A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
952 views

Changing World Wide Web Services (HTTP Traffic-In) via Group Policy

I am working on designing some group policy elements for our servers. Without getting into a debate about pros or cons of group policy, I was curious if the following could be performed. I would like ...
2
votes
3answers
324 views

Alternatives to the Cisco “Windows Server on WAAS appliance” for satellite office usage [closed]

We need to deploy RODCs to many small satellite offices where we may want additional lightweight infrastructure there too (file, print, dhcp) Are there any networking devices that include RODC ...
6
votes
1answer
469 views

Stretched datacenter between cities

We're planning to implement a stretched datacenter between our two sites. The connectivity between them is a single 100mbit QinQ connection. We have about 500 users at site A and 200 users at site B. ...
1
vote
1answer
541 views

Restricted account for interrogating Active Directory by LDAP

Our phone system has the ability to load its phonebook via LDAP, but it only supports non-SSL. As a result, I am planning on setting up an account that only has access to read our Active Directory ...
0
votes
1answer
118 views

Users logging into Windows 2008 R2 Server?

We've found a bunch of users in our server's "Users" folder. Not entirely sure how this happened, or what is going on. This server is also our front end mail server (Exchange 2010) We have ...
3
votes
1answer
994 views

Migrating to Windows Server 2008 R2 Domain Controllers - a few Questions/Issues

Ok so here's our setup: We have 2 Windows 2003 Domain Controllers. I am trying to replace them with Windows 2008 R2. The 2003 servers are named DC01 and DC02. The 2008 R2 servers are DC1 and DC2. ...
1
vote
3answers
1k views

Possible to enable ssh passwordless authentication via Windows Active Directory?

Is it possible to set up ssh and Active Directory (Win2008r2 flavour) such that domain-users can access *nix and ssh-servers-running-on-Windows-servers without needing to type their password? If so, ...
1
vote
1answer
877 views

Cannot log onto Domain after demotion of primary DC

I had two Domain Controllers (one for 2k, and another 2k3). The 2k server was the primary controller with all the FSMO roles. I transferred those roles, as well as the GC to the 2k3 server. I ...
1
vote
1answer
336 views

Cannot login after removing DC role

I have removed the Domain Controller role from my Windows Server 2008 R2. Now I cannot login remotely any more with the Administrator account, neither using the username "\Administrator", nor ...
2
votes
3answers
1k views

Restoring profile to deleted user

We have an issue where a user's account was deleted and then another account was created with the same username. On Windows XP, the profile for this user was created in the folder "user.DOMAIN" ...
1
vote
3answers
25k views

How to tell where user account is logged in

In a windows 2003/2008 mixed domain, is it possible to find out where on the network a particular account is logged into? The account keeps getting locked out, and we think the account may be logged ...
1
vote
0answers
109 views

Accessing Outlook Address Book

I have a Delphi XE app and I'd like to pop up the address book dialog that Outlook uses from within my Delphi app - I assume there are COM classes to support this? What's the best way to get this ...
6
votes
4answers
10k views

A good way to reboot all computers on a Windows domain each night

What is a good way to reboot a list of windows computers on a windows domain? Assuming the windows domain controller does not have a service to do this, please make recomendations for a script. Can ...
1
vote
2answers
4k views

Can't add domain local security group to local machine admin group - Windows Active Directory

this is a 2000 functional level domain :( :( :( * I have a domain local security group in domain A which contains 1 user from a domain B and several from domain A. On a server in domain A, I can ...
1
vote
1answer
357 views

query group policy settings across all group policy objects on an AD server

I'd like to find if a single Group policy setting has been applied on a specific domain / AD server. In the simple case of modifying the the default group policy I can look up the policy setting via: ...
2
votes
1answer
259 views

AD installed on subdomain, registration failing for parent domain

Our Active Directory domain is installed on a subdomain (us.example.com). The parent domain (example.com) is for mostly linux servers located at our datacenter - for our website and other public ...
0
votes
2answers
840 views

Add Mac (OS X) to Active Directory DNS name resolution

I'm running an Active Directory domain via Windows Server 2008; it's running DNS and DHCP, there is only one subnet. All of my Windows computers are able to ping each other my name, but I can't ping ...
2
votes
1answer
3k views

How to configure basic authentication in IIS SMTP Server?

