A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
2k views

Security Groups Not Showing In “Standard Console”

Setting up a new Windows SBS 2011 machine and notice the startup "Windows Small Business Server 2011 Standard Console" which is full of wizards making things simple. Under "Users and Groups" it shows ...
1
vote
1answer
5k views

DCDIAG VerifyEnterpriseReferences test failed on PDC

I have two domain controllers both server 2008, and the domain function level has been raised to 2008. We migrated from a single dc running server 2008 previously. If I run : dcdiag /v /c /d /e ...
5
votes
2answers
8k views

Is it possible to grant Read-Only Access to all Event Logs on Domain Controllers

I would like to grant Read-Access to event logs on all my domain controllers, ideally at a domain level using GPO. I would like members of a group to be able to view the Application Log, the System ...
2
votes
2answers
2k views

Internal DNS for non domain users

At the company I am at we have an Active Directory setup with an DNS server. All the computers that are part of the domain can resolve name from the DNS server with no problem. The current issue is ...
4
votes
2answers
535 views

How to reduce timeout for bad password on disconnected laptop?

I use a Windows 7 laptop computer. When not attached to my AD domain, if I enter an incorrect password, I have to wait approximately a full minute before the failure response comes back. When ...
14
votes
5answers
1k views

Windows 2008 R2 AD servers on fanless flash based systems

We have a number of branch offices where having an AD/DNS server would make a big difference to user experience. The following characteristics apply: There is no air conditioned server room, and no ...
3
votes
1answer
689 views

Active Directory: How to answer “does this user belong to this group (directly or indirectly)”

There are various ways to either list all users & groups belonging to a group (or via gui), or conversely list all groups a group or user belongs to... However, I am in a position where I wish to ...
2
votes
1answer
183 views

Protecting a webpage with an authentication form

I have created an employee webpage with a lot of company info, links, etc., but I want to protect the page because it contains some confidential company information. I am running IIS7 on Windows ...
0
votes
2answers
460 views

DNS Hostname Lookup on Windows Server

I have two Windows Server 2008 R2 servers which act as both Active Directory primary domain controllers and DNS servers on my network. Both computers have WINS installed and are the primary and ...
1
vote
1answer
724 views

When do local GPOs apply if a computer is a part of a domain?

when do local GPOs apply if a computer is a part of a domain? What would be an example scenario when local GPOs would be relevant for a computer that is a part of a domain? Can I somehow 'use' local ...
12
votes
3answers
20k views

Seizing FSMO roles from dead Windows Domain Controller

I've seen other questions and documents about doing this, but there are some things that still confuse me. Here are the documents and questions I've seen: Retire a Dead Windows 2003 Domain ...
0
votes
1answer
1k views

Windows Server 2008 R2 Foundation Group policy being overridden by local policy

There is a small network on a domain. Not too long ago a new machine was added. The OU that the user is linked to was part of an OU that is, among other things, not allowed to change desktop ...
-1
votes
2answers
4k views

Preventing automatic DNS updates for multi-homed NIC in Windows Server environment

Similar to How do I prevent one IP from creating a DNS entry on a multi-homed server? but I didn't get a clear answer there. I have a host, call it EXCHANGE, with two IPs, 10.5.1.10 and 10.5.1.15. I ...
0
votes
2answers
4k views

How to add a user in Active Directory with name longer than 20 characters?

I am using Windows 2008 R2 Server and trying to add a user in Active Directory. I am able to save user ID of length less than 20 characters. But when I try to increase this value to 30 characters I ...
1
vote
1answer
321 views

New machines do not accept home page from Group Policy

I've just got two new machines from Dell and did a fresh reinstall of Win7 64 bit pro to remove the obligatory dell preinstalled crapware, joined my domain and rebooted. For some reason the home page ...
1
vote
2answers
891 views

Requesting certificates fails in different site

I'm not really sure where to start looking When requesting a certificate, a server always gets the error message "You cannot request a certificate at this time because no certificate types are ...
4
votes
4answers
6k views

Can you use a local path for mandatory profiles?

