Questions tagged [active-directory]
A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.
10,217
questions
1
vote
2
answers
1k
views
Windows Server 2012 using wrong IP address for replication
Is there a way to manually set what IP address/DNS record AD will use when replicating?
I have a "network within a network" (NWaN) setup which spans across two remote locations-- so there's one NWaN ...
1
vote
2
answers
359
views
What happens with the shared permisions on file server after reinstalling system partition
I was wondering what would happen if i need to reinstall Windows 2008 R2 which is set as file server joined to second computer which is set as domain controller.
The file server have second drive d: ...
1
vote
1
answer
185
views
Create open directory replica of active directory server
I have an active directory server running on windows server 2012, and a mac osx 10.6 server capable fo running open directory. Currently, my mac server is connected to my AD server, however I would ...
2
votes
3
answers
9k
views
Samba 4 OpenLDAP authentication issue
What I've done so far
Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway)
built Samba4 from source with bind9_dlz as dns backend
installed OpenLDAP ...
2
votes
3
answers
22k
views
Can't add domain users to local groups on a server
I'm trying to add a user to a local group on one of my servers. I keep getting the following error once I've selected the user I want to add:
Windows cannot process the object with the name 'Domain ...
2
votes
1
answer
4k
views
Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service
We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
2
votes
0
answers
1k
views
Samba doesn't seem to stay joined to Active Directory domain [closed]
I can initially join a linux box to the domain with these commands:
sudo kinit [email protected]
sudo net ads join -k
After a few hours or the next day, this happens:
...
2
votes
0
answers
205
views
Kerberos - KDC and IIS on same machine
I have one domain controller which must act as Kerberos KDC and a IIS server running on that same domain controller. I need to set up an Integrated Windows Authentication where a domain user can ...
1
vote
1
answer
9k
views
Possible DNS Server memory leak
I have a Windows Server 2012 R2 physical server running AD DS, DNS roles.
Very frequently DNS Server process starts consuming a lot of memory.
In Task Manager > Details > Analyze wait chain - I ...
0
votes
2
answers
2k
views
windows server 2012 r2 AD: default unchecked "User Must Change Password at Next Logon" when manually reset password
When I manually change an user's password, I get the checkbox "User Must Change Password at Next Logon" (here in italian "Cambiamento obbligatorio password all'accesso successivo") checked by default.
...
1
vote
1
answer
2k
views
How to set a specific Domain controller for a user or client machine to logon-authenticate with?
How to set a specific Domain controller for a user or client machine to logon-authenticate with using the GPO (Group Policy Object) or Registry. I am looking to setup a Specific Domain Controller for ...
1
vote
0
answers
580
views
NETAPP - Enable on-box DNS load balancing in an Active Directory environment
I have a NetApp Data Ontap 8.3 SP1 with 4 LIF.
LIF1 - 192.168.0.1
LIF2 - 192.168.0.2
LIF3 - 192.168.0.3
LIF3 - 192.168.0.4
There is a SVM, configured as NAPP0 and joined to an Active Directory domain(...
0
votes
1
answer
8k
views
List all servers a user is connected to using remote desktop
Is there a way to list all servers, that a given user is logged into in the entire active directory?
Something like...:
QueryRdpConnections -user BobAdmin
Result...:
Server
---------------...
2
votes
1
answer
13k
views
Permission to enable\disable devices in device manager without admin rights?
Short question: Can you use group policy to allow users to disable\enable devices without giving them full administrative rights to a machine?
More detailed: We have machines that crash on logoff\...
1
vote
1
answer
567
views
How to make ad login faster?
I work at a medium sized organisation with high staff turnover and internal movement(1) and I've noticed a consistent problem for our new users that each time they visit a new PC - and they are ...
0
votes
3
answers
2k
views
AD Domain not available in assign permissions dialog locations
I just joined one of our windows 2003 servers to our AD domain. It has been operating as a standalone server for a while. After joining the domain, when I go to assign permission to anything the only "...
3
votes
2
answers
998
views
How do I search AD Configuration partition for a given string?
I'm having an issue with installing/uninstalling an Exchange server. I suspect the server wasn't properly removed from AD and as a result I'm getting an error. (I've already wiped the machine, the ...
