A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
66 views

SSO, Kerberos, multiple domains, multiple Linux servers

I have successfully implemented SSO for one production application running on Centos 6 + apache 2.2. connecting to Windows 2008 AD server. Users are coming from 2 different domains: a.com and b.net, ...
1
vote
1answer
71 views

Limited Permissions to a domain user on AD Server

How to assign permissions to a domanin user such that he can only change active directry users password & he can be able to join or remove Client computers to the domain. He should have admin ...
0
votes
1answer
92 views

Fine grained password policy with msDS-MaximumPasswordAge set to 2 days asks for reset immediately

A fine grained password policy with msDS-MaximumPasswordAge set to 2 days asks for reset immediately on Server 2008R2. After I apply the policy, in the next automatic gpupdate, the machine starts ...
-4
votes
1answer
74 views

How to create an Internet facing Domain Controller Without VPN

I am extremely new to this. I am trying to create a domain controller that could be contacted via Internet. In clear words, I am trying to create a Windows Server 2012 R2 domain controller with ...
-1
votes
1answer
56 views

Clients looking for GPO login script on my personal computer instead of doing it on the DC?

This is kinda weird. I have the Group Policy Management console installed on my Windows 7 workstation and I configure policies from there. Sometimes I do it directly on a domain controller, but most ...
1
vote
1answer
43 views

Is this LDAP filter valid syntax?

I'm configuring AD authentication for a product that wants to query AD for groups. This query is finding nothing and the vendor has provided this (objectClass=group)(objectClass=groupOfNames)(...
2
votes
1answer
53 views

Assign to ASP.NET identity to AD group for accessing remote SQL Server

I have an ASP.NET 4.0 (IIS 7.5) application running on a server(Window Server 2008 R2 Standard), named WEBSERV, and a SQL Server (2008) database on another server, named DATASERV. The SQL Server has a ...
0
votes
0answers
45 views

Windows XP Network Drive Error 1351

my scenario: 20 Windows (XP/7) Clients one XP file server two Linux (Suse 9,10) Samba File servers new Samba Domain Controller (Zentyal) So, the Client PCs all were in a workgroup "blabla", where ...
3
votes
1answer
51 views

Create domain policy to assign user rights

I’m a Unix administrator who also has to work with various MS Windows servers. For various tasks, I’m a lot more productive using the Unix tools that I’m familiar with and for a long time, I’ve been ...
1
vote
1answer
49 views

what are the implications of running a FQDN as internal AD domain and point A-record for website to different host?

The MSP for a law firm office that has just joined our company is using a FQDN as an internal AD Domain and has been doing so for sometime apparently. They have this issue in that they have a website ...
3
votes
0answers
43 views

Kerberos keytab file not working

I have two AD domains and I'm trying to use NFS with Kerberos to both of them. Part of the procedure requires creating keytab files for the host and nfs principals for the client and server ...
3
votes
4answers
334 views

Load balancing LDAP from a Domain Controller via F5

I know that load balancing or fail over of LDAP on a Windows domain controller is generally not a good idea due to the Kerberos and SPN issues. BUT, I have lots of non-windows applications that use ...
0
votes
2answers
88 views

Domain Administrator does not have permission to remove a folder

I am a Windows domain administrator, and on my Windows 7 machine I have a folder that is owned by another domain user. When I right click and attempt to delete, it tells me that I don't have ...
0
votes
0answers
25 views

Internal user cant reset external user password

I have 2 separate forest with one trusting the other one way only, lets call them External and Internal. Users in the internal forest can authenticate in the external but not the other way around So ...
0
votes
1answer
103 views

LDAP: Fetch users under a OU using ad explorer

I'm using adexplorer to query an LDAP directory. I would like to fetch all users that have a certain OU in their DN. So I tried: The results returns an OU, even though I picked class:user. How do I ...
0
votes
0answers
19 views

Create TAPI AD partition - missing TapiCfg.exe on Server 2012 R2

I think I need to create a TAPI application partition in our AD for it seems that "Unify HiPath TAPI 170" does not work correctly without it. To accomplish this on Server 2003 I would use the tool '...
1
vote
2answers
87 views

Any Tips when Raising the Functional Level of a 2003 Domain

I will be doing my first DFL rising this evening (from 2003 to 2008 R2). Is there anything worth noting that I should look out for? Any risks involved? Or server reboots? I've done a system state ...
-3
votes
2answers
42 views

