A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

6
votes
1answer
856 views

Synology and Active Directory - “no logon servers available”

I have a Synology Diskstation DS412+ here configured for Active Directory authentication on the shared folders. I have a shared folder that our backup software writes backups to (so, CIFS). This all ...
2
votes
1answer
82 views

How to restrict the TCP listening address of a Windows 2003 AD DNS server

I have a Windows 2003 AD integrated DNS server which I want to listen for DNS traffic on adapter IP addresses only. I have followed the steps in the technet article, however. After I complete them ...
-1
votes
1answer
350 views

How can I check my permissions in Active Directory? [closed]

I have my virtual machine (Windows XP) and some user account assigned to me. I also belong to several groups. What I actually know is my user name, password and a couple of other things that I have ...
2
votes
0answers
274 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
-1
votes
1answer
59 views

Roaming Profile Control [closed]

I noticed that with Roaming Profiles enabled that even applications have been roaming. Is this normal? Is there a way to keep applications from roaming? I like how Firefox bookmarks move from machine ...
2
votes
0answers
72 views

Mavericks - APN Active Directory Users not being pushed

We have hit a problem with our current AD -> OSX Server integration project. We have our OSX server (mavericks) connected to our AD domain and running open directory/profile manager. AD users can ...
1
vote
1answer
469 views

How to determine the values for an LDAP bind to a Windows Server 2012 DC? [ldap_bind: Invalid Credentials (49)]

Sigh. I have been trying for nearly 6 hours to get my Gitlab deployment to authenticate via Windows Server 2012 Essentials Active Directory LDAP. I am running Ubuntu 14.04 for my Gitlab server. ...
1
vote
1answer
92 views

Is the Kerberos SPN FQDN significant to the server, or is the keytab enough?

I spend most of my time as a developer, so I'm not familiar with all the details... I have a service running on a linux host. I want to use Kerberos to transmit identity information to the service. ...
0
votes
0answers
73 views

SCCM 2012 R2 install: error with samba4 domain

Am attempting to install SCCM 2012 R2 onto a member server in a domain with a Samba4 DC. I have every reason to believe that AD is working: smbclient reports (what I believe) are the appropriate ...
1
vote
2answers
190 views

add exchange extensions to AD

we have a windows server 2012 with AD on it. we sync that to office 365 but a few of the options like moderated email groups are not present. I contacted Microsoft tech support about this and they ...
0
votes
1answer
498 views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
2
votes
2answers
167 views

How to bring a redirected user account back from the dead in Windows Server 2008 R2?

A user at the place where I work left the company, we deleted his account out of AD and then he came back...and now his redirected profile exists, but with the wrong permissions on the folder.. I ...
2
votes
1answer
1k views

Continuously check LDAP connectivity to Domain Controllers ( LDAP Heartbeat Check)

working on developing script which runs via schedule task ; whole purpose of it is to target few domain controllers and continuously(for every 2 sec) do a ldap query targeting that particular DC and ...
0
votes
0answers
54 views

Triple hop authentication

Trying to setup impersonation for web application running in IIS that connects to a web service that connects to SQL server, where all the layers are on different machines. Here is the setup Web ...
1
vote
1answer
89 views

Active Directory Extension Number and Office 365

We have our own internal VoIP system in which our employees are using to communicate to each other, each VoIP station has an extension number assigned for each employee. We would like to use Active ...
1
vote
1answer
563 views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
2
votes
0answers
61 views

Are External LDAP referrals similar to a DNS Recursive or non recursive entry?

I'm very familiar with DNS, but less so with LDAP. In DNS I have the ability to delegate the CPU and IO load of referral chasing a given DNS query... or I can set norecurse and have the client ...
3
votes
1answer
104 views

Setting up DNS forward zone when AD domain name is a subdomain [closed]

I'm in high school and want to learn about system administration, so I set up a Windows Server 2012 R2 domain controller in a lab and created the domain ad.foo.com. I own foo.com and the domain ...
0
votes
1answer
29 views

Ldap with cloud application

I was wondering if you guys could help me, I'm trying to use ldap to connect with our AD but the settings on the cloud app seem to fail. How do you set up ldap with external servers? Is there some ...
0
votes
1answer
43 views

Authentication options for staging sites

We're currently authenticating our clients who wants to view their staging environments using windows authentication. That means we have to create their accounts in our local AD and assign them to ...
0
votes
1answer
2k views

Samba4 net join member fails

I'm trying to join a RHEL6 server using samba4 to a domain. Net ads join works correctly, join member does not however. Effectively wbinfo --getdcname does not work where as wbinfo --dsgetdcname does. ...
1
vote
1answer
419 views

How to delete the metadata from a nonexisting Domain Controler object in Active Directory Sites and Services

Short story: After SBS migration we have a mixed AD enviorment with one Win2003SBS (still in function) and two Win2008R2 doman controlers and one nonexistent DC in AD Sites and services that dates ...
1
vote
0answers
48 views

Setting port exceptions for Windows Firewall via GPO. Is there a limit on the number of exceptions that can be set?

We would like to utilize GPOs to manage our Windows Firewall rule set. We have servers that have different requirements (HL7 connections, other programs) and our doctrine is to only open ports that ...
2
votes
1answer
201 views

Store PGP keys on Active Directory/Exchange?

I am looking to implement a transparent plugin for Outlook that would need no configuration at all. I was thinking of maybe using Active Directory/Exchange to store each user's public key and be able ...
0
votes
1answer
70 views

Single sign on and active directory federation

Can anyone please tell me, what is the difference between active directory federation services (ADFS) and single sign on (SSO)? From a simple look at things both seem to do much the same thing in ...
3
votes
2answers
1k views

Where is active directory snap-in for Server 2012 R2?

