Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
1 vote
2 answers
1k views

Windows Server 2012 using wrong IP address for replication

Is there a way to manually set what IP address/DNS record AD will use when replicating? I have a "network within a network" (NWaN) setup which spans across two remote locations-- so there's one NWaN ...
1 vote
2 answers
359 views

What happens with the shared permisions on file server after reinstalling system partition

I was wondering what would happen if i need to reinstall Windows 2008 R2 which is set as file server joined to second computer which is set as domain controller. The file server have second drive d: ...
1 vote
1 answer
185 views

Create open directory replica of active directory server

I have an active directory server running on windows server 2012, and a mac osx 10.6 server capable fo running open directory. Currently, my mac server is connected to my AD server, however I would ...
2 votes
3 answers
9k views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
2 votes
3 answers
22k views

Can't add domain users to local groups on a server

I'm trying to add a user to a local group on one of my servers. I keep getting the following error once I've selected the user I want to add: Windows cannot process the object with the name 'Domain ...
2 votes
1 answer
4k views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
2 votes
0 answers
1k views

Samba doesn't seem to stay joined to Active Directory domain [closed]

I can initially join a linux box to the domain with these commands: sudo kinit [email protected] sudo net ads join -k After a few hours or the next day, this happens: ...
2 votes
0 answers
205 views

Kerberos - KDC and IIS on same machine

I have one domain controller which must act as Kerberos KDC and a IIS server running on that same domain controller. I need to set up an Integrated Windows Authentication where a domain user can ...
1 vote
1 answer
9k views

Possible DNS Server memory leak

I have a Windows Server 2012 R2 physical server running AD DS, DNS roles. Very frequently DNS Server process starts consuming a lot of memory. In Task Manager > Details > Analyze wait chain - I ...
0 votes
2 answers
2k views

windows server 2012 r2 AD: default unchecked "User Must Change Password at Next Logon" when manually reset password

When I manually change an user's password, I get the checkbox "User Must Change Password at Next Logon" (here in italian "Cambiamento obbligatorio password all'accesso successivo") checked by default. ...
1 vote
1 answer
2k views

How to set a specific Domain controller for a user or client machine to logon-authenticate with?

How to set a specific Domain controller for a user or client machine to logon-authenticate with using the GPO (Group Policy Object) or Registry. I am looking to setup a Specific Domain Controller for ...
1 vote
0 answers
580 views

NETAPP - Enable on-box DNS load balancing in an Active Directory environment

I have a NetApp Data Ontap 8.3 SP1 with 4 LIF. LIF1 - 192.168.0.1 LIF2 - 192.168.0.2 LIF3 - 192.168.0.3 LIF3 - 192.168.0.4 There is a SVM, configured as NAPP0 and joined to an Active Directory domain(...
0 votes
1 answer
8k views

List all servers a user is connected to using remote desktop

Is there a way to list all servers, that a given user is logged into in the entire active directory? Something like...: QueryRdpConnections -user BobAdmin Result...: Server ---------------...
2 votes
1 answer
13k views

Permission to enable\disable devices in device manager without admin rights?

Short question: Can you use group policy to allow users to disable\enable devices without giving them full administrative rights to a machine? More detailed: We have machines that crash on logoff\...
1 vote
1 answer
567 views

How to make ad login faster?

I work at a medium sized organisation with high staff turnover and internal movement(1) and I've noticed a consistent problem for our new users that each time they visit a new PC - and they are ...
0 votes
3 answers
2k views

AD Domain not available in assign permissions dialog locations

I just joined one of our windows 2003 servers to our AD domain. It has been operating as a standalone server for a while. After joining the domain, when I go to assign permission to anything the only "...
3 votes
2 answers
998 views

How do I search AD Configuration partition for a given string?

