A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
0answers
106 views

Promote Windows Server 2012 to domain controller in an existing samba network

I have a Windows Server that I want to use as a domain controller to push gpo's to workstations that are on a samba 3 domain served from an Oracle Solaris server. If I were to promote this server to a ...
0
votes
0answers
39 views

Guest clients browsing very slow

I have AD, DHCP, DNS, RRAS, Print and File Services on my Windows Server 2003. I have a small network of 40 desktop computers and 10 guest laptop connecting cables for mobile staff. I have a Cisco CE ...
18
votes
1answer
1k views

How to time-bomb a GPO?

I am doing a lot of work in higher education where it is a rather common requirement to reconfigure a number of Windows domain members (e.g. PCs in a classroom) for the duration of a specific course ...
-2
votes
1answer
46 views

Create a backup domain controller, but don't want it to do anything [closed]

I set up a second domaincontroller fot backup, but if I take a look at he log files, I see that is manages logons for half of my computers, etc... Can I set it up that it actually does nothing, ...
3
votes
1answer
142 views

Can group managed service accounts be granted privileges such as “log on as batch job”?

I recently set up a group managed service account to ditch the headache of password rotation. The account creation went smoothly. I was able to set up a service to run as the gMSA, and the account ...
-1
votes
2answers
101 views

memberOf AD explorer search error

I'm using AD Explorer from Sysinternals. I'm performing a memberOf search against the container OU= Alaska Users for the following user: CN=Doe.John,OU=Alaska ...
0
votes
0answers
132 views

Allow access to a share on a workgroup using a user which is a part of a domain

There are 2 networks. Network A, which is domain controlled, and Network B, which is a small workgroup. A user from Network A accesses Network B using VPN (Network B is Checkpoint 600, office mode, ...
1
vote
1answer
176 views

saslauthd on Red Hat 6.5 NO “authentication failed”

I'm trying to authorize an user of an active directory in a red hat linux 6.5. To do that I am using saslauthd. This is its configuration: /etc/saslauthd.conf: ldap_servers: ...
3
votes
1answer
222 views

Check if a Domain Controller has been cloned

I have reason to believe that previous administrators cloned our Domain Controller at somepoint in its recent lifetime. The DC at one point was running on Server 2003 and has since been upgraded to ...
0
votes
1answer
641 views

An error occurred while using SSL configuration for endpoint 0.0.0.0:443

Based on information received from the network team. I have determined that the issue most likely rests with the application servers on the WAN. After replacing the certificate, I ran the ...
4
votes
0answers
215 views

Windows Server 2003 DC migration to 2 x 2012 R2 DCs - DCDiag error = Advertising: SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE

We are upgrading our single 2003 domain controller (DC1) to two 2012 R2 controllers (DC2 in Sevenoaks and DC3 in Manchester (different site in Sites and Services for Manchester)). DCpromo (the wizard ...
0
votes
1answer
39 views

Authenticate WLAN using Hostname in Access Group

The hardware is Cisco APs and Windows 7 Enterprise clients, which currently allows users to authenticate based on an Access Group in AD. We're looking at instead of users account, using the actual ...
-1
votes
2answers
308 views

Reuse old domain controller IP address

We currently have 2 Windows Server 2008 R2 domain controllers, and I want to replace one of them with a Server 2012 R2 DC. I also want to reuse the IP address after I demote the old DC. What is the ...
1
vote
0answers
100 views

Not able to RDP with any other users

I have a strange problem in my Active Directory using Windows Server 2008 R1. Only one of my users is able to make use of remote desktop functionality from the 50 users I have in my domain. The rest ...
0
votes
0answers
78 views

Can't Remote Desktop on LAN, Firewall Rules in Place, Yet Packets Dropped

I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as ...
4
votes
1answer
638 views

Execute Powershell Add-Computer remotely via Invoke-Command

Scenario: When executed locally on the Azure VM, succesfully adds the machine to the AD, and restarts. $DomainName = "test.local" $AdminUserName = "sysadmin" $Password = <mypass> ...
0
votes
1answer
224 views

Windows 2008 Domain users can't logon even though Default Group Policy allows local logon

