A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
53 views

Active Directory - Set permission if user is present in all of the specific groups

The bussiness isue: implementing RBAC (Role Based Access Control) using Active Directory Groups mechanism. imagine having the following AD "Organization" groups: Core Development Team Sales Team ...
0
votes
1answer
99 views

Capturing LDAPS traffic with tcpdump

I have an app server that authenticates against Active Directory using LDAPS. I am connecting to the AD server over port 636. I'm trying to troubleshoot/debug some performance issues and am beginning ...
0
votes
0answers
34 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
1
vote
2answers
448 views

Possible to authenticate Samba via Kerberos but without domain-join?

With a Kerberos config file... [realms] DOMAIN.COM = { kdc = dc1.domain.com admin_server = dc1.domain.com } ...it is possible for Linux to talk to Active Directory for password ...
0
votes
1answer
45 views

hide data in active directory to a specific account

We are contemplating using Windows AD as LDAP for an DMZ Ubuntu environment and discovered that a simple LDAP query from a DMZ ubuntu server resulted in a complete listing of all AD objects. (We ...
3
votes
0answers
57 views

Active Directory Administrative Center - resize membership part

User can be a member of 3 groups at most to be visible in ADAC without scrolling. But in reality, users are members of 5, 10 even 20 groups. We have to scroll the "member of" list to check the ...
1
vote
0answers
202 views

reset lost administrator password for Windows Server 2003 (AD)?

I've been contacted by a local golf course that has lost login access to their Windows 2003 server (suspected cause is a password change by a disgruntled ex-manager). When I visited the site, they ...
0
votes
0answers
30 views

Having trouble getting dovecot to authenticate with samb4 DC/AD

I have a Slackware64 14.1 system configured as a Samba4 (4.1.11) Domain Controller/Active Directory. The DC/AD bit works fine. I have AD users configured and working redirected folders. I've ...
1
vote
1answer
50 views

Windows Server 2012 hide external HDD for non-admins

I am setting up a server where people connect to via Remote Desktop. It uses AD DS and uses an external HDD with a share on it for people's data. However when these people log on, aside from the ...
1
vote
2answers
75 views

Will a Windows domain rename require new SIDs?

If I rename my local windows domain on my domain controller will all of the user accounts associated with the "old" domain name need to be recreated? Will the user SIDs still be valid and would my ...
1
vote
1answer
24 views

Can you manage Server 2012R2/Win8 GPO's on a Server 2008R2 DC?

Having a little trouble clarifying an issue I'm having and google is unable to grant me a precise answer. We have a new Windows 8.1 tablet that we are testing in our environment, this obviously needs ...
1
vote
2answers
156 views

What does “Assigned” mean in the Azure AD Application user list?

Within the Azure portal, inside an Active Tenant I have an application with users listed, of which are created in the tenant. What does the term Assigned mean? I incorrectly assumed that it meant ...
2
votes
2answers
249 views

Colossal Failure After Domain Rename

The backstory... I recently upgraded a MS Server from 03 to 2012. The server needed to be a domain controller and for simplicities sake I named it foo.com instead of naming it something different ...
-12
votes
1answer
155 views

forget my old password. how can i recover that [closed]

I am an AD admin. I changed my colegues password. He is also an user in active directory. Is there any way to see his old password. I need to set his old passwprd back.
2
votes
1answer
135 views

Radius Client IP Address when setting up Wifi with WPA2 Enterprise?

I have taken over a server setup (as part of my job) which is setup of the following: Server setup with Threat Management Gateway (serving as the firewall) - 192.168.1.1 Server with Domain ...
0
votes
2answers
32 views

How to isolate servers from other machines connected to a single active directory?

I have few machines connected to an Active Directory. In that, i want to isolate 3 servers (these 3 are distributed environment set up for testing purpose). I don't want other machines to connect with ...
1
vote
1answer
400 views

Why is a domain user unable to log on into a Windows 7 machine when Samba server signing is enabled?

