A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
94 views

Disable WiFi management on Windows 8 using Active Directory

We have a domain composed by a Windows Server 2012R2 that controls 40 laptop with Windows 8 connected via WiFi. Our goal is to prevent users to disconnect the wifi or, even worst, connect to other ...
0
votes
1answer
35 views

What happens if the only Domain Controller in a AD Site fails

I have a Domain environment say abc.com This has 2 sites Site1 and Site2. Site1 has 3 DCs in it while Site2 only has 1 DC. The question is what happens if the only DC in Site2 fails? Will the clients ...
-5
votes
1answer
44 views

Active directory one specific account locked out continuously [closed]

one specific account locked out continuously, we have checked antivirus updation also scan no virus so please suggest Server Windows server 2003 client windows 7 pro
-2
votes
2answers
132 views

How to programmatically check last Remote Desktop sessions for multiple servers?

In an environment consisting of an Active Directory domain and tens of different servers (Windows 2008, 2012, etc.). How can I programmatically list all recent logins (via Remote Desktop) to each of ...
0
votes
0answers
70 views

Problems using SSH with winbind authentication

I am trying to set up authentication against an Active Directory Server on a Debian Wheezy machine. So far, getent passwd/group works perfectly and shows me the network users/groups. wbinfo -u/-g ...
0
votes
1answer
34 views

domain controller naming group policy [closed]

i have two domain controller setup one on 192.168.1.10 companyname.local and 192.168.1.20 companyname.local as backup. i was task of rebuilding the backup and make it the main domain controller. i ...
1
vote
1answer
47 views

Split Horizon DNS via Active Directory?

Say we have an active directory domain corp.mycompany.com and a public DNS domain mycompany.com. Is it possible to create an AD integrated DNS zone for mycompany.com and only host records we need to ...
0
votes
0answers
75 views

Error occurred loading custom AD FS authentication provider on secondary AD FS server

We have a custom MFA provider for AD FS v3, and it's working nicely on the primary AD FS server. However, on the secondary, when AD FS starts, we get the following error in the event log: An error ...
0
votes
2answers
175 views

login with active directory users on debian jessy not working

I'm trying to get the login with active directory users working for nearly a week now. First of all, I'm pretty new to pam, samba, kerberos and winbind. We worked with local users and sudo before, but ...
0
votes
0answers
33 views

In a SPN string, can dns/domain part before and after @-sign be different?

We need to ask the user for settings to build the SPN for a webserver. I'm fairly new to Active Directory and have no knowledge about forests etc. At the moment I can only see the need for asking ...
0
votes
0answers
240 views

Decrypting an encrypted cookie with Apache on Windows Server 2008 R2

I have a question about how decryption would take place at an Apache Web Server. Basically, I'm trying to implement a single sign on solution. I have an encrypted cookie, which holds unique identifier ...
0
votes
0answers
50 views

Migrating from Static Routes to BGP:: now TRACERT/PING works but Windows CIFS or HTTP do not

When we switch from a static routed private non-BGP circuit to a BGP private circuit linking two offices, Windows shares and HTTP browsing of internal machines across offices fails with timeouts. ...
0
votes
3answers
116 views

Are incorrectly configured DNS servers the root cause of slow logins to the windows domain?

We have six AD Windows servers (I believe they are all 2008 R2, running at a functional 2008 R2 domain) All six servers have the AD role and DNS role. We have about 1200 workstations in our ...
4
votes
2answers
232 views

Computers point to DC in wrong site

I need your help. I've struggled with this for months and nothing I've found online has helped me. The problem is, domain computers sometimes point to an incorrect domain controller in a different ...
0
votes
3answers
996 views

How to join Windows 10 Mobile to a domain?

We are currently experimenting with Microsoft Lumia 950 running Windows 10 Mobile and Microsoft's Display Dock. Now I am wondering how I can join this mobile device to the existing lab Domain. ...
1
vote
0answers
44 views

Should I install IBM Domino with domain or local admin account?

