A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
511 views

Configure FreeRADIUS with Active Driectory allow specific group of users to authenticate

In order to authenticate WiFi clients I use a FreeRADIUS server configured to check for user credentials in an Active Directory environment. Currently all users with a valid account are authenticated ...
0
votes
1answer
61 views

Can I use an RODC for Active Directory athentication if the writeable DC is not available for several months?

We are running an Read-Write DC at our home office which we are using for authentication when were are working there. It works fine as long as we are at the office, but we are going to be on the road ...
4
votes
2answers
372 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...
2
votes
1answer
99 views

Active Directory OpenDNS forwarding

I currently have set up my Windows DNS to forward to OpenDNS. However, all traffic in OpenDNS shows up from the IP of my local Windows DNS server. Is there any way I can make the individual devices ...
4
votes
1answer
99 views

Does Active Directory's Kerberos implementation support per-user ticket lifetime settings?

With MIT Kerberos, the kadmin utility supports the creation of principals that have an explicit maximum ticket lifetime and renewal lifetime (-maxlife and -maxrenewlife arguments for add_principal) ...
2
votes
1answer
335 views

AD Sites & Services - KCC Auto Generated Connections

As I understanding it, the KCC will auto generate connections for replication. I was told by a co-worker that this only occurs for the first 5 domain controllers, which is why he has manually created ...
0
votes
1answer
47 views

Sharing printers with computers and not users in Win Server 2012

I have a LAN network with 120 users, not so big. They're all splited in differents rooms, which some have a network printer. In AD, I can easily find the printers and setting their sharing ...
1
vote
1answer
69 views

active directory rodc or sub site for New branch office

This may sound silly but I am no ad expert. We have setup a new branch office and 2 users will be moving to that office to man a point of sales system, the internet connectivity is poor so ...
1
vote
2answers
393 views

Wake up a client computer from Windows Server

I have a handful of workstations and a Windows Server 2008 R2 in the same LAN. The workstations show up in the server's Active Directory. Is there a way to wake them up manually from the server when ...
0
votes
1answer
85 views

Domain Controller - Local DNS Settings [duplicate]

What is the best practice for configuring a Domain Controller's adapter DNS settings? We have an MPLS network with 6 DC's located in different locations. HQ - DC1 & DC2 WH - DC3 Branch - DC4 ...
2
votes
1answer
1k views

New 2012 Domain Controller and error “The security database on the server does not have a computer account for this workstation trust relationship”

I have a Windows Server 2012 domain controller on a domain DOM1 running at a Windows Server 2008 R2 domain and functional level. All other domain controllers in DOM1 are 2008 R2. DOM1 has a two-way ...
1
vote
1answer
36 views

Restict Internet Connection Except using Proxy

Given (as-is) A router with DHCP enabled An Active Directory Server Two Windows 7 clients joined the domain Planning (to-be) A proxy server Two clients are set to restrict internet connection ...
1
vote
0answers
186 views

Apache 500 Internal Server Error when authenticating with authz_svn_module with an empty user name field

My Environment Apache 2.2 Windows Server 2008 R2 (I also had the same problem with Windows 7) Tortoise SVN 1.8.7 Subversion 1.8.9 I have this SVN Server using Apache for authentication with ...
1
vote
1answer
103 views

*Lab* restored DC from full backup issues. NETLOGON error 67

I am in a lab environment practicing and learning to recover my primary domain controller in the event that both my DC's are gone and I have a full server backup in place for disaster recovery in ...
0
votes
2answers
92 views

Group Policy - Backup and Restore

I am currently automating the creation of our enterprise domain controller and its configuration in case of SAN failure etc. I can create the server, install the necessary roles, create complete ou ...
0
votes
0answers
56 views

Windows computers refusing to connect to WPA2 Enterprise Network

We have all our computers set up on a WPA2 Enterprise network authenticating with a PEAP Certificate. The certificate is valid until 2017, and the network is functioning correctly on all the Macs we ...
0
votes
0answers
47 views

