A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
2answers
150 views

Active Directory user rights

I'm currently working on a ASP MVC Website solution that I retrieved from a predecessor, and I had to create an active directory machine to support the login implementation using it. Upon a user's ...
2
votes
1answer
496 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
0
votes
0answers
19 views

SVN server - User test.user1 not found: /SVN/testrepo

My subversion SVN is causing recently lots of troubles and I can't access any repository with the newly created AD account. Let me explain briefly how everything works or it used work. My SVN ...
0
votes
1answer
257 views

Windows Server Network Shares - Non-domain users have access

I have a server with Windows Server 2012 R2. I have a drive that I want to share with the "Domain Users" group. I have set that drive to share only with that group. From a different computer that is ...
1
vote
1answer
47 views

What do I need to ldapsearch AD?

I'm attempting to test LDAP for Moodle auth, by using LDAP search. When I run $ ldapsearch -H ldaps://totally.legit.hostname "(uid=jldugger)" -b dc=example,dc=org memberOf I get back: ...
0
votes
1answer
127 views

Linux Authentication by Active Directory without joining to domain

I have a Win 2008 AD based network. I want to setup a few boxes with dual boot Win/Linux. How can I achieve to authenticate the users with existing AD in Linux? All solutions - I have found yet - ...
2
votes
2answers
2k views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
-1
votes
1answer
35 views

Set a GPO on all users from a trusted Forest

How do I set a GPO (such as desktop background) to work on users from Forest A when they connect to Computers on Forest B. There is a bidirectional Forest Trust between the two Forests.
3
votes
2answers
180 views

How do I make it as if I've never logged into a workstation with a Domain AD user profile?

I've been working on setting up OneDrive for Business with automatic syncing and folder redirection. I got everything working, but there were some issues along the way. In dealing with those issues ...
0
votes
0answers
100 views

Create active AD user with samba net rpc user add command

I have a mixed Windows and Linux Environment. I want to create new Active Directory users with Samba tools. This command will create a new AD user, but they aren't active: net rpc user add ...
0
votes
0answers
239 views

How can I resolve element not found in AD CA?

I had to move our AD CA from server 2008 32bit to server 2008r2 64bit, both domain controllers too! I now know this was BAD. Is there any way to resolve the "Element not found" in AD CA? Or do I ...
1
vote
1answer
40 views

Limit LDAP request to AD

Is there a way to limit requests from a specific user to the AD such that he can only ask if a username or an email address exists or not? The user should not be able to request other data from the ...
3
votes
1answer
265 views

Is it possible a remote active directory authentication from local without VPN

Can we authenticate to a remotely hosted DC from local machines without VPN connection to the server. Server have Public IP & Local machines are using NAT. Currently there is no any other ...
1
vote
2answers
51 views

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the ...
1
vote
1answer
42 views

My GPO only runs the first time it is linked to the OU

I am attempting to distribute a .msi file via GPO to Win7 machines from a Server 2008 R2 network. I am getting a funny result. The first time I link the GPO to a OU the program loads. I uninstall ...
0
votes
1answer
137 views

Windows 7 Spamming Domain Controllers on ports 445 and 139, causing lockout

I have a domain lockout issue and in troubleshooting, I found through netstat that my machine is pummeling the domain controllers on ports 445 and 139. It is creating thousands of user ports to do ...
3
votes
1answer
198 views

AD IT Helper Permissions

My apologies if this has been asked before. If I knew the proper search terms then google would be more effective. I would like to add a user that can join computers to the domain, Install software ...
1
vote
3answers
74 views

Active directory HyperV VM to VMware

we just copied an active directory VM from an Hyper-V VM to a VMware one. This Hyper-v VM is our second active directory server (the first one is a physical server). We used Symantec Backup Exec to ...
0
votes
1answer
38 views

Windows profile is deleted when user does not log in for several days

We use a Windows Server 2008 R2 Active Directory network with Windows 7 Professional clients. After logging in a profile gets created on the computer as normal with all the usual settings, such as the ...
1
vote
2answers
157 views

Newly promoted domain controller showing many errors but dcpromo didn't complain?

I have a domain separated into four sites. In one of my remote sites, I have promoted a new DC and will be decommissioning the existing DC in a few weeks. I didn't receive any errors when I did the ...
1
vote
1answer
539 views

How Do I Connect to Active Directory Server Behind a Firewall

I'm having trouble getting LDAP queries to reach my Active Directory running on Windows Server 2012 R2 behind a Cisco PIX 506E firewall. My goal is to create a SSO environment for some applications ...
0
votes
0answers
49 views

Cannot add Domain Users to SQLServer security

I installed a win2008 server (WSQL) Its has successfully joined another Win2008 server which is the domain controller. Now back to WSQL machine, I connect it to the domain... And I install ...
3
votes
1answer
136 views

New-ADUser ADException NotSpecified

I am receiving an error when I run this powershell command to add a new user: PS > New-ADUser -Name "user1" -GivenName "test" -Surname "User" -Path "ou=Users" The error returned when run is: ...
4
votes
3answers
628 views