I have recently deployed Active Directory in our firm and been pretty new to administrating it. I am starting to use Domain Administrator on all computer and it's really cool. But should I install ...
0
votes
1answer
33 views

Imitate Azure AD user/tenant claims within ADFS

I have a .Net web application that allows users to hook up their account with an identity provider (Azure AD, Google, and/or ADFS) to allow single sign-on. On hooking up their account (or ...
0
votes
0answers
22 views

AD/2003 Computer Group membership is not propagated to client

I have a Windows network based on an ageing Windows Server 2003 infrastructure, with two DCs, configured with replication between each other. While trying to find out why a certain GPO wasn't being ...
1
vote
2answers
53 views

Issue authenticating to AD-joined Centos 7 server

Using this link, I have set up a server that is properly joined to an Active Directory server, but for some reason I can not authenticate to that server with a kerberos ticket on several test-users ...
0
votes
0answers
125 views

Sometime unable to login with domain account although username and password are correct

Every morning , when I try to login to my computer I can't login and the message appears User name or password are incorrect, although username and password are correct. Once I login with the ...
0
votes
0answers
57 views

How to implement a dead man switch in Windows 7?

I am looking for a way to make domain-joined Windows 7 laptops brick themselves after 90 days of no-contact with a domain controller. I do not want the laptop to wipe itself or anything severe like ...
1
vote
1answer
79 views

Powershell to exclude Group Members from Dynamic Distribution List

I am attempting to remove specific users from a Dynamic Distribution List. I have searched and toyed with my PowerShell script for sometime with no luck. I'm sure it is something I am overlooking as ...
1
vote
1answer
25 views

Server 2012 with DAC setup [closed]

I am trying to setup DAC in Server 2012 Standard. However, it gets a little confusing on how the client has groups. 8 total groups (including Administrators and All Users). However, 1 user might be a ...
7
votes
2answers
73 views

AD: Domain migration or renaming?

I've been given the task of listing down important activities with their estimated effort to help choose the best option/solution for the following scenario: The current domain is named "Domain0" and ...
4
votes
2answers
97 views

Active Directory replication target principal name incorrect

I have a small 2 DC domain using Win 2008 R2 machines. Recently, one had to be restored using backup exec system recovery. Now the two are failing replication. I have ran DCDIAG on both (see below) ...
1
vote
1answer
104 views

Send a message via cmd through msg command [closed]

I need to send a message from my Laptop via command line i.e cmd or any batch file, to group of Computers in Domain and Workgroup. So, i am thinking to use ' msg ' command available in Windows 7. But, ...
6
votes
2answers
190 views

Unable to login via PAM and ldap: failed to get password

I'm trying to have OpenVPN authenticate users via PAM over LDAP to an Active Directory server. Here are the relevant parts of my configuration files: /etc/openvpn/server.conf: # ... plugin ...
1
vote
0answers
14 views

UAC never asks for admin password, denies access on admin-related tasks, on client computer. How to fix UAC?

I have a client computer, Windows 7 64 bit, connected to our network. The user who signs on is not an admin (according to our active directory). It's having credential issues which I'm trying to fix ...
3
votes
1answer
70 views

Group policy result for a list of computers

Is there a PowerShell command that can be run against list of computers to obtain computer policy settings in a domain? my servers are all windows 2008 and 2012 OS. I will apply some GP settings to ...
0
votes
1answer
42 views

Static IPs and New Domain Controller and Domain within existing Forest

I have a forest domain chicago.example.com that contains 2 domain controllers in it, in which I had joined a 2012 Server to the forest domain called DOMAINCONTROLLER3. I plan to promote this server to ...
0
votes
1answer
113 views

Single Sign On with multiple Identity Providers from PHP web app

I'm building a SAAS web app in PHP that needs to integrate SSO. We'll have multiple client organizations, each that have their own Identity Provider (Active Directory). While researching ...
2
votes
2answers
168 views

Force user to change AD password at logon before Explorer loads?

Background: In our environment, users log onto a Windows 7 PC and then launch a full-screen Citrix XenApp (same as Microsoft RDSH) desktop. Citrix Reciever with single-sign on is used to launch the ...
0
votes
1answer
68 views

Script to retrieve computer objects in specific AND display their respective OU's

I have an OU with many sub-OUs, each with an OU for computers. The highest level OU to start is 'Departments' with many sub-OU's. I need a script to retrieve all computers and list them in a table ...
0
votes
3answers
75 views

Best way to migrate AD users from one domain to new one?

