A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
1answer
19 views

Server 2012 new AD domain next to existing SBS domain

I've got the following scenario. Server 2003 SBS with an active directory domain: COMPANY.LOCAL Server 2012 Standard 2012 with a workgroup: WORKGROUP No computers in the company are part of the ...
0
votes
0answers
38 views

Download AD user certificates using PBIS in ubuntu

I am migrating from Centrify to PBIS (likewise-open) tool to join to Active Directory domain from my ubuntu machine. I would like to know if there is some command to download user certificates from AD ...
0
votes
2answers
98 views

Deploy active directory ONLY on the cloud and join workstations to it WITHOUT VPN (No DCs on premise, No RODCs etc.)

The company has does not have any offices. All users are remote. However, they need an Active Directory to which workstations can be joined and users can be centrally managed. One suggestion is to ...
0
votes
1answer
52 views

Not able to “Run As” any application on a server in the TRUSTING domain using an account from the TRUSTED domain

There are two domains: "dom1" and "dom2". "dom1" is the trusting domain. "dom2" is the trusted domain. I.e. there is a one way trust where domain "dom1" trusts domain "dom2". Servers joined to ...
0
votes
1answer
183 views

AAD Connect “Soft match issue”

I upgraded to AAD Connect from sync recently before I performed a virtualization of our server infrastructure at the school I work at. I'd like to be able to move the role from my physical black box ...
2
votes
1answer
73 views

How can I correct my foreach loop in powershell for every Active Directory OU user?

Goal: Create a for or foreach loop to execute some code (in this case, just print x) for every user in an OU. Im using powershell 2.0, with ActiveDirectory module. So far: This is what I have (see ...
0
votes
1answer
74 views

Linux to authenticate using MS AD using samba

I am trying to complete a poc which needs linux server to connect to MS AD and authenticate using domain creds. After some reference, I felt samba would do good here and so I have installed and ...
1
vote
1answer
144 views

Windows forest trusts between two domain controllers with the same hostname

So, I have two forests, let's call them alpha.example.com and bravo.example.com. The NETBIOS names of the domains are ALPHA and BRAVO, respectively. That would seem to imply that there is no problem ...
3
votes
0answers
166 views

Active directory filter to get all users on several AD locations without using groups

I'm required to use AD for authorization to some online tools to ease software development across three countries in a big international company. The tools AD/LDAP section have one line to specify a ...
1
vote
1answer
192 views

Java application authentication using Active Directory

I am working on a third party Java application for which I need to authenticate its users using Active Directory. This application is hosted on RHEL 6.5, and uses LDAP to authenticate with Windows ...
2
votes
1answer
158 views

Preferred vs alternate DNS, DNS failover with Active Directory

Question. I have a Windows AD Domain with two DCs. I find that name resolution becomes very unreliable when my "primary" Domain server is offline. How can I fix this? I am running two Windows Server ...
2
votes
3answers
97 views

Connect two remote offices

I would like to connect my company's office with another remote office that is owned by us. Our office is in Europe and the new one is in the states . I'm an experienced sys admin However I've never ...
1
vote
2answers
152 views

general questions about DNS routing

Question. I have a Windows AD Domain and there is one part that is a mystery to me: how is the Windows Domain / DNS Server doing lookups for domains outside of the Windows domain? In a simple home ...
0
votes
1answer
75 views

IP Switch between 2 domain controllers

I have several domain controllers in my domain and I need to switch the IP between 2 of them ( one with Windows Server 2k8 R2 and one with Windows Server 2k12 R2 ) I did the following steps until ...
1
vote
2answers
173 views

Windows 2008R2 Domain Controller: Name Resolution (hosts file, DNS) does not work

I have got a pretty strange issue on a domain controller. Environment is: Windows 2008R2 Std Server + all updates One DC + a few Windows clients joined to that AD On that DC was Symantec ...
3
votes
2answers
221 views

Set Windows share as network home for AD-joined Mac users

we've been seriously scratching our heads on this issue for the last few days. It's now time to ask other professionals on possible solutions for this. The situation and what we're attempting to do: ...
1
vote
1answer
32 views

