A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
2 views

'realm join --client-software sssd' on centos-7 joins two realms (one with sssd and one with winbind)

On clean installed centos-7 host: realm join -U foo --client-software sssd AD.EXAMPLE.COM After running realm list output looks initially like this: AD.EXAMPLE.COM type: kerberos realm-name: ...
0
votes
1answer
9 views

Samba Domain Management

I've recently setup a 2 Samba Domains using version 4.11 and trying to find a way to to manage the environment without using the shell. I know we could use some of the mmc tools from Microsoft, but ...
0
votes
2answers
27 views

ldap query with nested group

I try to build a ldap query to MS Active Directory. I found that there is a LDAP_MATCHING_RULE_IN_CHAIN type to do so. Which results in the follow syntax: ...
0
votes
0answers
14 views

Solution to Implement/Realize Two(Multi)-Factor Authentication within Microsoft Windows Server 2012 R2 Domains

I'm currently looking for a way to implement a secure Two(Multi)-Factor Authentication within a Windows Domain Network (all Servers/Clients are at least Windows Server 2012R2/Windows 8.1) utilizing a ...
1
vote
3answers
19 views

nslookup shows wrong data

I am currently an administrator and have about 150 windows systems running. The previous administrator turned out be be a real nightmare for me before he left. The network assignes some windows ...
0
votes
0answers
6 views

Error deleting Azure Directory - associated with existing Trial Subscription which is owned by a deleted account

Steps taken so far: Created a new Azure Organizational account called: name@company.onmicrosoft.com Started a Free Azure Trial, with credit card details. This created a single Directory with the new ...
0
votes
1answer
1k views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
2
votes
1answer
1k views

How to check WSUS server updates downloaded size?

How can I check the updates size which were downloaded in WSUS? For example I need to check the updates size downloaded of April 9, 2013 for new 26 updates. And how can I locale the new updates on ...
-3
votes
0answers
13 views

active directory dropdown attribute

I would like to add a dropdown attribute to my active directory to use it on apps, i searched the web and i find that it is posible but always using third party software. Is there a way to add ...
2
votes
1answer
1k views

Windows 2008 R2 Server: Network zones (Public / Private / Domain) Seem to change randomly

So far on 2 occasions we have noticed that the network zones assigned to our server nics has been changed without any interaction on our part. This is out of a few hundred servers we manage. Case 1) ...
0
votes
3answers
2k views

RPC Server Unavailable When Trying to Join W2003 Server to W2003 Active Directory Domain

I have an Active Directory Domain with a Windows 2003 Standard SP2 Server as the DC. When trying to join an additional Windows 2003 Standard SP2 server to the domain I get message "The following error ...
-1
votes
1answer
29 views

Can I replace local Microsoft Active Directory with AWS Directory Service?

We have a very basic AD usage (basically manage user password reset) and for that we have to maintain a old Windows server. All the services our internal users access are on the cloud (GMail, Google ...
0
votes
1answer
1k views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
-2
votes
0answers
28 views

Are the UID of users from a domain maintained locally in a machine?

This could be total nonsense but as I am new and am trying to learn. I came across this question. I have seen many of my office linux machines connected to some domain. I am wondering as if a ...
1
vote
1answer
49 views

File extension .QCOW2 on Windows [on hold]

While I was researching for solution, I saw the file extension could have something to do with vmware, thats why I am asking my question here. I would like to know how, what software should I use, to ...
0
votes
4answers
5k views

Computer That Is Member Of A Domain Can't See Domain Groups

So, I have joined to my workplace local domain. I logged in a couple of times using my domain user but now the computer won't be able to see any users or groups from the domain. Actually in the ...
0
votes
0answers
8 views

How to handle (and test) hybrid multi-forest with Office365

Let's say we have two domains: contoso.com and fabrikam.com. Both have: two UPNs (.local and .com) Then: Contoso.com have Lync servers on-premise. Exchange, Sharepoint 2013 and Azure AD on ...
-1
votes
0answers
17 views

Active Directory Domain Failure (uBuntu - Kerberos)

i try to join active directory and samba4 in uBuntu 12.04.05, but when it come to test come out error if i type host -t SRV _ldap._tcp.4ecap.sg' and comes out error Host _ldap._tcp.4ecap.sg ...
13
votes
3answers
1k views

Do I Need to Configure Active Directory Sites if We Have a High Speed WAN?

I work at an organization with 15 physical sites. The corporate headquarters has two DC's, which hold all the FSMO roles between them. Each remote site has one DC onsite. When I started working here, ...
1
vote
1answer
29 views

What does a new user object in an AD domain have access to by default?

Background: An application requires that user objects be created to contain various users' information. These user objects exist for their data only, and the user objects should not be able to log in, ...
0
votes
0answers
26 views

Active directory creates network issues

I have an OpenStack virtualization environment, where I created 3 VMs using the same Windows Server 2012R2 image. Each machine is syspreped after initial deployment. My goal was setting up a simple AD ...
0
votes
0answers
16 views

Windows 2003 error 2902 “server is the owner of this FSMO role, but does not consider it valid” after DCPROMO run

I am in the process of adding a Windows 2008 R2 DC (MTC2008DC) to an existing legacy Windows 2003 SBS domain, with a view to decommissioning the old server. There is already one 2008 DC in the domain ...
0
votes
2answers
100 views

Recover Server 2012 password I CAN RDP

I have a domain joined machine that I log in to with a LOCAL MACHINE password via remote desktop. I saved the password in RDP, but want to log in from a different machine, but have not used the ...
0
votes
3answers
1k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
1
vote
0answers
25 views

ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances

Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages. We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO ...
1
vote
2answers
30 views

Parse a copy of the SYSVOL

I have a full copy of a client's SYSVOL folder. The only DC on site had failed and been restored, but that got me wondering if there was a tool to look through a copy of the SYSVOL folder for ...
3
votes
1answer
39 views

ADFS Claim to Flatten Groups and Return full DN

Is there way to create a claim that will the return the DN of all groups and super-groups a user is a MemberOf? Currently running Windows 2012 R2 ADFS. Example: I have a structure of groups like ...
4
votes
1answer
2k views

A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly. However, we have one ...
0
votes
2answers
47 views

New Domain Controller to combine two Domains into one: Domain replication or DNS?