I run the network at a small college, and we're trying to improve how we handle public lab computers. One thing I'm considering is using mandatory profiles. As part of the design for this, I want to ...
8
votes
4answers
2k views

How to manage hundreds of users (and customized profiles) on individual Windows 7 machines?

We're a small college, where every student is assigned an Active Directory account. We have a couple computer labs where the machines are all joined to the domain and students can log in to any ...
0
votes
1answer
195 views

IIS7 - ActiveDirectory - .NET Application

I have a Windows 2008 R2 Web Server (test) which is added to Active Directory domain. I have an application using AD searching features but, it does not work until I specify in code the credentials ...
5
votes
2answers
215 views

Is there a safe way to bypass a non-replicating DC?

We have a domain controller that was virtualized a while back; this caused issues with replication that we're now seeing fallout from. I've moved the PDC Emulator and other fsmo roles to a new DC and ...
3
votes
4answers
10k views

IIS 7.5 basic authentication and Active Directory validation

I'm not an IIS or Active Directory expert by any means so I want to present a scenario here and see if what we want to accomplish is feasible. We have an application hosted on Windows Server 2008 R2 ...
1
vote
1answer
974 views

Benefits of using a windows-domain [closed]

We are a small business 5-10 employees, and would like to know what are the major benefits of moving from a simple network/WORKGROUP to a windows-domain. Thanks
2
votes
3answers
2k views

Assign log on as local admin to domain account

What I would like to do is grant permission for a domain account to log on to any server/workstation and be a local administrator with having to add this account to domain admin group? This account ...
3
votes
2answers
505 views

What precautions should I take when joining my virtual center to Active Directory?

I have virtual center that manages a few ESX hosts and I would like to join it to my Active Directory domain. What things should I consider when making this move? Is there any reason why I would want ...
2
votes
3answers
2k views

GPO - Restricted Groups applying, but don't actually add the group

The following scenario is weird. Please be advised. I have created a GPO on an OU containing workstations like this: This GPO purpose is to make the Backup Operators group a member of the local ...
3
votes
1answer
844 views

Is a PKI required when authenticating a Cisco Aironet AP via radius against AD

We're a small office and have a Cisco Aironet 1250 access point set to WPA-PSK. Now that we've deployed Active Directory I'd like start authenticating my users via radius instead of a PSK. To this ...
1
vote
1answer
2k views

Server 2008 Audit Failure Event Logs

I am having trouble figuring out what is causing massive audit failures on a server 2008 system. the event id is 4771 Account Name: Administrator Service Name: krbtgt/DOMAIN.NAME Client Address: ::1 ...
3
votes
2answers
8k views

Deleting local profile after user logs off?

I am currently using roaming profiles and wante to configure all clients connected to the domain to delete the local profile once the user logs off. Could this be done via a Group Policy? Script?
0
votes
1answer
438 views

Window-based clients to Fedora Directory Services

Is there any way to have user login in window-based client machines to authenticate with Fedora Directory Services?
6
votes
3answers
2k views

Does Active Directory support DNS names with spaces?

While looking into how to set up some static DNS-SD services in our network, I came across http://www.dns-sd.org/ServerStaticSetup.html, which states that Active Directory's DNS server does not ...
1
vote
1answer
742 views

Configuring roaming profiles

Running a DC (Windows Server 2008 R2) with Windows 7 Clients. I have configured the roaming profiles (I believe), however once while logging in, the account logs in with a TEMP profile. Can someone ...
2
votes
1answer
501 views

Active Directory + IIS + SQL + ASP.NET

I have sent the following question to stackoverflow website I have installed Windows server 2008 r2 on a virtual machine, Can I install Active directory with domain controller + IIS + SQL server ...
4
votes
1answer
5k views

Delegate user permission to move users/computers between OU's in Active Directory

I would like to Delegate User to be able to cleanup AD by allowing him to move users between couple of OU's (and doing only that). How can I achieve that? I want to extend user permission that I've ...
3
votes
1answer
1k views

Best option for branch office - Active Directory domain

I set up a 2008R2 AD in a small office (less than 10 users). We are opening a delegation, and I'm studying the different choices for the domain (let's say domain.com). The link between the offices ...
0
votes
2answers
1k views

Why so many ARP requests on the network with Windows 7 (using Network Monitor)?

