#

Is there a way to list all currently logged in users in Active Directory (ADAM) using C#?
2
votes
2answers
1k views

How to retrieve last logon/logoff time in Active Directory (ADAM)?

I need to write code (C# or Java) to retrieve user logon/logoff information from ADAM, but i'm not sure where to start or if it's even possible.
2
votes
2answers
5k views

help using setspn and ktpass

I'm trying to set up the SPNs and create a keytab file for tomcat kerberos spnego Single sign on. the server running tomcat7 is ubuntu-ad1.wad.eng.hytrst.com the KDC is kerberos.wad.eng.hytrust.com ...
3
votes
1answer
223 views

Active Directory lookups from bound Mac without user credentials

One of my Mac boot scripts needs to grab a property from AD that is not one of the ones I can see with the built in tool called dscl, which is pretty much limited to Users, Groups, and Computer ...
1
vote
1answer
3k views

Access Denied \\domain\sysvol\domain\policies

Recently started at a company and I'm trying to perform one of my first admin tasks... Creating a group policy to map a drive for a remote office. I've got the group policy configured but when I go to ...
1
vote
1answer
337 views

Changed static IP on a DC by mistake and can't log in to change it back

I made a goof. I was in RDP and checking out the network settings on one of my domain controllers (Windows Server 2003 SP2) and I accidentally changed the static IP to a different subnet, and poof ...
6
votes
2answers
6k views

Adding new root/enterprise CA without disturbing existing one?

I am looking at installing a new AD-integrated enterprise certificate authority structure, but have discovered that somebody already has created a CA (mostly used for SSL on internal websites). I ...
1
vote
2answers
121 views

Checking a mac can talk to a Domain Controller

I would like to know a series of steps that could be checked before binding a Mac to a Domain. I'm not sure how the client communicates with the DC but I'm happy to read if someone can point me in the ...
6
votes
3answers
3k views

Add last user logged in into AD Users and Computers description field

The last place I worked had AD setup in a way that in the Description field of each computer account in the AD users and computers console, it would say who logged in last and when. How do you set it ...
3
votes
2answers
2k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
1
vote
1answer
2k views

DNS servers on Local Area Connection should include the loopback address, but not as first entry issue

We have a small network that doesn't currently take advantage of IPv6, and I am in the process of introducing a windows 2008 server into the domain. I'd like it to eventually become our primary dns ...
2
votes
1answer
809 views

Single Sign-on for Intranet WordPress using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory?

Is it possible to have single sign-on for intranet WordPress sites by using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory? I'd like to have Active Directory users ...
1
vote
2answers
137 views

Failed 2003r2 Domain Controller [duplicate]

Possible Duplicate: What needs to be done after a Domain Controller crash? We have (had) two domain controllers, one of which recently failed. For a number of reasons, restoration is not on ...
7
votes
4answers
4k views

Move computer accounts to new OU in bulk

I have an OU with around 2500 computers. I need to move 580 of them to another OU. Is there a way to do this with a batch file? I have a text file with the computernames (not the FQDN).
8
votes
2answers
2k views

Upgrade software package installed with GPO

Since recently I have been using AD policies to deploy software packages through GPO on a small domain. This had been working well, but I am not sure what is the correct procedure for upgrading a ...
6
votes
3answers
445 views

How to configure DNS server on domain controller

here is my situation. I have 3 domain controllers, ad1(10.0.0.1), ad2(10.0.0.2), ad3(10.0.0.3) and I'm not sure how to configure DNS servers on theese servers. My configuration is now: AD1 Primary ...
0
votes
4answers
262 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...
3
votes
1answer
440 views

Active Directory memberOf LDAP syntax

I want to add a user (from Sun IDM to Active Directory) to more than one group. The command memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA is for only one and I want to add a second one immediatly after the ...
1
vote
1answer
401 views

Connect domain controller Windows Server 2003 to another one on Windows Server 2003

In Active directory, when I try to connect to another domain controller, after adding that domain controller and press ok, a message appears to me: The following domain controller could not be ...
2
votes
2answers
458 views

Possible way to migrate a small Active Directory domain?

I have attempted to figure this out with only my google-fu, however I am not familiar enough with active directory to confidently use guides not about my specific situation without at least asking. ...
0
votes
2answers
154 views

How do I give HOSTNAME\Administrator access to MSSQL01 MySQL service?

I got this far... but there are no Computers listed... while there are 3 other domain members: DC (Domain Controller), VCENTER and BACKUP. I wish to give both VCENTER\Administrator and ...
0
votes
2answers
178 views

SQL Server: best account for dbo user?