Active Directory Lightweight Directory Services user-credentials

Does anyone know how the "user-credentials" string is encoded/encrypted that is used for Active Directory Lightweight Directory Services? Thanks. ...
0
votes
1answer
397 views

How to change Samba4 AD realm

I have an Ubuntu 14.04 server that runs Samba4 as Active Directory PDC. The server is called athena and its DNS name is athena.ad.domain.com. The realm is AD.DOMAIN.COM and the NetBIOS name is ...
1
vote
0answers
102 views

Active Directory Mismatch

I have a Active Directory Mistmatch how do I fix this? I have 2 x 2008 R2 Domain Controllers and a 2008 Domain Controller and I was trying to add a 2012 R2 Domain Controller. The Schema Version of ...
3
votes
2answers
480 views

Azure print server - running everything in Azure?

I might have get dragged into a Project involving moving the whole IT shop into Azure. Now that means they have on-site AD, LOB Applications, SQL, Sharepoint etc, plus of course moving to Office 365, ...
0
votes
3answers
103 views

Migrating shared directories from Windows Server 2003 SP2 to Windows Server 2008 R2

I'm setting up a new Active Directory server and need to migrate all the shared directories from the old server. I've found a lot of information about DFS Replication, but that isn't available until ...
0
votes
1answer
184 views

Move application servers from one domain to another

I have built a new domain and created a trust between the new domain and old domain. I have migrated the users and PCs but have yet to move the servers. Does anyone have any suggestions as to the ...
0
votes
2answers
182 views

Local Privileges/Rights Issues after Domain Rename Windows Server 2012 Std R2

After renaming a domain from .com to .local I've noticed that none of my credentials work when I try to make any changes using my domain Administrator account. When I try to install software that ...
0
votes
1answer
83 views

Auto-authenticate to a domain network share

Hoping one of you can help me out with a network share issue I'm having. I have a domain and three servers and NAS on it. The NAS has a network share that is password protected and uses Active ...
0
votes
0answers
149 views

GID/UID Wrong with Samba4 Member server

I have joined a Ubuntu 14,04 server to my 2012 domain using Samba4 but when I check the id of a user I get GID that are out of range. The GID/UID of running a "ID domain_user" come back completely ...
2
votes
2answers
504 views

Apply GPO to user AD group when using computers in a certain OU

We have a logon-script that copies a number of remoteapp.rdp-files to some users desktops. However these users sometimes also has to connect directly to our terminal server through a remote desktop ...
0
votes
0answers
38 views

Are there any standalone Windows debug/query tools that use ADSOpenObject?

I have an application that uses ADsOpenObject to initiate a connection to global catalog servers and validate AD credentials. Lately, connections from this application have been very slow to ...
-2
votes
1answer
773 views

powershell script that outputs date of the day as a file name

I have a script which lists local admins of all hosts in Active Directory below: $Searcher = New-Object DirectoryServices.DirectorySearcher([ADSI]"") $Searcher.Filter = "(objectClass=computer)" ...
3
votes
1answer
168 views

AD Sites and Services - Adding Subnets

We have various physical sites with servers, workstation, printers, switches, and routers. Is there a reason to add subnets that do not contain Windows devices? For example printers or switches? We ...
0
votes
1answer
84 views

Automated third party software for Active Directory administration [closed]

I have a situation where there are multiple Active Directory (AD) groups that each account is added to but each group have different expiration dates. For example, user1 will be in groupA and ...
1
vote
3answers
215 views

AD Sites - Replication Connections

As I understand it, the KCC should automatically create To and From replication connections for your sites unless you disable this feature. Looking through our AD Sites and Services, I can see that ...
0
votes
0answers
57 views

Is my understanding of Microsoft data interaction correct?