Unattended DCPromo creating new domain fails as user is not domain admin [closed]

I have installed Windows Server 2003 and am trying to make it a DC on a new domain. It works ok if I use the wizard, but when I try to use an answer file, it says 'An AD domain controller for the ...
0
votes
0answers
63 views

The account “Everyone” could not be mapped to a SID

I have a script that enables sharing on a folder an sets the sharing permissions. The script works fine with one exception which is the most important one if you wanna generate a HomeUse-Directory. I ...
-2
votes
1answer
67 views

How to change primary group on Windows without ActiveDirectory?

I have a Windows Server 2012 R2 using WorkGroup only (no Active Directory) with some local users and groups. Is that possible to change the primary group of some local users? I couldn't find a ...
1
vote
1answer
107 views

Unable to enable LDAP authentication on GPFS / Spectrum Scale file system

I have setup a GPFS / Spectrum Scale cluster on 2 RHEL7 nodes. On that cluster I have created a filesystem. I want to enable LDAP based authentication with kerberos so that I can NFSv4 ACLs to ...
0
votes
0answers
103 views

SSH login using Active Directory credentials

I am having trouble logging into a Linux system via SSH using my Active Directory credentials. the system is bound to AD, and all of the required packages are installed and configured, but I cannot ...
0
votes
1answer
44 views

Secondary DNS causing problems after AD is shut off

I have two Hyper-V Servers running on a Physical Server namely WideOff-SRV-01 (IP Address 192.168.1.5). The virtual machines are WideOff-AD-01 (192.168.1.9, which is Domain Controller), and WideOff-...
0
votes
1answer
56 views

How to restrict user access via SSSD AD provider?

I'm trying to configure a Redhat 6.x server for Authorization and Authentication to Active Directory (AD) via SSSD- after joining the server I'm able to login with any valid domain credentials. How ...
0
votes
1answer
34 views

AD FS Setting up - what user rights required?

I am reading this. Is this the latest? May I know what rights is required to set up and configure the Federation Server? Is the Federation Server usually the responsibility of the domain owner? If ...
3
votes
2answers
404 views

Access Denied while attempting to join AD domain using Centos 7

I've tried for days to get these instructions to work, but despite everything, I cannot join my domain. When I execute realm discover, I am able to see my domain just fine: [root@centos5 ~]# realm ...
0
votes
0answers
29 views

Setting up Active Directory, Adding Machines with Different OSes & adding a server with an instance of SQL

I have 2 servers to manage at work, a Dell Poweredge with has a software called "Abecas" which uses SQL Server, The Poweredge is running Win Server 2008, there is no AD in place as of yet. I have ...
-1
votes
2answers
40 views

Merge 2 PowerShell commands to 1

I have a powershell commands to list all AD computers last logon date Get-ADComputer -Filter {enabled -eq $true} -properties * | select Name, LastLogonDate | Sort LastLogondate -Descending | Export-...
-1
votes
1answer
28 views

DNS Infrastructure - Delay

We have a branch office in another counter, which is connected with a site-to-site VPN to our main office. The branch office does not have a local domain controller / DNS server, never the less the ...
2
votes
1answer
33 views

What are some issues with setting up a new AD Forest with a DNS name under an existing AD Forest?

Active Directory Forest A exists as domain.net, with child domains of nam.domain.net, eur.domain.net etc. Forest B needs to be raised. What issues could arise from setting this up as msg.domain.net? ...
1
vote
1answer
50 views

Exchange 2013 RegEx transport rule

I am looking to create some transport rules for outgoing email based upon AD properties. eg. Phone: 123-456-7890 Where the actual inserted code looks like "Phone: %%PhoneNumber%%", retrieving the ...
0
votes
0answers
26 views

Active Directory - Migrate objects to a different FQDN

I have two active directories. The first with the domain name 'abc.com', and the second with the domain name 'xyz.com'. Right now I need to migrate first as a subdomain of the second, so that the ...
0
votes
1answer
28 views

Exchange 2010 Event ID 2159 showing up multiple times each day

I am getting a lot of Event ID 2159 warnings on my Exchange 2010 server. When I navigate to the specified location in ADSI Edit, I don't see anything strange. The path is: CN=Interop RGC,CN=...
0
votes
2answers
53 views

Domain Controller Replication, do logs replicate?

