A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
7 views

What actually happens when a computer is deleted from Active Directory?

If I open AD and then delete a computer, what will happen to that computer? Will it physically get removed from the domain? What would happen if I tried to log into the computer after it had been ...
0
votes
2answers
2k views

How do I restore Windows 2008R2 AD Snapshots on a new server?

We've been using Win2008R2's AD Snapshot feature to perform a nightly backup of our AD domain. I'm trying to figure out the steps that I need to run through to use one of these nightly backups to ...
0
votes
0answers
13 views

Samba 4 not working correcty as dns for internal (LAN) addresses

[Edit] We tried to use samba_internal dns and also bind9_dlz on the server where samba is installed, but both cause problems when trying to access internal addresses even by IP. So we use our DNS, ...
0
votes
0answers
4 views

Exchange 2013 Schema Prep Error

I am installing Exchange 2013 CU9 into a site with an existing Exchange 2013 Cu3 installation. During the ADPREP phase of installation I am getting the following error. PS ...
3
votes
2answers
969 views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
0
votes
1answer
23 views

Remote Desktop will not connect using hostname, DNS issue related to WLAN/LAN switching

We have a set of wireless devices in our directory. While these are connected wirelessly, I can connect Remote Desktop with no problems. The issue is when it's connected directly, the hostname seems ...
0
votes
1answer
25 views

I see my clients in AD but not in WSUS

I set up a WSUS but dont see any clients in the Unassigned Computers group. I can find my clients in the ADAC, when I select myWSUS (local) > computers. My group policy management got a domain ...
0
votes
1answer
17 views

Do I need a DNS in my domain to let my clients find the WSUS server?

I have my WSUS installed on the same system as my Active Directory management. The weird thing is, that when i put a client in the same domain, i find it in my AD but not on my wsus. The client ...
0
votes
0answers
12 views

How to restrict asdm access based on Active Directory group membership?

I have a Cisco ASA 5505. I have enabled AAA authentication for ASDM to authenticate with my Active Directory server. How can I restrict logging into ASDM to certain users that belong to a specific ...
12
votes
4answers
869 views

How can we remotely administer our “fleet” of Windows 7 laptops?

I'm working with a startup that's teaching kids to program. We've just obtained our first "fleet" of laptops - half a dozen refurbished thinkpads running Windows 7 - and I'm looking for the best way ...
0
votes
0answers
13 views

How to give permissions to user (not admin) to access task manager WS 2012 R2?

I have a terminal server with ws 2012 R2. In it I have installed domain server and remote desktop services. I have administrator account, and other account without administrator rights called ...
0
votes
0answers
15 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
1
vote
1answer
15 views

unable to join server to existing domain in azure within virtual network

I have created a Virtual Network on Azure and have created two VM's within the Virtual network, with IP's 10.0.0.4 and 10.0.0.5. I have added Active Directory role to a one of the VM's and promoted it ...
1
vote
1answer
1k views

Nagios NRPE plugin check_ad - Fixed

i've reading about this problem much and trying to solve it on my own ways but still not luck. I've running debian 7 as nagios server. Problem is that i cant check state of my Active Directory Domain ...
0
votes
1answer
25 views

Populate “Lab” Domain via LDAP

I have a lab environment where I need to own Active Directory Services/DNS/DHCP/etc at work. I have a pseudo "production" environment in this lab that has everything from vCenters to Jenkins to VDI ...
7
votes
2answers
1k views

Can a password change in Active Directory be reverted?

I often need to log in with a user's domain account to make sure that I've set up their profile correctly, but there's no easy way to do this other than to call them and give them a temp pass and ...
0
votes
0answers
24 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
2
votes
1answer
3k views

How to connect AD Explorer from Sysinternals to Global Catalog

I'm using the sysinternals AD Explorer quite frequently to search and inspect an Active Directory without any big problems. But now i'd like to connect not only to a single AD Server. Instead i like ...
1
vote
1answer
15 views

caching AD credentials on 2012 r2 File Server

I am setting up a fileserver at a remote branch office that has very very limited bandwidth Is there a way to store the 10 or so users authentication credentials locally on the File Server so that ...
-3
votes
2answers
20 views

Domain & Active Directory Migration [on hold]

We just acquired a very small company, what is the best and easiest way to integrate a small domain to our own domain?
0
votes
1answer
19 views

Broken Exchange in AD Environment

One of our testing exchange servers hadn't been used for awhile and when a tech was trying to get it working again (hub transport wouldn't start, SID errors in event log, etc.) he got frustrated and ...
1
vote
2answers
30 views

Windows Server 2003 Directory Services Restore Mode Lock-Out

I've got a Windows Server 2003 R2 Standard machine. Against my advice, the company making use of this server made it do everything. Zero redundancy outside of some flat file backups. After months ...
0
votes
0answers
15 views

How do I set up a Windows image (not part of the domain) to sync time with the domain controller?

I'm creating a Windows image to distribute to computers, and I want to set it up so that it will sync time to the domain. The problem is that the image is not joined to the domain, so w32tm /config ...
-1
votes
0answers
22 views

Boss-friendly OpenVPN server with Active Directory? [on hold]

Has anyone found a license-free OpenVPN server with AD integration that "Just works"? We need a VPN for our admin team, but don't want to spend days learning and setting up RADIUS by hand. I've seen ...
0
votes
1answer
1k views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
0
votes
0answers
22 views

Adding a Domain Suffix - safe or bandage solution?

Coming into a new organization with an AD environment that was more or less experimental. We're ready to go all in, but I don't like that the domain was setup with a ".local" suffix, due to the ...
4
votes
2answers
23 views

Is there a difference in bandwidth consumption between a RODC and RWDC?