Using GPP to set local admins

Using Server 2012 r2 in domain environment, I'm trying to add specific groups of users to the Administrators(local)group to computers organized in OUs using GPP and item-level targeting. While the ...
0
votes
1answer
850 views

Samba4 & Active Directory Kerberos [Cannot contact any KDC for realm 'INTERNAL.CORP.COM' while getting initial credentials

Yesterday I configured an Active Directory Server using Arch Linux and Samba 4 following this guide. I even added a client to the domain and was able to log in successfuly on my client. After a ...
4
votes
1answer
254 views

Change AD users attributes via Power Shell script

In the domain I'm working we created an attribute "regulationMatrix" . When I try a powershell command like get-aduser USER -properties * that specific attribute shows up only if it has a value set ...
2
votes
1answer
45 views

GPO: Folder-redirection from 2 locations: Getting personal folders twice?

We have one domain in two locations (connected with vpn). In both locations we are using VMview pools. In both locations we are using GPO for redirecting the user-folder to the file-server at each ...
3
votes
1answer
694 views

Windows 10 not getting gpo deployed printers

In a small network (5 clients, more "users"), I have two Windows Server 2008 R2 acting as Active Directory DC and file and print servers, where I did setup several GPO, and printer deployment. This ...
0
votes
4answers
586 views

Sync non-AD LDAP instance with Office365 / Azure AD

We have a non-AD LDAP environment that we wish to sync our with our o365 Azure AD directory. Is this currently possible with DirSync AAD Sync or similar?
0
votes
1answer
159 views

Difference between `proxyAdresses` and `mail` attributes in Active Directory

In Windows Active Directory (in connection with Exchange 2010), I am unsure about the semantic difference between mail: and proxyAddresses: attributes. As far as I can tell, mail: is one-valued ...
0
votes
1answer
145 views

exchange 2013 email address policy not applying after changes in Active Directory

In our exchange environment we have an email address policy to give two email addresses, a friendly alias that is firstname.lastname, and another one based on an employee ID. When I change their first ...
0
votes
0answers
66 views

SERVER2012 R2 Core access denied when deploying domain controller from remote system

I have installed Windows Server 2012r2 Core edition and want to promote it to my first domain controller. I intended to do this with a Server Manager installed on a client computer. I connected to ...
0
votes
2answers
138 views

Can't log in to Windows Server 2012 after removing AD DS

As title says, I just demoted my domain controller on my Windows Server 2012. I followed this guide in doing so: ...
-1
votes
1answer
15 views

Network shared folder on windows 2008 server [closed]

How to setup a network shared folder on your windows server so all clients connecting to the domian on the same server can access the shared folder.
0
votes
2answers
28 views

Local Policy gets overridden by a GPO

I my domain I have several SQL servers and I need the Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Audit Policy\Audit policy change policy defined with Success. I ...
0
votes
2answers
43 views

Active Directory logon issue

I have created one Active directory and consist of some users. But when the user are trying to login through their machine, they are getting an error: The security database on the server does not ...
0
votes
0answers
56 views

Windows Server 2008 R2 + Active Directory + Extended Schema Custom Attribute for RDN

I am migrating my ldap schema from OpenLDAP to Microsoft AD. I have added my schema changed to AD schema. I am using a custom attribute called "UniqueID" to store rdn of each entry in the Ldap Server ...
1
vote
3answers
84 views

How can I tell which AD-group is giving a specific user access to a folder?

Given a user ID and a folder, how can I tell which of the groups is the reason that the user has which access?
2
votes
1answer
79 views

Does a GPO apply if “Security Filtering” tab is empty, but there is a security group in Delegation which has Read and Apply right?