Im seeing some oddities relating to either authentication events or the logs themselves. My question is do the authentication events or the logs replicate across domain controllers? Im seeing the ...
1
vote
2answers
43 views

What permssion is needed to read AD attributes?

I have created some custom attributes for users inside of Active Directory and have also created a basic account to use to login to AD so it can read these attributes, as well as the standard ones in ...
5
votes
2answers
108 views

Minimal set of rights to run a process on a Microsoft Windows Server

I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so. The minimal set of rights is required, ...
2
votes
1answer
145 views

Integrating squid with active directory

I am trying to integrate squid as a web proxy for my users in active directory. I have followed the tutorial in the squid site in here. When i run the command : msktutil -c -b "CN=Administrator" -s ...
0
votes
2answers
118 views

What are the uses for pre-staging a Computer account in Active Directory?

I am learning AD at the moment. At my DC under "Active Directory Users and Computers" -> can anyone tell me what the use of creating a new computer ? I have created user accounts and is able to login ...
0
votes
0answers
7 views

IIS Windows authentcation Unathorized due to directory permissions

I have an ASP.NET MVC 5 application running on IIS 8.0. Application pool is running under domain user, f.i. IISPoolUser. Anonymous authentication uses this identity as well. I gave full control ...
-1
votes
1answer
28 views

Windows 8.1 - Group Policy Settings set, but not executet when offline

Enviremental information: Windows Domain with 3 2012 R2 Domain Controlers. I am trying to build a Windows 8.1 in kiosk mode, only a browser with access to specific websites. With the help of GPO - ...
0
votes
0answers
106 views

Cross Domain NTLM / Kerberos Auth with Chrome on Mac OS X / Linux

I'm trying to configure Chrome on my MacBook Pro to use kerberos to authenticate to web sites so I don't get prompted to enter my username and password constantly. I've added the AuthServerWhitelist ...
0
votes
0answers
32 views

openldap ppolicy users login Access denied

I'm having trouble logging in User created after following steps from Youtube link https://www.youtube.com/watch?v=_ZvnNVwWk-M&list=PLrUFyg1unBb8n0SJxJqQYMo9kRcY2Mly0&index=7 This video ...
3
votes
1answer
88 views

Re-join same computer to Windows domain without domain admin privileges

Is it possible to have a previously domain connected client computer re-join a Windows domain after a clean re-install of the OS, to assume again it's old identity, all without the explicit say-so of ...
0
votes
2answers
57 views

Safe guarding against a duplicated test AD environment if it connects back to production

This article explains what a simple process it is to duplicate your AD setup to a test machine in an isolated network. The obvious issue is that if the isolated forest gets physically connected to ...
7
votes
1answer
362 views

DNS security & .com AD Domains, What are the dangers to my AD Domain if someone squats my public .com domain

I am aware that best practices currently dictate that my Windows AD Domain name should be a subdomain of a purchased, globally unique namespace (ie ad.namespace.com). That's just fine and dandy. My ...
1
vote
1answer
168 views

Mapping One Network Drive On Multiple Computers Via The Same AD Login Credentials

OS: Windows Server 2008 R2 SP1 So say we have one user that has a mapped network drive on his computer at work. This user also maps the same network drive on his personal laptop to work from home. ...
0
votes
1answer
235 views

Opensource alternative to MS Active Directory

As part of an undergoing IT infrastructure building, I need to implement LDAP directory using opensource communities backed solution. I'm not pretty sure about Openldap and Samba. Do they offer ...
0
votes
1answer
82 views

Understanding Microsoft Server 2012 R2 service account

I come from a unix background and is trying to managed some Window Servers right now. I cannot grasp the concept of the different service accounts available and what they are used for. During the ...
0
votes
0answers
27 views

Upgraded Wintel Environment from 2003 to 2012R2, now only 2 Win10 clients can't see network shares or print, all other 78 W7Pro can

Over the last week I've migrated all of our services running on Server 2003 to our 2012R2 environment successfully. This included: AD, DHCP, DNS, Print server, File serving using the migration tool, ...
1
vote
1answer
206 views

rundeck unable to auth against Active Directory

I'm trying to setup rundeck so that it authenticates against Active Directory I keep getting this error The wiki contains information about the 403. Reason: !role error https://github.com/...