My organization has deployed 2008 RODCs on multiple seagoing platforms. The idea was to extend our shore-based domain onto our ships to better control security policies. RODCs were selected with the ...
-1
votes
1answer
28 views

Unable to log in into a (Win 2012) server using domain account

Our domain server is Windows Server 2008 (lets say domain ABC) and there is another server successfully added to domain (say ABC.EFG.local) But we are not able to log into the (win 2012) server using ...
4
votes
1answer
2k views

A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly. However, we have one ...
-2
votes
1answer
36 views

IIS on Domain Server, Cannot Access To Website from Remote [closed]

I recently rent a virtual server over some country, and activate it's ISS service and Active Directory.... What now bother me, though i had no idea what i'm doing (though most of it went right) is ...
0
votes
2answers
88 views

Bulk Update AD Attribues with Employee ID as matched key

I have a CSV file that I need to bulk update AD with. The file has an employeeID, which would match the employeeID field in AD. So far, I've been able to update a user successfully with a CSV file if ...
3
votes
0answers
32 views

Best practice for defining user “HOMEDRIVE” “HOMEPATH” “HOMESHARE”

Is it considered a best practice to map domain users' "HOME" environment variables to a network path? If so, why? By "HOME" variables, I am referring to: %HOMEDRIVE% %HOMEPATH% %HOMESHARE% This ...
2
votes
1answer
43 views

What is ADFS (Active Directory Federation Services)?

So I've been told that our PHP application may need to support authentication using ADFS. For a non-Microsoft person, what is ADFS? How does it differ to things like LDAP? How does it work? What ...
0
votes
1answer
2k views

Windows server 2003 MMC has detected an error in snap. It is recommended that you shutdown and restart MMC

I have Windows Server 2003 STD x64 SP2 and I have been installed AD on it. When I try to add computer there is an error message saying: MMC has detected an error in a snap. it is recommended that ...
-4
votes
2answers
53 views

Create a domain on server to have all users on it + shared SQL Server 2012

I'm new to Active Directory Domain Services and to Windows Servers in general. I created a domain on Windows Server 2008 R2 using AD DS and I joined all company's PCs to this domain. Now what I want ...
0
votes
1answer
1k views

Configure FreeRADIUS with Active Driectory allow specific group of users to authenticate

In order to authenticate WiFi clients I use a FreeRADIUS server configured to check for user credentials in an Active Directory environment. Currently all users with a valid account are authenticated ...
2
votes
1answer
1k views

How exactly does the home folder mapping in 2003 AD work?

I'm trying to troubleshoot an issue with a user's My Documents not being mapped to a network location as it should be. Most of the user have their AD account set to have H as their home folder and ...
0
votes
1answer
38 views

Is running a TS (RDP) on a DC a very bad idea?

For a project we only have one Windows Server available. We need to run both a TS (Terminal Server) with RDP and ADDS on this server. I have asked this question and got the answer that if we don't ...
2
votes
2answers
6k views

an active directory domain controller could not be contacted

After creating an active directory domain controller i tried to add client computers to the domain i kept hitting a snag. The following error occurred when DNS was queried for the service location ...
2
votes
2answers
979 views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
4
votes
1answer
1k views

Reading files on network share from a Windows service (app over tomcat as service)

I have a webapp over tomcat6, which is installed as a service in a WinServer (2008 or 2003r2, don't know for sure, people haven't let me put a hand over it so far). The Tomcat service runs with a ...
2
votes
1answer
126 views

Restrict IMAP access for a given account to only one IP address in Exchange 2013

I've created a "spam crawler" account with full access to all mailboxes in an Exchange 2013 environment to get messages in the junk folder to feed the Bayesian filtering running on SpamAssassin in a ...
3
votes
1answer
22 views

Use “Client Site Name” in Group Policy Preferences

In Active Directory, you can map IP addresses to Client Sites. ...and then you can map Group Policy objects to sites. Which is great and all, but I have a client that is growing rapidly, and ...
1
vote
2answers
1k views

Roaming Profile Permissions and Migration

Currently a client as 2003 DC and we are migrating them to a 2008R2 on a 2012 Hyper-V Host. They have a handful of roaming profiles - but with the usual setup - i.e. the only permissions on the actual ...
2
votes
1answer
53 views

Domain A record on active directory controller

Currently we have an Active Directory setup for a small network running on Debian 8 and Samba 4. At one point we had to change the ip address of the AD server from 100.0.0.4 to 100.0.0.100. I edited: ...
1
vote
1answer
39 views

Lock screen doesn't remember username

On Windows Server 2008 R2, when I lock the machine, when I return, the Logon Screen screen doesn't remember my username: I definitely still have a session, because when I log back in, it remembers ...
-1
votes
1answer
43 views

Is installing Windows Server 2012 R2 using .com versus .local going to cause future problems? [duplicate]

I know using example.com would cause a conflict, but what about ad.example.com, corp.example.com or internal.example.com? I have a web .com domain. Will need to remote in and/or VPN etc. I am being ...
0
votes
1answer
30 views

How to recover users from ntds.dit

My primary (and single) DC died by mistake (not booting) however all the files are intact. What are my options to restore users on new DC on other server? died DC: Windows server 2008 R2
1
vote
1answer
49 views

Outlook won't open on new domain-joined computer. Exchange 2013 mailbox propably damaged

There's another interesting issue regarding Microsoft Outlook (Office 365 / 2013), Exchange 2013 SP1 and Active Directory. On a freshly installed Windows 7 x64 Professional computer I installed ...
2
votes
1answer
3k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...