A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
43 views

RPC Ports getting reset to 5000-5002 on reboot

I've run into a very common issue with RPC Endpoint Mapper ports not being available. The default RPC ports are 5000-5002. When I edit the registry and set the ports to a wider range (say, xx100 - ...
1
vote
3answers
966 views

Batch script to export info from Active Directory (name, phone numbers, location, etc) into a csv file

The secretary at my work uses a spreadsheet that lists names, phone numbers, and locations of employees to look up info if someone asks. All this info is located in AD, but the problem is that we are ...
0
votes
0answers
59 views

EFS decrypt access denied

I have a very weird behaviour here on a Windows 7 box (in AD). The user has (good boy) stored the files encrypted with EFS on his local disk. When he wants to open a file, e.g. in Word, he receives ...
3
votes
1answer
174 views

How do I enable SAML Passive Authentication in ADFS 3.0?

For several years, I've used ADFS 2.x as a SAML IDP that works with SAML Passive Authentication. When the isPassive=true flag was set on the Request, the Response would include the following ...
0
votes
0answers
32 views

Strange behavior from demoted DC

We used to run our own domain (referred to as OLD) but are now in the process of completely removing it and using the campus wide domain (referred to as CAMPUS). We have 2 DCs still active for our ...
2
votes
4answers
86 views

Is there a shiny way to make Windows shares web accessible?

I'm new here, and I hope this isn't too much of a shopping question. I'm the under-qualified director of technology at a small college that may be acquired by a larger school. We have Office 365 ...
2
votes
1answer
252 views

Active Directory control client hyper-v permissions

I've done lots of googling and the only thing I find relates to, I believe, Hyper-V server and not client Hyper-V. The scenario is that we have a domain here at the college and we are trying to use ...
1
vote
1answer
788 views

Winbind Centos wrong UID/GID

Here's the scenario: I have two machine: Ubuntu, running ldap to authencticate users CentOs, uses winbind to authenticate users to mount homedirs I use fstab and nfs shares. The problem is this: ...
0
votes
2answers
86 views

Restore User or Backup exec settings after demoting

Just don't mess with a server when you're not feeling focused, because you can end up something like i did: I have a server (WS2003 R2) which acts as backup server (backup exec 2010). We needed a ...
1
vote
3answers
579 views

Office365 and Active Directory Integration (and On-premise Exchange Disintegration)

We used to have on premise exchange server which is integrated with active directory (the PDC and Exchange Server are all the same Windows 2008 small business server). We migrated our Exchange to ...
0
votes
1answer
111 views

How to add password authentication to working OpenVPN server?

I have already working OpenVPN server, which connects 25 branches. Config is below. Our company has outsourcing developers, and they need to access servers in DMZ. How do I add N number of ...
3
votes
1answer
253 views

How to authenticate a user from an external Windows Domain (Active Directory)

I have a service (AcmeService) running on a domain (ACME.COM) and a user running in another domain (DISNEY.COM). mickey@disney.com wants to authenticate with the AcmeService. The service knows about ...
0
votes
2answers
903 views

How do i get centos 7 to use uids and gids from active directory?

I'm preparing for an eventual upgrade from CentOS 6 to CentOS 7. Right now, in version 6, we just use LDAP mapped to AD for authentication. This then uses the UID and GID from the Active Directory ...
1
vote
2answers
50 views

restrict media access by user

I recently took over a network and I'm still pretty raw in regards to AD and group policy. I've been trying to use group policy to restrict CD burning rights to only 3 users and only their 3 ...
0
votes
0answers
46 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
0
votes
0answers
74 views

Restoring read only domain controller from VM checkpoint

I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
6
votes
1answer
375 views

How can I generate a list of the security groups a set of users belong to?

I have been asked to generate a list of the security groups (so specifically not the distribution groups) that a list of approximately 50 users belong to. I have a list of users, users.txt that ...
0
votes
1answer
68 views

what happens to sql server if the active directory server goes down?

What happens to sql server if the active directory server goes down and the sql agent services is logged on as a windows user.
0
votes
1answer
264 views

Host (A) record (DNS) updated with wrong IP address

I recently installed a new Domain Controller running Windows Server 2012 (called "srv3") in a domain with two existents DCs that are running Windows Server 2003 (called "srv1" and "srv2"). All roles ...
3
votes
1answer
51 views

Is dual directory integrations possible with Windows?

In the Mac world, you can integrate OS X systems with dual directories so that OS X looks towards Active Directory for authentication and OpenLDAP for OS X managed preferences. Is the following ...
0
votes
1answer
17 views

How can configure IIS to service to AD users only?

I have an intranet in my company and I have a domain controller that users authenticate with this,I have an internal web site (IIS) I want limit this site that services only to my domain users.How can ...
1
vote
2answers
3k views

PBIS Open AD authentication stops working on ubuntu with errors: “user accout has expired” and “is your account locked?”