I'm having an issue with installing/uninstalling an Exchange server. I suspect the server wasn't properly removed from AD and as a result I'm getting an error. (I've already wiped the machine, the ...
-2 votes
1 answer
591 views

AD Reset Multiple Passwords Simultaneously from LDAP Query [closed]

I have used a custom query in Active Directory to identify all users that have never logged in to the the domain. I need to reset all of their passwords and as there are several hundred I would prefer ...
0 votes
2 answers
729 views

Using Domain Controller from Azure VM

I have setup a couple or Windows 2012 instances on Azure VM. I am trying to configure DFS-R, which requires the instances to be members of a domain. I signed up for Azure Active Directory, which ...
1 vote
2 answers
84 views

GPO Security Filtering Using Groups

A GPO was setup with filtering applied to a single group containing computer objects. Is a restart mandatory for all the computer objects listed in the "New Group" for GPO to be applied on them? or is ...
2 votes
1 answer
164 views

Lost primary DC, and second one was never promted

I lost my primary DC, and as it turns out, the second one was never really promoted. I wanted to know what is the best possible way (if any) to recover usernames and servers after building a new DC. ...
6 votes
2 answers
5k views

Active Directory Permissions: Delete vs Move

I want our help desk to be able to move user accounts but NOT delete them. Here is the summary of our current permissions set on the affected OU's (this DOES allow them to delete user accounts): ...
-3 votes
1 answer
111 views

Showing two users with same account name in same domain and same computer [closed]

I am new to active-directory. my server domain name is 'VIANOVA', and there is a user 'edith'. I think I have made some changes in 'last name' of user account properties in Active-directory, now i am ...
2 votes
1 answer
81 views

Replicate to a test network, AD loses trust and network location

We have a separate VMware ESX 5.5 server that we use as a test environment, where we replicate production machines. It runs replicated VMs on a vSwitch that is physically separated from the production ...
0 votes
2 answers
2k views

Run a Logon Script for User Group for Domain Server

I've been searching for an hour and have not had any success so if I overlooked this as a previously answered question please let me know. I am trying to have a logon script that maps drives on all ...
1 vote
0 answers
119 views

I have converted an Active directory network account to a mobile one on my Mac and now I can't login at all

I have converted an Active directory network account to a mobile one and now I can't login at all it is an imac with El Capitan 10.11.1. We connected it to the network and bound it to our Active ...
3 votes
0 answers
570 views

I need help trying to authenticate with AD from my linux machine

I am not experienced in this, so there might be some points that I am missing. Initially I tried to setup Cyrus Mail w/ SASL for AD authentication. After several tries, it failed to work. I switched ...
0 votes
1 answer
959 views

Windows AD single DC (degraded) - cannot modify Administrator limit exceeded

I had 2 DC's in my domain. one of them died, and the last one has all roles, dcdiag netdiag show all checked as "good" - but i actually can't modify my "Administrator" account. according to alot, ...
0 votes
1 answer
58 views

Debug Logging daily task

I manage a domain with 4 domain controllers and i have been asked to enable Debug Logging for Incoming and Request packets. I have set the maximum size of the log file to 500MB. First question I have,...
1 vote
0 answers
46 views

SAMBA shared folder creation for the users on Integrated Active Directory setup

I have a centos SAMBA server integrated with AD. All the users from AD will have a home folder in the SAMBA Server. The home folder is created whenever the user try to access the SAMBA Server. Now I ...
2 votes
1 answer
84 views

Authenticate domain user to a domain computer when the computer is not connected to the network?

Our organization sends people to remote locations for periods of 45-90 days. The users at these locations need to use client software on a domain computer in order to do there job. Recently we had an ...
1 vote
1 answer
937 views

Are there Windows services which only run on IPv6?

This network has about 30 Windows-10 computers and all DNS, DHCP, Active Directory, etc. services are provided by Windows 2012 R2. Are there any native services; be it critical, optional, useless, or ...
2 votes
1 answer
882 views

What is the "parent" global group?