I feel like this is a stupid question but: I have a test environment set up where I need to enable SMTP basic authentication with IIS. I have a Win2k3 r2 server as a DC in its own windows domain ...
2
votes
2answers
557 views

New Active Directory domain for small Dev shop, moving users data to domain account

We have decided that it is time to build a domain in our smallish office, and i have been tasked with the job. The Domain is setup, and we are in the process of creating usernames and passwords for ...
0
votes
3answers
7k views

Domain User Account Keeps Locking. No hints in logs

I have account which keep locking out every few mintues in AD. I'm using Windows 7 Enterprise X64 PC I'm using Windows 2003 STD server These are the things i have tried. Created new profile. ...
1
vote
1answer
475 views

Integrate SAP GUI with microsoft ldap

What is the best way to integrate SAP login with Microsoft LDAP? I would like to make my users login to the SAP GUI with their windows Active Directory account.
0
votes
3answers
299 views

is there a good tool for viewing the permissions in AD?

I want to be able to see a nice picture of nested groups in AD. Are there any products that do that for me?
2
votes
2answers
3k views

Child Domain Migration to Parent Domain

Our company is planning on moving from a single forest with multiple domains to a single forest with a single domain. This is my infrastructure: Forest Root ROOT-DC.techtunes.lan ...
1
vote
2answers
158 views

joining domain - store password and avoid prompting password

While joining a domain from a linux machine , I give this command: net rpc join member -U Administrator. Now, the above command prompts for (Administrator) password. Now, I wish to store the password ...
-5
votes
1answer
334 views

Why is Active Directory so big and confusing? [closed]

Am I the only person who feels this way? Active Directory is a staple in business networks and it clearly provides some important services like single sign on and DNS integration and directory ...
0
votes
2answers
3k views

Server 2008 R2 Slow Startup fix

We are currently running 2 Server 2008 R2 Active Directory Domain Controllers at work, and a fail-over cluster running on them to provide resilient File, Print and DHCP serving. Server1 holds all of ...
-4
votes
2answers
2k views

Sharing an Internet connection for Active Directory users through a domain controller? [closed]

Requirement: I have two NICs in my server (DC). Frist NIC - WAN (static IP address) Second NIC - LAN (static for Active Directory users to join) I need to share the Internet connection from the ...
1
vote
4answers
2k views

Using admin credentials to log on as a user vs. storing passwords

Our office uses a Windows Domain with Active Directory to manage user access to machines and network resources. The IT staff maintains a record of everyone user's password, which is used mainly for ...
3
votes
1answer
1k views

Do not use VPN credentials to connect to network resources?

I recently deployed a new remote access VPN system at my company, using a Cisco ASA 5510 as the concentrator. The protocol is L2TP-over-IPsec for maximum compatibility across clients, and ...
0
votes
2answers
1k views

DFS Replication not “snappy” enough (Missing files)

I have two Domain Controllers. DC01 usually contains everything and is doing great (AFAIK), however DC02 is constantly "missing" files that are clearly visible on DC01 and should have been replicated ...
2
votes
3answers
900 views

Can arbitrary email addresses be stored in AD userPrincipalName?

I have a web app that is front-ended by ISA, natively authenticating against AD. All users currently log on with sAMAccountName. I would like to allow users to provide a personal email address and be ...
3
votes
2answers
5k views

Cannot connect to Active Directory Domain Controller

I have been working since last night to get our shared hosting machines connected through Active Directory (long overdue) but am running into an issue with clients connecting to the Domain Controller. ...
2
votes
2answers
395 views

Is Active Directory right for our needs?