I've read that it's fairly normal to have several ARP requests per second on the network, but was curious if someone could elaborate on the "why" I would have so many versus not? Over the course of 4 ...
0
votes
1answer
2k views

dsquery remote AD server

Im attempting to do a dsquery on a remoter AD server that I have access to through my network(No UN and PASS required). dsquery server -s <server name> is supposed to connect me to a server ...
2
votes
5answers
13k views

Eliminate certificate warning when users access Outlook/Exchange 2010 on split domain setup

I have an internally-hosted Exchange 2010 Server with an internal domain, EXCHANGE0.COMPANY.COM. I have configured all users to access Outlook (even internally) using Outlook-over-HTTP. To do so I ...
2
votes
0answers
144 views

Unable to access file system via RemoteApp but works fine in RDP session

I've written a program that accesses a file on a remote server, through a remotely mounted drive on another server. The program runs fine (is able to access the file) when I start an RDP session, and ...
1
vote
2answers
695 views

trust relationship between this workstation and the primary domain failed

I had a work computer (Windows 7) set up with local login (not domain login). Later I needed to login to the domain. So I made changes to join the domain by right-clicking on My computer and ...
0
votes
1answer
229 views

DNS Active directory integrated zone and MX record

I have two sites, A and B. In each site I have a mail server and DNS. On DNS I have two MX records : mail01.contoso.com MX 5 mail02.contoso.com MX 10 DNS zone are integrated in AD. These two ...
-1
votes
3answers
6k views

Install lightweight Active Directory on Windows 7 for Development purposes without domain?

Is there a way to install lightweight Active Directory on Windows 7 for Development purposes without domain? I've downloaded the "AD LDS" for Windows 7 and installed it but it seems to require a ...
3
votes
1answer
313 views

Exchange GAL only showing Company name in iOS search results

My organization uses iPads connected to our Exchange server. When we search the GAL for a person in the company, the results are shown as the Company only (data coming from the 'Company' field in ...
3
votes
2answers
357 views

restoring permissions to AD Schema

I am in the middle of creating a multi-server farm in a very restrictive security environment. All servers are Windows 2008 R2 Enterprise. I was following one of the security guides which involved ...
2
votes
1answer
448 views

How to get client to update GPO to recognized scripts were added in manually

So I'm attempting to programmatically add a logon/logoff/etc script to be ran with a GPO. I add the scripts in their respective /Sysvol/blah... directory. I update the scripts.ini file correctly to ...
3
votes
3answers
921 views

Downside of using public DNS in corporate network

Is there any downside to using a public DNS service like Google's 8.8.8.8/8.8.4.4 for corporate network DNS service, as in making it the network connection's DNS server for an AD DC? It seems like if ...
1
vote
1answer
6k views

Use LDAP to authenticate oracle database users

I have Oracle Database 11g set up in few locations in either pure Linux/OpenLDAP, Samba/OpenLDAP environment and a full-blown Windows/AD environment. The applications that will be using those ...
1
vote
1answer
473 views

Can DPM 2010 protect computers in a trusted domain when there is no forest trust relationship?

Scenario: DPM 2010 is installed in a domain in a forest, while the servers to be protected are installed in a different domain in a different forest. The two domains are child domains in their ...
2
votes
1answer
657 views

Error importing sudoers ldif schema to Active Directory

As per this question, we are on the process of migrating our sudoers file to Active Directory. As per the documentation, this requires importing the schema.ActiveDirectory LDIF which comes with the ...
0
votes
1answer
2k views

Squid and AD authentication

I've tried to setup AD authentication according to instructions found at this link , but it wasn't successful, AD authentication didn't work. In cache.log, I've got: squid_ldap_auth: WARNING, LDAP ...
1
vote
1answer
5k views

How can I rejoin a Windows machine to the domain without losing user data if trust relationship on machine was broken

Long story short. A new machine was added to our domain with the same machine name as a pre-existing machine. Rather than receiving an error from the domain when this was being done, it simply ...