We have been using PowerBroker Identity Services Open to authenticate active directory users from ubuntu hosts successfully for six months. Recently AD authentication stopped working on several ...
0
votes
0answers
29 views

Priorities or ambiguos DNS reverse zone with Bind

In my internal DNS running on Bind9 all machines are available at up to 3 different domain names, i.e. all machines are listed as machine.legacy.domain and machine.new.domain. Some machines are joined ...
0
votes
0answers
148 views

Cannot configure Exchange Server 2010 on mobile device because of “the connection to the server failed” error

I have a server with Exchange Server 2010 in a Win2008R2 domain. The fact is that whenever I try to configure Exchange access from a mobile device I get the following error in the event viewer: Log ...
1
vote
1answer
89 views

Active Directory Sync to Remote Domain

I have a client that needs to sync certain object AD info from their secure domain to our domain. Something like the Windows Azure Directory Sync Tool, but just not for Azure. I would like to use ...
2
votes
2answers
509 views

Authenticated Users builtin group in AD deleted

I have a large-ish AD setup, where one of the already fired admins, for reasons unknown deleted the subject group. Been googling for a while, but besides explanations what the group is for and ...
0
votes
1answer
35 views

Multi-Site AD design

I have a new client with 3 sites and I want to join/combine/trust ADs. The setup is as follows: Site 1: No AD. Site 2: Hosted VMs on a dedicated local domain (for the 3 servers in the VLAN only). ...
0
votes
0answers
168 views

Site to site active directory for hyperv replication

We have two dedicated servers across two different sites. They host hyper v virtual machines for email hosting etc. I'd like to have hyper v do replication between them and so I have a copy elsewhere, ...
0
votes
1answer
240 views

SBS 2003 - Rename Domain Netbios Name Without Renaming Active Directory Domain Name

I have client running a Small Business Server 2003 R2 network with a strangely named domain. The fully qualified domain name is a straightforward contoso.local. The domain netbios name (shown as ...
0
votes
0answers
41 views

How to get free hours of a user using EWS?

I'm trying to find the free/busy information of a user in my Exchange Organisation. I'm using GetUserAvailability operation for this purpose. This method is returning only busy and tentative ...
3
votes
1answer
332 views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
0
votes
0answers
46 views

Active Directory Root Permissions

We currently have way too many users in our Domain Admins group so I'm working on redesigning our active directory structure and I'm looking at the current permissions and looking at the root our our ...
0
votes
1answer
139 views

External DNS takes a long time to resolve for AD computers

On our AD domain, end users desktops take a long time to resolve DNS from outside our company. Internally everything works fine. The desktops are pointing pointing to 192.168.2.4 and .6. Those are ...
0
votes
0answers
51 views

Unstable and slow useracount-computer-combination in a windows domain-environment

I installed a new computer in our small domain environment for an old employee. After several days he complained, that his machine is working really unstable and slow. For example: the menus and ...
0
votes
0answers
17 views

Enabling constrained delegation on DC computer account

Is it necessary to have constrained delegation enabled on Microsoft AD domain controller computer account? If yes then why and what are consequences of disabling it? I'm mainly interested in current ...
0
votes
0answers
53 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
1
vote
2answers
299 views

Getting list of users indirectly members of an AD group through LDAP

I'm having a bit of a problem with LDAP search that should specify whether a user is a member of a given AD group or not (recursively). Basically, what I'm doing is issue a LDAP search with the ...
2
votes
2answers
86 views

Can Microsoft accounts be created and managed via Active Directory / API?

We are in the process of shifting over to Google (Apps) for Work. One of the cool things that this provides is 'Google Apps Directory Sync' https://support.google.com/a/answer/106368?hl=en which ...
2
votes
1answer
37 views

Branch office printers listed in directory

About a month ago we added a branch office site to our corporate domain via site-to-site VPN. A domain controller was set up at the remote site to manage logons and printers for about 10-12 employees. ...
1
vote
0answers
37 views

gpo ie user force update

We use two 2008 Domain-Controllers and one 2012 DC In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131 This gpo is not mandatory, so users could change ...
1
vote
1answer
38 views

Drive Maps via Group Policy - Overlapping Policies

((NOTE: We are on Windows 8.1 with a 2008R2 domain)) We have decided to move away from mapping drives via a log in script and attempting to do it via Group Policy. I have personally been doing this ...
0
votes
1answer
113 views

Permissions for SCCM Service Account

Does anyone know what is the least privileged Active Directory security group needed for the MS-SCCM 2012 service account to do software updates via Configuration Manager? ConfigMgr runs fine with ...
0
votes
2answers
78 views

Software installation on computers in a domain environment [closed]

The network I am working on is extremely small, my client only have 2 desktops which are in a domain setup being managed by a Windows Server 2012 machine with active directory. My client has a ...
1
vote
1answer
50 views

2003 Domain Functional Level — Do I need to run adprep.exe to trust a 2012 DFL?

My company is still using Windows Server 2003 for the Domain Controllers, with DFL (and FFL) already raised to 2003 DFL/FFL. Now, we need to trust the domain of our new subsidiary. Their domain is ...
-1
votes
2answers
136 views

Windows domain + Linux Domain on One Network

Currently our network is all tied to Active Directory with both Windows and Linux workstations/servers. We would like to implement a Free IPA server that synchronizes authentication between a Linux ...
0
votes
2answers
67 views

Part-time AD server

I'm trying to understand how current Win 7/8 machines behave when they lose access to their domain controller and if it's possible to have machines be part of a domain if domain exists only part time ...
1
vote
0answers
63 views

Mac maverick binded to AD

I got a mac laptop binded to AD successfully. Logged in with a domain user and it created a mobile account. The user used it for a day then rebooted and find that they can't login anymore. I logged in ...
0
votes
1answer
532 views

Domain Controller does not have a computer account for this workstation trust relationship

We've had an ongoing issue for a while and I'm here on a Saturday to try and figure it out, and I think I've found the problem, just not the cause... For a few months our second domain controller has ...
0
votes
0answers
354 views

Unable to add Exchange mailbox for user in domain trust environment

We have a domain trust set up between two domains (DomainA, DomainB), and when attempting to add an Outlook mailbox that resides in DomainA for a user that belongs to DomainB - it fails. However the ...
0
votes
0answers
32 views

Password expiration in SQL/ODBC before AD

I have a script that emails users that their password expires in X days. Today a user got an alert that her password expires in 8 days. She was having problems with Excel and Access databases that ...