Our company was recently bought out and as such, we are going to be required to join their AD. Currently, and the way they had recommended is very cumbersome, especially with very large profiles. ...
0
votes
1answer
45 views

Auditing for User/Machine account logon/logoff events in Child Domain ONLY

I have searched high and low and cannot find an answer to my need. I am in the process of setting up a SIEM for our network and I need to audit for user and machine logon/logoff events. Simple enough ...
0
votes
0answers
22 views

FIM Wrong accountType error

I have an Active directory containing an universal security group named GG_H_W4M2MD it has several members. I have a "normal" user account named 26626. Both are managed using FIM 2010 R2 (Forefront ...
-1
votes
1answer
54 views

Wrong IP when issuing nslookup - Windows DNS Server [closed]

I recently setup a Windows Active Directory server for Home use. (for learning purposes) Now I have the following problem when using nslookup on a connected client: ...
0
votes
2answers
96 views

How to lower child domain and forest functional level?

I added a child domain (ab.xyz.com) to an existing forest (xyz.com) in Active Directory Domain Services. Both domain controllers are running Windows Server 2012 R2. I want to lower the child domain ...
3
votes
2answers
78 views

Unable to RDP as a Domain User

I am facing a problem remoting into a machine using a Domain account. Problem Facts : The Host VM's are hosted by Company A (read Domain A). The VM's have a local administrator as well Domain 'A' ...
1
vote
1answer
131 views

Active Directory sysvol Check script using Powershell Jobs

I am working on a sysvol check script for active directory monitoring. Completed the script which checks connectivity to sysvol on all the domain controllers in the given domain. As part of this i am ...
1
vote
2answers
42 views

What happens with the shared permisions on file server after reinstalling system partition

I was wondering what would happen if i need to reinstall Windows 2008 R2 which is set as file server joined to second computer which is set as domain controller. The file server have second drive d: ...
0
votes
2answers
170 views

FQDN ip address disappears on Windows Server 2012 so DC doesn't work

We have a server that works as DNS, Domain Controller and Active Directory server. (Windows Server 2012) The problem is that computers joined to the domain lose connection so they can’t login or ...
1
vote
1answer
45 views

Create open directory replica of active directory server

I have an active directory server running on windows server 2012, and a mac osx 10.6 server capable fo running open directory. Currently, my mac server is connected to my AD server, however I would ...
0
votes
1answer
35 views

Deny all kind of access except for ip-range

Hi I'm setting up a little 2012R2 network. Right now I want to setup an DC and connect a few windows machines with it. It's running virtualisied on my root server and unfortunatly I can't put it ...
1
vote
0answers
43 views

Samba doesn't seem to stay joined to Active Directory domain [closed]

I can initially join a linux box to the domain with these commands: sudo kinit administrator@WINDOWS.CORP.SPRINGVENTUREGROUP.COM sudo net ads join -k After a few hours or the next day, this ...
0
votes
2answers
89 views

Windows Event ID 6011

I am looking into how to track when a computer was renamed and by who. I know you can pull the eventlog from one computer, but I am needing a report generated on over 1000 PC's for a two weeks period ...
0
votes
0answers
23 views

Account lockout when attempting to add user account from partially trusted domain

I'll try and lay out the scenario as best as I can. We have two domains. Domain A trusts domain B, but not the other way around. On a machine joined to Domain A, User X has credentials in both ...
1
vote
2answers
147 views

Windows Server 2012 using wrong IP address for replication

Is there a way to manually set what IP address/DNS record AD will use when replicating? I have a "network within a network" (NWaN) setup which spans across two remote locations-- so there's one NWaN ...
1
vote
0answers
23 views

Kerberos - KDC and IIS on same machine

I have one domain controller which must act as Kerberos KDC and a IIS server running on that same domain controller. I need to set up an Integrated Windows Authentication where a domain user can ...
0
votes
2answers
187 views

windows server 2012 r2 AD: default unchecked “User Must Change Password at Next Logon” when manually reset password

When I manually change an user's password, I get the checkbox "User Must Change Password at Next Logon" (here in italian "Cambiamento obbligatorio password all'accesso successivo") checked by default. ...