As in the subject, does a GPO apply if "Security Filtering" tab is empty, but there is security group in Delegation which has Read and Apply rights? Security Filtering tab says "The settings in this ...
0
votes
2answers
84 views

enable built-in adminstrator account on SBS2011

In an attempt to uninstall Exchange 2010 I removed some mailboxes (before I would then remove the DB's), but in doing so, it looks like I've removed the AD administration account - named sbsadmin. It ...
1
vote
1answer
59 views

edit Active Directory site location Powershell

I'm trying to change the site in my AD via PowerShell. So far I have no issues with the name or the description, but keep getting errors when trying to change the location of the site. The code which ...
1
vote
1answer
40 views

GSSAPI on Linux when reverse DNS lookup doesn't match AD DNS suffix

I have CentOS 6 server that has been joined to Active Directory using Samba and net ads join -k. It thus has a keytab like this: Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- ...
1
vote
1answer
59 views

Decomission Active Directory DC role but keep DNS service

I planed to move my AD's DC Server to a more controlled network environment. Now my 5 role has moved to the newly deployed DC Server, and next step will be decomission the old DC servers. Currently ...
1
vote
1answer
127 views

Linux Samba domain join to auth AD user to SoftEther

According to SoftEther docs on authentication using Active Directory: In order to conduct NT domain or Active Directory authentication, the SoftEther VPN Server to conduct user authentication must ...
-2
votes
3answers
65 views

Example user OUs and GPO enforcement [closed]

I've never administered Active Directory before. Right now, I'm implementing it for an organization with ~20 employees or so. I've set up the AD using Samba, and everything's working fine so far (PCs ...
1
vote
0answers
322 views

Centos AD Authentication with SSSD, How to add Samba Shares

I've been trying to get this to work reliable for some time. Heres the breakdown: Centos 7 with SSSD auth to Active Directory (fully functional) here is the sssd.conf file: [sssd] domains = example ...
1
vote
2answers
49 views

Dealing with user account(s) on devices before domain membership

What are the best practices of dealing with accounts, admin and user, created before domain membership of the system? Will they be classified under an OU? Can they be merged with the domain users ...
3
votes
3answers
195 views

DNS resolution issues until Windows DNS service is restarted

I am managing a pair of Windows 2008 R2 Enterprise SP1 domain controllers with AD integrated DNS. We occasionally see member servers in the local domain intermittently fail to resolve an internet DNS ...
3
votes
3answers
401 views

Find out if password expired or when it expires for user in a specific OU

Is there any powershell command that outputs the users that have their passwords expired from a specific organizational unit (OU). If so can it be combined in a script with another command that ...
1
vote
2answers
79 views

One machine and Hyper-v

I have one machine (Dell T320 Intel Xeon CPU E5-2401 @ 2.4GHz w/ 32GB Ram). I'm running Windows Server 2012R2. I have a total of 5 users. I need to run AD, DNS, File and Storage Services, and Print ...
2
votes
1answer
127 views

Active Directory Log on To… setting keeps resetting Windows Server 2012

My current work environment consists of a DC running Windows Server 2012. Upon creating new users, or assigning old users to new terminals, they get an error when trying to log into their workstation ...
1
vote
0answers
30 views

Is there an AD setting that prevents Admins from resetting passwords?

I have two separate Windows 2008 AD domains, one for Dev/Test and another for Prod. I have asp.net/c# code on a Win2008/IIS7 server that uses calls suPrincipal.SetPassword(password) using LogonUser ...
1
vote
2answers
100 views

best practice for deploying file shares in Remote Desktop Services

We are setting up a new virtual Remote Desktop Services deployment for 10 users in Azure, with 2 domain controllers and 2 RDS servers. Our requirement is to have resilient and fast file system for ...
1
vote
1answer
38 views

Simulate Active Directory Remote Site [closed]

Any guide on setting up two domain controllers (DC1 Primary Site different network segment and DC2-Remote Site different network segment) - in the same Active Directory domain. just for simulation ...
2
votes
1answer
35 views

Kerberos Error APP_MODIFIED when using a CNAME DNS record

I have a production server, which I'll call CONTOSO\MachineA, running SQL Server. I have a development server, which I'll call CONTOSO\MachineB, running IIS. Both servers are running Windows Server ...
4
votes
4answers
323 views

Script for getting last reboot timestamp (2008r2)

I have a list of ad-integrated computers and I need a list of them with their last reboot time. I found some comands like Get-WmiObject -ClassName win32_operatingsystem -ComputerName xxx | select ...
2
votes
1answer
24 views

GPO with security filterung applies to server - but why?

We have set up a GPO that has a security filtering using security groups. The GPO is linked to the OU, the server is a member of the security group (IN THE AD - more in a moment). We have not ...