-2
votes
1
answer
591
views
AD Reset Multiple Passwords Simultaneously from LDAP Query [closed]
I have used a custom query in Active Directory to identify all users that have never logged in to the the domain. I need to reset all of their passwords and as there are several hundred I would prefer ...
0
votes
2
answers
729
views
Using Domain Controller from Azure VM
I have setup a couple or Windows 2012 instances on Azure VM. I am trying to configure DFS-R, which requires the instances to be members of a domain.
I signed up for Azure Active Directory, which ...
1
vote
2
answers
84
views
GPO Security Filtering Using Groups
A GPO was setup with filtering applied to a single group containing computer objects. Is a restart mandatory for all the computer objects listed in the "New Group" for GPO to be applied on them? or is ...
2
votes
1
answer
164
views
Lost primary DC, and second one was never promted
I lost my primary DC, and as it turns out, the second one was never really promoted. I wanted to know what is the best possible way (if any) to recover usernames and servers after building a new DC. ...
6
votes
2
answers
5k
views
Active Directory Permissions: Delete vs Move
I want our help desk to be able to move user accounts but NOT delete them. Here is the summary of our current permissions set on the affected OU's (this DOES allow them to delete user accounts):
...
-3
votes
1
answer
111
views
Showing two users with same account name in same domain and same computer [closed]
I am new to active-directory.
my server domain name is 'VIANOVA', and there is a user 'edith'. I think I have made some changes in 'last name' of user account properties in Active-directory, now i am ...
2
votes
1
answer
81
views
Replicate to a test network, AD loses trust and network location
We have a separate VMware ESX 5.5 server that we use as a test environment, where we replicate production machines. It runs replicated VMs on a vSwitch that is physically separated from the production ...
0
votes
2
answers
2k
views
Run a Logon Script for User Group for Domain Server
I've been searching for an hour and have not had any success so if I overlooked this as a previously answered question please let me know.
I am trying to have a logon script that maps drives on all ...
1
vote
0
answers
119
views
I have converted an Active directory network account to a mobile one on my Mac and now I can't login at all
I have converted an Active directory network account to a mobile one and now I can't login at all
it is an imac with El Capitan 10.11.1. We connected it to the network and bound it to our Active ...
3
votes
0
answers
570
views
I need help trying to authenticate with AD from my linux machine
I am not experienced in this, so there might be some points that I am missing. Initially I tried to setup Cyrus Mail w/ SASL for AD authentication. After several tries, it failed to work.
I switched ...
0
votes
1
answer
959
views
Windows AD single DC (degraded) - cannot modify Administrator limit exceeded
I had 2 DC's in my domain.
one of them died, and the last one has all roles, dcdiag netdiag show all checked as "good" - but i actually can't modify my "Administrator" account.
according to alot, ...
0
votes
1
answer
58
views
Debug Logging daily task
I manage a domain with 4 domain controllers and i have been asked to enable Debug Logging for Incoming and Request packets. I have set the maximum size of the log file to 500MB.
First question I have,...
1
vote
0
answers
46
views
SAMBA shared folder creation for the users on Integrated Active Directory setup
I have a centos SAMBA server integrated with AD. All the users from AD will have a home folder in the SAMBA Server. The home folder is created whenever the user try to access the SAMBA Server. Now I ...
2
votes
1
answer
84
views
Authenticate domain user to a domain computer when the computer is not connected to the network?
Our organization sends people to remote locations for periods of 45-90 days. The users at these locations need to use client software on a domain computer in order to do there job. Recently we had an ...
1
vote
1
answer
937
views
Are there Windows services which only run on IPv6?
This network has about 30 Windows-10 computers and all DNS, DHCP, Active Directory, etc. services are provided by Windows 2012 R2.
Are there any native services; be it critical, optional, useless, or ...
2
votes
1
answer
882
views
What is the "parent" global group?
I've been reading about Group Scope for Groups within Microsoft's Active Directory from https://technet.microsoft.com/en-au/library/cc755692(v=ws.10).aspx. However, I find the following in relation to ...