I have an up and running Linux-based domain controller running Samba. The server functions properly as I am able to join Windows 7 machines to my domain and then log on into the machine using my test ...
1
vote
1answer
71 views

Cross-Domain / Cross-Forest Group Policies

Our company has a domain forest with two domains (domain.EMEA and domain.GLOBAL) We previously acquired a company (domain.LOCAL) and all the workstations at this site are members of domain.LOCAL, but ...
4
votes
1answer
96 views

Virtualizing branch office servers

I have several branch offices with a single server at each site. These servers each functions as domain controller, DNS, DHCP, file and print server, and ConfigMgr distribution point. They currently ...
1
vote
1answer
67 views

Folder Redirection Issue

I am currently having a rather urgent issue with folder redirection. We attempted to move the files from the old server to the new server and everything works except documents. It appears to create ...
0
votes
1answer
81 views

Bare Metal Restoration of Child Domain (Active Directory Issue)

As i have a parent - child domain in my network as the parent is situated in other geographical location and they both are connected via VPN as i was working on a Bare metal backup & restore ...
1
vote
0answers
20 views

Setting environment variables based on passing Require directive

I finally succeed on configuring Apache as a SPNEGO reverse proxy for my app, and I'm using the AUTHORIZE_SAMACCOUNTNAME, AUTHORIZE_CN and AUTHORIZE_MAIL to figure out some information about the ...
1
vote
0answers
324 views

Login as domain user fails in Linux

Using pbis, joined a Linux (Ubuntu 14.04) node to the domain successfully. # /opt/pbis/bin/get-status LSA Server Status: Compiled daemon version: 8.2.1.2979 Packaged product version: 8.2.2979.68390 ...
1
vote
0answers
43 views

Mysterious Terminal Server HTTPS issue

The University I work for recently got into Terminal Servers, and one of them has been plagued by an unusual HTTPS issue where, after enough users have logged in and logged out, eventually users can ...
0
votes
1answer
552 views

Can't open Active Directory Users and Computers, Group Policy settings issues

In the past I've been able to open "Active Directory Users and Computers" to manage the users and computers on our Windows Server 2008 R2 box. We just recently made some changes to our Group Policy to ...
-1
votes
1answer
80 views

Prevent internet from being monopolized by one user

In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers. However, we want to prevent the ...
0
votes
1answer
25 views

Copy data from Azure AD to vm AD?

Currently I only have Azure AD that work with Office 365. Now I am planning to create a vm to use RADIUS server. I need to copy user and groups from Azure AD to vm AD. So, how can I do that? I read ...
-2
votes
1answer
96 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
4
votes
1answer
56 views

Powershell - Merging Results in one table

I am new to powershell. I am trying to create a report that shows AD accounts that expire soon. The report should include the User Name, AccountExpirationDate and the Manager. I have the ...
2
votes
1answer
34 views

csvde to find 1 user based on SamAccountName

I want to use csvde to find 1 user based on SamAccountName and export all the details about that person to a CSV file. The problem I am having is filtering by SamAccountName csvde -f search.txt -p ...
2
votes
2answers
1k views

How to clone, disjoin & rename a Windows 2008 R2 VM offline, then rejoin domain online

I have a Windows 2008 R2 domain joined server, which should be cloned as test server in the same domain! There is an MSSQL 2012 instance and Team Foundation Server 2013 installed, but this shouldn't ...
0
votes
1answer
360 views

AD FS and DC on same Server

i have to connect AD with Azure AD but we have a 2008 r2 server and wwe don`t want to upgrade the server to 2012 r2. Is it possible to have the domain controller and the ADFS server on the same ...
1
vote
0answers
54 views

How do I workaround inaccessible DCs in a spoke site, in a hub and spoke configuration?