What is the best account for dbo user? I mean that if I use personal AD account for database owner, and if this account is removed from AD (e.g if I leave my job), these databases are not accessible. ...
2
votes
1answer
407 views

Authenticating Apache/SVN via Active Directory

I am absolutely tearing my hair out with this one, largely as a result of not being able to find any real documentation on the topic. My box is ubuntu server, and my repository is fully browsable - I ...
2
votes
3answers
983 views

AD Domain Alias

We recently acquired a company running a very similar domain to ours, and we would like to merge the company into our domain. The question is, can we provide a domain alias and map that to our domain ...
0
votes
2answers
771 views

Parallel login to user account in Microsoft Active Directory is it good?

I have discovered that users in my Active Directory domain can log in to their account many times parallely. I mean for example 2 machines and on each login to the same account. Is it good? I see ...
3
votes
3answers
1k views

Active Directory Bulk Group Edit

Is there a way to update the "Managed By" field for every group in Active Directory? I would also need to check "Manager can update membership list" also.
1
vote
2answers
68 views

Time synch in AD

Is it possible to force exactly same time to all clients in AD? If yes how can I do that?
0
votes
2answers
374 views

Domain user added locally as administrator, having permission issues

Windows 7, new computer. User's domain account is added to the Administrator group, but when running certain apps (for example, editing the hosts file using Notepad or running command prompt...) is ...
0
votes
2answers
1k views

How to easily rename a domain that contains only LDAP users?

I need to rename/recreate a domain from example to lan.example.com. Current PDC for "example" Windows 2003 SBS domain with 0 computers added to domain It has user accounts created that users use to ...
1
vote
1answer
234 views

Is there any way to Customize Active Directories exception/error message?

I am using Active Directory as a data store for the users of my website. I have Active Directory throwing the following exception in case password does not meet any password policy constraint. The ...
2
votes
2answers
398 views

Member Server DNS records being removed over night

Following further investigations from my previous question, and the good advice of @Shane Madden I have the following environment: 2x Windows Server 2008 R2 Member Servers COSTELLO (Build Server) ...
0
votes
2answers
2k views

how to set printer preferences common to all domain users

I have a client with windows xp professional. This client has a printer phisically connected. There are a lot of users who login to this computer using domain authentication. Unluckily the first time ...
3
votes
3answers
285 views

Sync OUs within Active Directory

I'm setting up two OUs in Active Directory to support a software package we're getting ready to roll out. One OU is for production, the other for training/sandbox. It is required that these be ...
4
votes
3answers
273 views

One AD user Multiple Logins

I have a department of 20 users or so, which basically work in shifts but access the same desktop and settings, I am thinking to join these computers (15 computers) to AD and create only ONE account ...
1
vote
1answer
933 views

Faking a massive password change in Active Directory

I'm configuring a Zentyal box as a gateway. For Proxy authentication i'm trying to synchronize Zentyal with an AD vía LDAP according to Zentyal's documentations ...
5
votes
3answers
565 views

Active Directory customization and Human Resources management

So I'm new to Active Directory and I am being asked about extending it to include basic details about people's employment status and other custom fields. What are some good tools to help-buildout AD, ...
6
votes
3answers
995 views

Logging onto Windows local computer without local or network account

I have a Windows 7 Professional machine that has accidentally been removed from the active directory on the domain controller. Therefore the network does not recognize this machine and the machine ...
0
votes
2answers
165 views

Active Directory and Remote Mac Admin Users

We have multiple users running on Apple Macs in our environment, day to day they are Admins of their local machines. This is done my adding a group to the domain configuration to allow administration. ...
4
votes
2answers
498 views

Is it acceptable to install an additional domain controller on a database server?

I have my first domain controller on an Amazon EC2 instance, which is only used for service and administrative accounts for a handful of servers. I would like to avoid the expense of another server ...
0
votes
1answer
59 views

Steps for Removing a Site from Windows 2003 Active Directory

What are the steps to delete a site from AD 2003 that no longer exists. A MS knowledge base gave instructions for removing it out of Sites and Services but it still exists in AD under ...
2
votes
1answer
7k views

How to get an text list of login names for a user group of a windows server

I must copy all login names of a specific user group of a windows server to a 3rd party system. To make it easy I need an text list of the login names. I don't like to copy the login names from the ...
4
votes
1answer
2k views

Linux computer (Debian) in a Windows Active Directory Domain, Administrator of AD should have root permission after login

I managed to join my Debian machine (Squeeze) to an existing Active Directory (MS Windows 2008 R2 Server). Everything works fine, I can login using accounts from the Active Directory (NTP, Kerberos, ...
5
votes
4answers
406 views

Active Directory New User Workflow

I work in a small organization that uses a single file & print server with an Active Directory domain for user management. The office admin who inducts new people is non-technical and generally ...
1
vote
3answers
3k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...