I've been reading about Group Scope for Groups within Microsoft's Active Directory from https://technet.microsoft.com/en-au/library/cc755692(v=ws.10).aspx. However, I find the following in relation to ...
-1 votes
1 answer
1k views

both test lab Domain controllers need initial synchronisation

Im trying to setup a test lab for our 2008R2 AD environment but am having trouble getting the domain controllers to start. If I just start the PDC with all FSMO roles (DC01) it gives an error saying ...
0 votes
2 answers
2k views

Multi-Domain Root Administrator

We have a new domain structure we are planning on rolling out in the next few months. Essentially there is a single top level and forest domain controller "mydomain.lan" and two children "us.mydomain....
1 vote
1 answer
2k views

Distribution Group used for NTFS permissions?

I know that this is technically not possible except for mail-enabled security groups, so I'm a little confused. We had users complain about losing access to a share. Looking at the ACL, I saw the ...
0 votes
1 answer
689 views

saslauthd authentication fails for AD

I cannot get saslauthd to work with Active Directory. Here is /etc/saslauthd.conf: ldap_use_sasl: yes ldap_servers: ldap://ad.example.com ldap_search_base: OU=Users,DC=example,DC=com ldap_bind_dn: CN=...
2 votes
2 answers
8k views

Curious about some failures with DCDIAG

I ran a c:\dcidag /v /c /e test (/v = verbose, /c = comprehensive, /e = every DC) on all of my (currently) 5 Domain Controllers, and received this summary of results at the end: ...
0 votes
1 answer
1k views

using icacls to set traverse/execute without setting change permissions

I'm having trouble with network shares. Specifically with mac clients accessing home shares on a NAS. The fix has been to remove certain permissions on the Library folder. in the past, i've used set-...
0 votes
2 answers
131 views

Secondary AD DC With Fail over

Situation: I have a AD DC authenticating all the users now and serve as the DNS as well. Problem: After reading through this, I am wondering how do I set up another AD DC and configure the site and ...
6 votes
1 answer
12k views

Password replication across AD sites

We are going to be adding a few new Domain Controllers into our school environment to have authentication closer to the end user. I've read about creating the site links and setting the replication ...
2 votes
1 answer
199 views

Merging Novell and Active Directory Users

After having two separate companies merge into one, we were left with two existing environments, a Novell environment, and an Active Directory environment. Prior administration decided not to merge ...
0 votes
1 answer
1k views

Server 2012 R2 Installed AD DC and Lost Internet Access

I am a developer and new to set up and server config... so please forgive my full lack of understanding. I am using a 1&1 Cloud Server with Server 2012 R2 Standard and am trying to set it as an AD ...
1 vote
2 answers
948 views

Windows Hyper-V Server 2012 R2 - domain name

I am starting a new environment from scratch running two servers with Windows Hyper-V Server 2012 R2 installed. From there each server will run 2 instances of Windows Server 2012 R2 standard (DNS, AD, ...
3 votes
1 answer
14k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
0 votes
1 answer
39 views

What's the advantage of installing applications using domain accounts ?

I'm trying to figure out the advantage of installing an application using a Windows 2008 AD account (or disadvantage) over using a local OS account. Except of security considerations, why would you ...
1 vote
2 answers
3k views

Necessary to delete computer account from AD before rejoining to the domain?

What is actually stored within the computer account in AD? There always seems to be issues that crop up once and awhile where leaving and rejoining the domain seems to fix them. Up to this point i'...
2 votes
1 answer
5k views

Does AD one-way trust demand admin priviliges on both domains?

Does AD one-way trust demand admin priviliges on both domains? Say I'm domain admin for domain A, and I want to give user from domain B access to stuff on domain A, which they can reach by VPN. From ...
0 votes
0 answers
201 views

How can I bulk import AD users with multi-line street addresses?

I'm trying to bulk import user street addresses via CSV but when doing so the street address ends up all on a single line. I read here to input a "rn" between lines but this doesn't seem to work as ...
2 votes
1 answer
589 views

Different Bandwith in slow link detection between Computer and User GPO

Given a multiple site Active Directory we occurence problems with slow link detection GPO's. We want to use slow link detection on laptops which connect are via coorperate WAN (MPLS 4-Mbit/s) to main ...

1
96 97
98
99 100
205