We are using a Server 2003 domain. I've found the instructions for installing the Active Directory snapin for Server 2012 and earlier: http://technet.microsoft.com/en-us/library/cc732110.aspx. However ...
3
votes
1answer
100 views

Expensive LDAP queries from Workstations

Troubleshooting high LSASS process on a DC found expensive queries originating from a few workstations. Each query is as follows: Visited Entries: 1Million+ Returned Entries: <50 (most of the ...
0
votes
0answers
94 views

Users cannot change their passwords in Active Directory

We have created a new domain. The DCs are server 2012 and 2012r2 and the functional level of both forest and domain is 2008. Password policy is only set on the default domain policy and is set to ...
-1
votes
1answer
57 views

Windows Domain controller recover test

I'm testing a Exchange 2012 VM recovery in a Hyper-V test server. I have this VM, 2 DC and a Exchange server: SRVDC1 (pdc, nm, rid) SRVDC2 SRVEX2 As far as I know I need to recover also a Domain ...
0
votes
1answer
48 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
1
vote
3answers
211 views

Add additional name to a Domain Controller

I am looking to rename a Domain Controller. Functional level and everything else means I can use netdom to carry out the process. Looking a the technet article on the subject I can see the first ...
2
votes
1answer
49 views

Active Directory Force Update Fails

I tried looking up this error and problem and found nothing. Could this be a firewall issue?
4
votes
1answer
186 views

Group policy waited for the network subsystem

In an AD domain with Windows Server 2008 R2 DCs users are complaining about delays in the bootup process of the clients. The group policy log reveals that the client is waiting ~ 20-50 seconds for ...
0
votes
0answers
152 views

Creating Exchange account for user of subdomain

We have a W2008R2 server which serves as AD DC for intra.contoso.com and Exchange server. We have a W2012 server which serves as AD DC for subdomain sub.intra.contoso.com (which is not a new forest) ...
0
votes
1answer
50 views

Server 2012 Active Directory Password policy

For our development environment, I have an AD domain intra.contoso.com on a Win 2008 R2 server, with mostly default settings set. The password policy prohibits the use of passwords with less than 5 ...
1
vote
2answers
131 views

Windows Server 2012 - one user logging on many computers [closed]

I am a newby to Windows Server World. I want to setup company's network (around 7 computers and 15 employees) like this: - all computers joined to my domain - every employee having his own user ...
-1
votes
1answer
36 views

Query AD Users from date [closed]

How can I query users in AD that have been added since an specific date and that their user logon name starts with UTX ? Im guessing I need to do it with powershell but I have very little knowledge. ...
1
vote
1answer
31 views

Factors and approaches for migrating AD across disconnected Data Centres?

I need to specify an approach for migrating a Windows 2008 Active Directory environment to a new data centre. There is not currently connectivity between the two data centres though that could be an ...
0
votes
0answers
63 views

DSQuery return error : domain can't be reach

i'm facing a problem to setup an AD auth on my Zywall firewall. I want my vpn clients tunnel to my zywall with their AD credentials To do that, i need somes infos: Base DN Admin credentials : Bind ...
2
votes
0answers
75 views

Restrict IMAP access for a given account to only one IP address in Exchange 2013

I've created a "spam crawler" account with full access to all mailboxes in an Exchange 2013 environment to get messages in the junk folder to feed the Bayesian filtering running on SpamAssassin in a ...
2
votes
0answers
150 views

How do you dirsync mailusers in Office 365 from AD?

We have Contact objects in Active Directory that are synchronized into Office 365. However, many of these are contacts for users that we have also established an AD account for, meaning we have two ...
3
votes
1answer
164 views

Apache LDAP Authentication with AD Subgroup

I am trying to authenticate using an Active Directory User on a Website running on Apache. My Setup Active Directory: User "steven" is a member of the group "staff". User "cindy" is a member of the ...
0
votes
1answer
43 views

How to not request users to enter their old passwords when ticking “User must change password at next logon” in active directory?

My problem is that I'm doing a migration from Linux mailserver "Postfix" to Exchange using a Microsoft tool called "Microsoft transporter suite" this tool requires that all users to have their ...
0
votes
0answers
81 views

How to Delete Orphon Duplicate computer entry in windows Server 2008 R2 ADS

I want to know how to delete orphan duplicate computer entry in ADS in windows Server 2008 R2..I mean for example suppose one computer joined and registered to Domain DOM1 as comp1.dom1.local. Ok now ...
1
vote
0answers
25 views

Will the timezone be converted across geographical areas?

I'm using Active directory in Windows server 2008 R2. My domain is in a particular timezone and my client say X is in another timezone. Now I have implemented certain restrictions that X cannot logon ...
0
votes
1answer
190 views

user cannot log on even after password reset

I have a user that cannot log on, even after reseting the password. It allows the user to 'Change password at first log on' but then does not let the user log in. The only error that displays is the ...
0
votes
1answer
60 views

Mixed domain: how to setup password referral

I'm working with a mixture of linux and windows servers and am hoping to use AD to tie in to a centralized LDAP authentication process. I recently installed a Windows 2012 R2 server as a domain ...
1
vote
2answers
316 views

Widespread workstation trust relationship issues

Problem: In the past 3 years I've run into the "The Trust Relationship between this workstation and the primary domain has failed" less than 3 times. Those cases were all laptops that hadn't been ...
0
votes
1answer
164 views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
0
votes
1answer
106 views

Shares and printers on a server are not accessible for one workstation

The PC in question is running Windows 7 and the server is Windows Server 2012 Standard. Both machines can ping each other by IP and Name. I've tried flushing the DNS cache, removing the pc from the ...