I've installed Windows 2008 Server Standard R2 and installed AD/DNS Server. After that, I'm not able to logon a local user which I've created. "You cannot log on because the logon method you are ...
0
votes
0answers
69 views

Active Directory Won't Authenticate

Something is really buggy with our Active Directory here at our company. We can query and ping everything just fine. The time is correct. We have restarted both of our Domain Controllers. We also use ...
3
votes
3answers
6k views

SQL Server Windows Authentication fails after tonight's security updates: The login is from an untrusted domain

We have the following setup: One Domain Controller (DC, Server 2003 R2 Standard x64) One SQL Server (SQL, Server 2008 R2 Standard x64) some clients. All machines are in the same domain. All user ...
0
votes
1answer
136 views

Using Administrator Credentials to login as a User to Their Desktop [duplicate]

Other than memorizing and documenting each user's credentials, is there way that I can use the Windows Domain Administrator credentials to login to a workstation-user's desktop as if I were them? I ...
0
votes
0answers
100 views

Samba AD DC Authentication Problems

I'm trying to setup an AD PDC using Samba4 on Ubuntu 14.04. My endgame here is to have an AD domain with users created by LDAP that can login to the domain and use roaming profiles, so that any users ...
1
vote
1answer
89 views

Remote location management copy and install large software updates to 50 LAN

Initially posted to Stack Overflow and was directed here. I'm new to programming and am trying to write a powershell script to manage software updates. I'm in a windows domain environment with over ...
-2
votes
1answer
454 views

The security database on the server does not have a computer account for this workstation trust relationship. Error in 1 PC [duplicate]

We have a small office with 9 PCs and a Windows Server. Today one PC, Cypher shows this when trying to log in: The security database on the server does not have a computer account for this ...
0
votes
0answers
43 views

Obtain krb ticket for another user

I have a system account in my domain (DOM\sys) and it has access to service cifs/server@DOM. I want to obtain a ticket for this service using my own account (DOM\user). In other words I need sudo-like ...
0
votes
1answer
31 views

Performing Nonauthoritative restore of AD on offline DC

I have a domain controller that's been offline for 3 months. If I bring it back online normally, it will cause issues due to the tombstone life now being over the 60 day expiry. What's the best method ...
1
vote
1answer
46 views

Windows AD to disable user after incorrect login

Pardon my naïveté. I am not a technical person. We are using Windows Active Directory for user authentication, for example to login to workstations (PCs), for Citrix, etc. There is a quality ...
0
votes
1answer
164 views

Set timezone in Active Directory

I have a script that we use to add new employees to our Active directory domain and groups. We are trying to see if there is a way that we can also add timezone with the script but I am not find ...
0
votes
1answer
107 views

Verify that users are required to change their password on their first login

Active Directory has a setting that forces a user to change his password upon his next login--visible in the AD Users and Computers applet, when right-clicking a user, selecting Properties, then ...
4
votes
1answer
668 views

New Domain Controller with DNS in Windows has forwarders setup

I just installed a new Windows 2012 R2 domain controller. I was looking in the DNS Server, and there were two DNS Forwarders setup, which were other domain controllers. "Forwarders are DNS servers ...
-1
votes
1answer
230 views

DFS Namespace inaccessible when PDC is unavailable or moved

Our current setup uses two DFS servers acting as referral servers for our DFS Namespace. The data is replicated from the Live server to the DR server at our second location. The aim is to have the ...
0
votes
2answers
130 views

New Domain Controller to combine two Domains into one: Domain replication or DNS?