I have a Hub and Spoke configuration. The spokes can never see another spoke. SCOM is reporting errors that GPO can't access \company.com probably because every Domain Controller has an NS record, ...
3
votes
1answer
349 views

Integrating FreeIPA or RH IdM in an existing MS AD environment

I want to deploy FreeIPA or Red Hat IdM in my existing environment Currently my domain is managed by MS AD which is controlled by a separate group. Assume that changing anything in MS AD is going to ...
0
votes
0answers
174 views

Clients not authenticating with RODC - nltest gives SERVICE_NOT_ACTIVE

I am new to the Windows world and pretty much followed the guide from this Windows Server Blog For the life of me I can not get clients to authenticate with the RODC. When I have the on-site RWDC ...
0
votes
0answers
38 views

Collecting PC to Printer relationship information across an entire domain using a script

I'm trying to create a script which will enable view every PC to Printer relationship across an entire domain of around 1200 machines. In theory I am looking for a script to be run so that it will ...
4
votes
1answer
191 views

sAMAccountName used for logged on users

When RDP'd to a server I'll often find that there are no available sessions as there are users currently logged in. Within our environment we utilise a user privilege management solution which creates ...
0
votes
3answers
61 views

Active Directory Export GPO user

I would like to get in .csv (or any other readable format) all my AD users and the policies that they need to comply (the type of authentication each user needs, his event logging properties and even ...
1
vote
2answers
465 views

How to setup a Domain Controller in the cloud

We are implementing a new Windows Server 2012 R2 domain controller for our 2 small offices, and we want to set it up on Amazon EC2. I have read that with this type of setup you normally use a VPN. How ...
1
vote
1answer
180 views

Deleted GAL in EMC and ADSIEDIT now Error

I attempted to delete a Global Address List via Exchange Management Console and ADSIEDIT as I made a typo during the creation. Now when I try to create a new GAL, i get the following error [PS] ...
1
vote
1answer
45 views

Accessing local groups remotly for a Windows Fileshare where user accounts are on an AD

I am asking this question with almost no knowledge of Windows and Active Directory. I have a Windows Server (2012), that I am using as a file server (FILE01.domain.tld). There are some local groups ...
5
votes
1answer
68 views

Windows 7 login issues

I have one user who has been having this issue I have never seen before. She is always having issues starting up her machine, such as Windows getting stuck on welcome screen after logging in, or stuck ...
0
votes
0answers
57 views

Removable Storage User Configuration Group Policy not working when Windows Server 2008 R2 is used as a client

I have enabled read write restriction for a group of users, if a user from this group is to log onto a win 8.1 system or Windows 7 system and tries accessing a USB drive it says access is denied, ...
1
vote
2answers
80 views

Server 2008 R2 > 2012 Migration

I am pretty new to windows server so please bare with me, i am looking to upgrade our current small server from server 2008 rs to windows server 2012 essentials, however we are only using one server ...
3
votes
1answer
452 views

Why does a SPN on a different host cause a server to lose its trust? How should I fix it?

I have a brand new server image that loses its trust as soon as it's joined to the domain. I suspect it's because of the duplicate SPN I discovered using the LDAP version of this Powershell script ...
7
votes
1answer
593 views

Exchange Server Using Wrong Active Directory Site

Our Exchange 2013 server suddenly started logging errors about bad replication between sites (there should be no replication as there is no other server) as well as several other issues that appear to ...
1
vote
1answer
295 views

Link server 2012 account picture with active directory

We have a Windows Server 2012 R2 remote desktop deployment, with a session collection consisting of 6 session hosts. We also use Office365 and DirSync to enable single sign on with ADFS running also. ...
6
votes
1answer
393 views

In Active Directory, how do I delegate write permissions on specific attributes of protected user accounts?

We have a tool being developed that will keep specific attributes of Active Directory user objects up to date with an authoritative source of employee information truth elsewhere, so that when ...
25
votes
3answers
2k views

What features of Windows 8/8.1 Pro will not work without a Microsoft Account?

With respect to domain-joined Windows 8/8.1 Pro machines, what features of Windows will not work unless a Microsoft Account is used? Also, aside from "feature loss," are their any gotchas of not ...
5
votes
2answers
323 views

Is there a way to tell how long a machine has been in an security group?

Machines get added to a security group to prevent them from getting a GPO. I'd like the machines to get removed after 30 days of being in the group. Ideally, I'd like to also be able to generate a ...