We run a moderately sized Hosting Company, all of our machines (around 100 or so) run Windows Server 2008 R2. About 30 of these are our shared hosting machines which we run and host client ...
2
votes
1answer
3k views

Active Directory GPO for Password Policy Not Applying from Default Domain Policy

Ok. I have implemented a Password Policy. I know from previous posts that it cannot be applied from within an OU so I have configured it from the Default Domain Policy. I run RSOP.msc from a client ...
3
votes
2answers
2k views

AD One-Way Trust between Child and Parent Domains

Using an existing AD domain (company.net), we need to add a child domain (untrusted.company.net) with a one-way trust. Testing in my lab, and the google searching that I have done seem to suggest ...
2
votes
3answers
1k views

Active Directory Nested Security Group

Can you nest Security Groups in active directory? Are there limitations to the nesting? Which versions of Windows Server/Active Directory support the nesting?
1
vote
1answer
174 views

Active Directory Event 1567 on a Remote DC

I have an Active Directory setup with two sites and three DC's - call them 1A, 1B, and 2. DCs 1A and 2 are Win2008R2 and DC 1B is Win2k. So the domain functional level is Windows 2000 native. The two ...
0
votes
1answer
313 views

Many changes by Anonymous Logon

with some auditing tool for AD I noticed many changes done by ANONYMOUS LOGON for e.g. badPwdCount and badPasswordTime with the same before and after value. Any ideas why this 'change' does ...
2
votes
3answers
442 views

Single domain OS crash, how to restore to new hardware/install

I had a single controller domain (Win2008) and the PDC died after a windows update. I have tried various repair operations with no luck. I do have the system drive intact. How do I import or restore ...
3
votes
1answer
4k views

PowerShell Script to Loop Over All Users in a Group

I'm running Windows 7 Professional. I know how to get a list of all the users in a group: $ou="User Groups" $userADName="RRAS VPN SSL" ...
0
votes
1answer
2k views

what permissions does a user require to query AD from SQL Server?

Have created a linked server to active directory from SQL Server but getting a permission denied error when I try to query anything. Under the security options for the linked server I have specified ...
1
vote
2answers
388 views

Assistance in checking IP address and DNS Name for ping availability?

I'd appreciate your efforts in helping me modifying the script below so that it can check & convert the list of IPAddress and hostname into something like: DomainController1 - 10.1.1.10 - UP ...
1
vote
1answer
1k views

Find orphaned foreign security principals and remove them from groups

We have a Windows 2008 R2 Domain with multiple outgoing trusts. In this domain we add the users from the trusted domains to domain local security groups. It seems that some or all deleted accounts ...
3
votes
0answers
52 views

Why is Office 2010 asking me to choose one of only one potential account to open a restricted document

We have implemented an AD Rights Management System in our domain. Occassionally, when I send a protected email to someone in my domain or someone sends one to me, I will be prompted with a dialog box ...
12
votes
2answers
3k views

How to create an additional domain controller using Windows Server 2008 R2 Server Core?

I'm currently running Windows Server 2008 R2, can anyone tell me how I can replicate the active directory to another server which has been installed using Server Core install.
-4
votes
3answers
189 views

My MS AD server hangs without any information [closed]

At Random times my Microsoft AD Server gets totally frozen (but i can see that the cursor moves freely and num lock status is also fine but on the screen i dont see anything other than the ...
6
votes
2answers
6k views

How to show network attached printers in Windows Active Directory?

We want to add our network printers (Dell 5100cn) to Active Directory, so that it is easier for users to find them on the network, but don't see a need to place a "print server" between the clients ...
0
votes
2answers
4k views

Active Directory SSL Certificate Private Key Not Attached

I am attempting to use an SSL certificate to secure LDAPS on our Active Directory, following the instructions found on Microsoft website at http://support.microsoft.com/kb/321051 I am logged on as ...
3
votes
4answers
4k views

Computers losing contact to the Domain

We have a problem with a set of computers on our domain. they are constantly losing their trust relationship with the domain. it first happened last week and 8 days later happened again. On the Server ...
3
votes
1answer
296 views

Active Directory - forest trust between forests with same name?

lets say there are two AD forests which by coincidence happen to have same name, for example "foo.local". Is it possible to establish a trust relationship between such forests?