-1
votes
1
answer
1k
views
both test lab Domain controllers need initial synchronisation
Im trying to setup a test lab for our 2008R2 AD environment but am having trouble getting the domain controllers to start.
If I just start the PDC with all FSMO roles (DC01) it gives an error saying ...
0
votes
2
answers
2k
views
Multi-Domain Root Administrator
We have a new domain structure we are planning on rolling out in the next few months.
Essentially there is a single top level and forest domain controller "mydomain.lan" and two children "us.mydomain....
1
vote
1
answer
2k
views
Distribution Group used for NTFS permissions?
I know that this is technically not possible except for mail-enabled security groups, so I'm a little confused. We had users complain about losing access to a share. Looking at the ACL, I saw the ...
0
votes
1
answer
689
views
saslauthd authentication fails for AD
I cannot get saslauthd to work with Active Directory. Here is /etc/saslauthd.conf:
ldap_use_sasl: yes
ldap_servers: ldap://ad.example.com
ldap_search_base: OU=Users,DC=example,DC=com
ldap_bind_dn: CN=...
2
votes
2
answers
8k
views
Curious about some failures with DCDIAG
I ran a c:\dcidag /v /c /e test (/v = verbose, /c = comprehensive, /e = every DC) on all of my (currently) 5 Domain Controllers, and received this summary of results at the end:
...
0
votes
1
answer
1k
views
using icacls to set traverse/execute without setting change permissions
I'm having trouble with network shares. Specifically with mac clients accessing home shares on a NAS. The fix has been to remove certain permissions on the Library folder.
in the past, i've used set-...
0
votes
2
answers
131
views
Secondary AD DC With Fail over
Situation:
I have a AD DC authenticating all the users now and serve as the DNS as well.
Problem:
After reading through this, I am wondering how do I set up another AD DC and configure the site and ...
6
votes
1
answer
12k
views
Password replication across AD sites
We are going to be adding a few new Domain Controllers into our school environment to have authentication closer to the end user. I've read about creating the site links and setting the replication ...
2
votes
1
answer
199
views
Merging Novell and Active Directory Users
After having two separate companies merge into one, we were left with two existing environments, a Novell environment, and an Active Directory environment. Prior administration decided not to merge ...
0
votes
1
answer
1k
views
Server 2012 R2 Installed AD DC and Lost Internet Access
I am a developer and new to set up and server config... so please forgive my full lack of understanding. I am using a 1&1 Cloud Server with Server 2012 R2 Standard and am trying to set it as an AD ...
1
vote
2
answers
948
views
Windows Hyper-V Server 2012 R2 - domain name
I am starting a new environment from scratch running two servers with Windows Hyper-V Server 2012 R2 installed. From there each server will run 2 instances of Windows Server 2012 R2 standard (DNS, AD, ...
3
votes
1
answer
14k
views
SPN settings in a ADFS 3.0 lab setup
I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab.
I have found 2 guides:
doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx
...
0
votes
1
answer
39
views
What's the advantage of installing applications using domain accounts ?
I'm trying to figure out the advantage of installing an application using a Windows 2008 AD account (or disadvantage) over using a local OS account.
Except of security considerations, why would you ...
1
vote
2
answers
3k
views
Necessary to delete computer account from AD before rejoining to the domain?
What is actually stored within the computer account in AD? There always seems to be issues that crop up once and awhile where leaving and rejoining the domain seems to fix them. Up to this point i'...
2
votes
1
answer
5k
views
Does AD one-way trust demand admin priviliges on both domains?
Does AD one-way trust demand admin priviliges on both domains?
Say I'm domain admin for domain A, and I want to give user from domain B access to stuff on domain A, which they can reach by VPN. From ...
0
votes
0
answers
201
views
How can I bulk import AD users with multi-line street addresses?
I'm trying to bulk import user street addresses via CSV but when doing so the street address ends up all on a single line.
I read here to input a "rn" between lines but this doesn't seem to work as ...
2
votes
1
answer
589
views
Different Bandwith in slow link detection between Computer and User GPO
Given a multiple site Active Directory we occurence problems with slow link detection GPO's. We want to use slow link detection on laptops which connect are via coorperate WAN (MPLS 4-Mbit/s) to main ...