I am creating diagram to help our Tier 1 and 2 staff understand the flow of data from ADUC as well as other databases in our company. I'm trying to get a good grasp of how a users data is accessed by ...
0
votes
0answers
1k views

The Destination Server is Currently Rejecting replication Request - Error Event ID1864. Warning ID 2092

hope some one can help me with the subject mentioned error. My current set is that I have physical Win2k8R2 Box and a Virtual server with the same configuration. recently I am having replication ...
1
vote
3answers
343 views

_msdcs Zone Not Updating

I've been working on cleaning up our DNS/DHCP and I'm about ready to turn on scavenging (it's never been enabled) to start cleaning up some old records, but before I do, I wanted to check something. ...
0
votes
2answers
62 views

Starting application on RDS connection

I have the following servers: Server 1 - Windows 2003: The original Domain Controller for AD, DNS Server server 2 - WIndows 2012: The latest server, upgraded to a domain controller too Now when I ...
0
votes
1answer
134 views

Create alias for UNIX username in LDAP for DB2

I want to use LDAP data for the authentication process in DB2. I have already configured DB2 via PAM to retrieve the information of the NIS server that is in the ActiveDirectory. It works perfect ...
0
votes
0answers
524 views

squid authentication error kerberos - windows active directory

I use squid on RHEL6 and I want that authentication is via AD windows 2008, I already joined the server to the windows domain and all users is already seen by wbinfo -u wbinfo -g but wbmin -t show ...
1
vote
0answers
898 views

Authenticate users from Active Directory with UserPrincipalName or Mail with FreeRADIUS

According to this documentation: http://deployingradius.com/documents/configuration/active_directory.html ; FreeRADIUS can authenticate Active Directory users using Samba's ntlm_auth, and in fact it ...
5
votes
1answer
315 views

Does OWA let users change their AD passwords once their passwords are expired?

We have a cloud active directory server which is running Exchange 2013. We have a lot of users with only exchange accounts and most of them will have their passwords expired in a few days, I was ...
0
votes
1answer
2k views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
5
votes
2answers
192 views

Joining a Linux host to Active Directory unattended

I'm trying to setup a block of hosts using kickstart and there's two commands that need the password to be entered. One is kinit, for that one it's easy to just generate a keytab file and pass it ...
1
vote
1answer
434 views

Get a csv/txt list of users using the “net group” command

I'm trying to end up with a txt file of usernames (1 user per line) using the net group /domain <group> command. However, the output of this command is not conducive to parsing. Does anyone ...
2
votes
1answer
469 views

Force active directory replication after joining a server to a domain?

I'm trying to create more 'self-service' virtual machines for the developers to use. On of the requirements is after running a script to bootstrap the machine and join it to the domain, that the ...
4
votes
1answer
65 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
1
vote
2answers
453 views

Avoiding a multi-homed Domain Controller in a dual network environment

I'm trying to take over an old infrastructure and clean it up, but I'm running into some issues deciding on the new architecture. We have a set of around a dozen or two test/production servers in a ...
2
votes
1answer
63 views

howto restrict active directory account for PEAP/non-CIFS only

We have some voip phones that we want to integrate into our PEAP WiFi network, and I'm concerned about just creating a standard AD account and using that. If someone got hold of such long-term account ...
1
vote
1answer
455 views

Why don't Active Directory user accounts automatically support Kerberos AES authentication?

I'm playing around with a test domain on Windows Server 2012 R2. I'm operating at the highest possible functional level and have no backwards-compatibility issues in my small test environment. ...
1
vote
1answer
496 views

Use Roaming Profiles as Default in AD (running Samba)

I've just set up an Active Directory Domain Controller (running Samba 4), created users, shares, groups, etc and everything is working. However, I have an environment where the use of roaming ...
3
votes
1answer
185 views

FRSDIAG / NTFRSUTL looking for servers which don't exist

I am using the FRSDIAG room(from tech-net) to do diagnosis on FRS replication. The issue is its tying to check the DC's which no ,longer exist . Error being "missing server reference for the server ...
1
vote
1answer
403 views

How can I delegate “Attributes 1-15” in Exchange / AD?

The following attributes are present on an Exchange user, and this is what my colleague sees: (notice the locks) How can I properly delegate Read access (or Read write if it must be) to these ...