Background We currently have two networks, one in London, and one in Brighton. We use Office 365 for email, Lync and Sharepoint, so there is no Exchange server. Both offices are connected by a VPN. ...
0
votes
1answer
52 views

Machine based group policy to change display setting

How to change display using computer group policy?
0
votes
0answers
78 views

DNS won't respond to one DC

I have a multi site AD setup and am having issues with trust/netlogon/dns on the DNS DC in site 2. Things were fine until a month or so ago, only discovered issues today by chance reviewing logs. ...
-1
votes
1answer
53 views

Main server 2008R2 crashed. Need to copy AD from another server in same IP range

Unfortunately the main server crashed and I have re-installed Server 2008 R2 Standard in it. The server had only ADDS, DNS Services and File Services. I have the AD on a desktop computer where Server ...
1
vote
2answers
102 views

Giving access to multiple users for remote desktop

I have 50+ users whom I want to give remote desktop access to multiple VM machines. Instead of adding each individual user to "Remote desktop users" I created a AD security group & added all the ...
6
votes
1answer
60 views

How to filter settings within a GPO that only applies to Windows XP?

We have several GPOs containing many settings that have accumluated over time. I have spot-checked some of them and stumbled over settings that only apply to Windows XP (we exclusively run Vista and ...
0
votes
2answers
44 views

Group Policy to force all web traffic to a specific page OR GPO to display unclosable popup to get users attention

We have a number of tasks users need to complete over the month (time sheets, reports, etc) and I am trying to think of the best way to force users to complete these tasks. Currently, we send ...
0
votes
1answer
1k views

ADSI Linked Server: Why can I query AD in VBA, but not as a Linked Server?

After all the reading and research I've done, this seems like the most logical place to post this question: Why can I query Active Directory using VBA, but not a Linked Server in SQL Management ...
4
votes
1answer
91 views

Event ID for an Active Directory Domain Rename

My Active Directory forest has 6 child domains. As part of a security control, we are required to get alerted (e.g. using SCOM) when someone triggers a change in the domain name. My question: Is ...
0
votes
0answers
38 views

Add a computer which is outside my LAN into my Active Directory

Is it possible to add a computer with public static ip address into my active directory? Do we need to use any vpn to bring the remote computer within the network to add that computer within active ...
0
votes
1answer
59 views

“Entire Directory” option missing from Locations in “Select Users, Computers, SrvAct, or Groups” dialog

I'm a very inexperienced server admin, so if fail to provide some important information I apologize in advance. I am doing some development for a very small software company and I'm having a bit of an ...
0
votes
1answer
112 views

AAD Sync not able to connect to online service using powershell

When trying to connect to my Office 365 tenant using connect-msolservice from powershell I get the following error: Connect-MsolService : The HTTP request was forbidden with client authentication ...
0
votes
0answers
36 views

Mac Maverrick AD binding

I have about 40 Macs on my AD Domain running OS X 10.9 (plus OD server). Recently the two MacPros (one aluminium case and one black shiny ash tray) have lost their binding to the AD, so I have unbound ...
0
votes
3answers
178 views

Prevent users from downloading certain files

I am working for an organization which helps people with mental disabilities. All of them have a user account in our AD. The client computers are running a mix of Windows 7 and 8.1, and the server is ...
2
votes
2answers
95 views

Windows Server Administration - which services are safe to run internet facing?

Coming from a Linux background and now having to manage some Windows servers (2008R2 & 2012R2) I'm wondering which services are safe to run directly over the internet. The servers are all internet ...
2
votes
0answers
130 views

Group Policy - Drive Mapping Preferences - slow login even if only using Computer Config side

We are having some users with very slow login times, up to 20 minutes, but only for a handful of users. I've narrowed it down to a particular GPO that does nothing but Drive Mapping Preferences. I ...
0
votes
1answer
89 views

Solutions for bridging Solaris/AIX to Active Directory?

I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully ...
4
votes
1answer
994 views

Search-ADAccount :: Finding Inactive, Disabled or Expired Accounts

The Search-ADAccount cmdlet has switches -AccountDisabled, -AccountExpired and -AccountInactive; the results of which may not be mutually exclusive nor inclusive. i.e. an account which was disabled ...
0
votes
1answer
48 views

Folder redirection for multiple locations

I need to find a way to redirect a folder at one location to the file server at the same location and repeat this for all of the other sites. So all of the computers at SiteA will redirect to the ...
0
votes
0answers
107 views

Squid NTLM authentication started to fail

I have a squid server authenticating against a Win2k3 AD. The authentication is failing since today and I'm sure it is something on the windows side because on the linux machine there were no ...