AD does not unlock account - even after the Lockout duration is expired

I'm facing a strange problem - domain user accounts are not being unlocked. These are the Account Lockout Policy settings: Lockout duration: 30 minutes Account lockout treshold: 10 invalid logon ...
4
votes
1answer
54 views

Forcibly Split 2003 Active Directory Domain

I am currently trying to find the most efficient way to split a single domain into two, distinct, fully functional domains. We have two sites, and several DCs. The sites, Site A, and Site B, are ...
0
votes
0answers
50 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
4
votes
1answer
146 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
-1
votes
1answer
127 views

Clone VM connected to domain with CRM 2011 on Windows 2008 R2 SP1 [closed]

After copying VM with CRM 2011 I've changed server name, performed actions in this article: ...
6
votes
2answers
2k views

Reverse DNS records not registered when using DHCP

I've stumbled upon a strange behaviour with Windows machines, which seems to be fairly consistent between all Windows versions from Vista/2008 to 8.1/2012 R2; it doesn't happen instead when using ...
1
vote
1answer
28 views

How can I quickly check number of groups in my domain?

Probably this is simplistic question but it seems that off the top of my head I have no idea how to do this. How can I get number of groups in my domain? In all domains within the forest? What is the ...
4
votes
1answer
5k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
2
votes
1answer
52 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
4
votes
1answer
75 views

What is MS-Membership Transitive.LDF?

When installing ad-lds, you have the option to import several LDF files. Some of them are described here: http://technet.microsoft.com/en-us/library/cc771943.aspx. Can anyone tell me what the ...
1
vote
1answer
69 views

How to set up an authentication system to authenticate users against an existing SQL Server database

I have a pre-existing SQL Server database with login information (user names, password hashes) for thousands of users maintained by an ASP.NET website. I would like to provide an authentication ...
0
votes
1answer
369 views

libnss-ldap getent passwd - AD replies correctly but output shows local /etc/passwd

I am trying to configure libnss-ldap to provide AD authentication to my Linux Debian servers. This is working fine if user exists locally, I want to make it work for Domain users. Here is my ...
0
votes
1answer
171 views

Debian Active Directory to LDAP migration

These days I am working on LDAP and Active Directory migration. I want to migrate to LDAP but I cannot get passwords from Active Directory. I want to seemlesly migrate to LDAP, and I want a solution ...
2
votes
1answer
339 views

dsadd run from batch file fails with “The specified account already exists” when there is no existing account with the same dn

I am programmatically creating thousands of test users from a txt file containing First Name, Last Name, Username, and Password using the following command (saved as a batch file, run in cmd, modified ...
0
votes
1answer
61 views

Amazon Zocalo with Active Directory - can't login

I just setup a Zocalo site for my company using the active directory connect option. The Domain Controller we are connecting to is in an AWS VPC. I setup the zocalo site fine and it says active, but ...
1
vote
0answers
186 views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
1
vote
1answer
52 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
2
votes
1answer
37 views

Missing DomainControllers in Active Directory Object

We are setting up a new network environment that will have two domain controllers and ran into an issue with Windows not recognizing the existing domain controllers (DC-01 and DC-02) as Domain ...
8
votes
2answers
713 views

Outline the quirks of Windows Small Business Servers (SBS)

I'm not much of a Microsoft administrator. However, I do work extensively with new and existing Microsoft Exchange deployments. That's just how the career-arc went. I'm working with a small customer ...
0
votes
0answers
26 views

Builtin group membership not updating on client machines

I have a small active directory setup which is semi-live (i.e. being used by only a few of the computers in the network), however when i try adding members to the builtin groups, and more specifically ...
-2
votes
1answer
55 views

Scripting command that can be executed on Macs to generate/remove (NOT SIMPLY BIND/UNBIND) those Macs as computer objects in Active Directory?

I have searched the stacks fairly thoroughly to find a scripting language-based command that can help me develop a script to be executed on Macs capable of actually generating (NOT SIMPLY BINDING) ...
8
votes
2answers
945 views

How do I block inheritance/application of a single GPO?

Due to the workload generated by recent ransomware outbreaks (Cryptolocker/Cryptowall/etc.), I was recently tasked with implementing Software Restriction policies to block program execution from ...
5
votes
1answer
516 views

How to determine domain controller used for authentication

I run several web sites using IIS on both Windows Server 2003 and Windows Server 2008. These web sites use windows authentication with only the NTLM option specified (no Kerberos). These servers are ...
0
votes
0answers
69 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
3
votes
1answer
779 views

Remotely determine how long a user has been idle

How do I determine how long it's been since a user with files opened on my server has been actively using their workstation in a Windows Active Directory environment (XP, 7, 8 clients and Server 2008, ...
0
votes
1answer
98 views

How do I make browser shortcuts w/custom proxy settings available on user desktops?

In our environment, we have about 30 testers (website testers) located at different physical locations. However, they all log on to the same AD. As it is now, their MSIE is configured to access the ...
-1
votes
1answer
566 views

Setup Domain Controller and Active Directory on Amazon EC2 as Primary AD [closed]

I am planning to deploy an Active Directory and Domain Controller on AWS for my company. It will primarily be used for these: User Authorization (Login/Logoff Process) File Sharing / Management ...