Background We currently have two networks, one in London, and one in Brighton. We use Office 365 for email, Lync and Sharepoint, so there is no Exchange server. Both offices are connected by a VPN. ...
0
votes
0answers
20 views

Configuring Separate Forest for DMZ

Our DMZ currently has just two Winddows Server 2008R2 servers in it. One runs Exchange 2010 Edge Transport and the other is an IIS 7 server. Currently, these are just in a workgroup. We plan to ...
0
votes
0answers
79 views
+200

ADSI Linked Server: Why can I query AD in VBA, but not as a Linked Server?

After all the reading and research I've done, this seems like the most logical place to post this question: Why can I query Active Directory using VBA, but not a Linked Server in SQL Management ...
1
vote
1answer
2k views

Active Directory FRS problems. 13508 error and other problems

I have 3 Domain Controllers. We will call them DC1, DC2 and DC3. DC3 and DC2 show Event ID 13508 in their FRS logs with no follow-up event(13509 I think) to say the error had been fixed. DC1's FRS ...
1
vote
1answer
26 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
1
vote
1answer
9 views

Changing default UPN for iPhone/ActiveSync seamless Setup: any downsides?

Setting up a brand-new domain and want to achieve ActiveSync/Autodiscover Nirvana: no certificate warnings, no having to entry in Server Names or Domains, just pure Contoso-like buttery bliss. Have ...
7
votes
3answers
604 views

Reset Windows user domain password

Is there a way to reset a user domain password remotely without login to a remote desktop to the domain controller? I could not find any MMC plugin in non-server Windows (Window 7 Ultimate in this ...
0
votes
1answer
2k views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
2
votes
2answers
833 views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
-1
votes
0answers
31 views

Suggestions for SSH login management across multiple servers [on hold]

We are looking for a way to manage SSH logins to multiple server systems by multiple users within our organization. The current infrastructure in place consists of Windows workstations managed in an ...
-1
votes
1answer
21 views

Auto-Logoff Through GPO [on hold]

We have to auto-logoff all the users who are sitting idle for more than 1 hour. We have Most of 2003 servers. We were told that Terminal server licenses has not been there else we have a group policy ...
0
votes
0answers
10 views

DFS Database Error

I am trying to setup DFS on 2 computers. I have successfully setup and created a replication group among the folders on each servers. The replication is not happening. On checking the logs i found ...
0
votes
1answer
2k views

Windows server 2003 MMC has detected an error in snap. It is recommended that you shutdown and restart MMC

I have Windows Server 2003 STD x64 SP2 and I have been installed AD on it. When I try to add computer there is an error message saying: MMC has detected an error in a snap. it is recommended that ...
2
votes
1answer
2k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
2
votes
3answers
15k views

Missing SYSVOL and NETLOGON after upgrade from Windows 2003 SBS to 2012 Standard

Today we went from Windows 2003 SBS to Windows Server 2012 Standard. I did the following: Joined 2012 server to the SBS 2003 domain Installed Active Directory Domain Services (aka dcpromo) on the ...
1
vote
1answer
875 views

Nagios NRPE plugin check_ad - Fixed

i've reading about this problem much and trying to solve it on my own ways but still not luck. I've running debian 7 as nagios server. Problem is that i cant check state of my Active Directory Domain ...
1
vote
1answer
35 views

Remote location management copy and install large software updates to 50 LAN

Initially posted to Stack Overflow and was directed here. I'm new to programming and am trying to write a powershell script to manage software updates. I'm in a windows domain environment with over ...
0
votes
2answers
1k views

Active Directory integration with linux users and zimbra

I have the following questions about setting an active directory, that already has users and a domain, (i.e. internaldomain.edu) and real domain (i.e mydomain.edu.), and I have seeing many examples of ...
2
votes
1answer
3k views

How to connect AD Explorer from Sysinternals to Global Catalog

I'm using the sysinternals AD Explorer quite frequently to search and inspect an Active Directory without any big problems. But now i'd like to connect not only to a single AD Server. Instead i like ...
10
votes
3answers
7k views

Domain rename with Exchange 2010

I have taken over all IT responsibilities for a company that is using Active Directory (2008 R2 native level) and Exchange 2010. I have come to find out that their internal Active Directory domain ...
6
votes
1answer
59 views

Error adding child Active Directory domain to existing forest

I'm building a test environment containing multiple Active Directory domains in the same forest, but I'm having strange issues while trying to add a child domain to the forest root domain. All ...
1
vote
2answers
856 views

Roaming Profile Permissions and Migration

Currently a client as 2003 DC and we are migrating them to a 2008R2 on a 2012 Hyper-V Host. They have a handful of roaming profiles - but with the usual setup - i.e. the only permissions on the actual ...