A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

2
votes
3answers
1k views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
2
votes
1answer
1k views

Linux LDAP query to AD : missing group members

Two different Linux servers (CentOS & Ubuntu) on my LAN cannot see certain members of an AD group when performing an LDAP query. We're setting up a software appliance which can use LDAP for ...
1
vote
2answers
36 views

an active directory domain controller could not be contacted

After creating an active directory domain controller i tried to add client computers to the domain i kept hitting a snag. The following error occurred when DNS was queried for the service location ...
2
votes
0answers
22 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
0
votes
2answers
21 views

Windows 802.1X WiFi First Login To Domain Laptop

So I have my Windows laptops using 802.1X for authentication to connect to my WPA2-Enterprise WiFi network. This works well except for one edge case. These laptops are Windows 7 Pro and Windows 8 ...
2
votes
1answer
2k views

can't add sharepoint users from trusted domain

I have a very strange problem with our Sharepoint 2007 implementation. I went in today to grant access to a user and was greeted with "The user does not exist or is not unique." Let me start off by ...
1
vote
1answer
37 views

Can computer change his AD Domain Site binding on network reconnection?

Can a computer's AD DS site be reassigned on network reconnection? For example, I connect a computer to network 172.16.1.x, and then boot it up. The computer recognizes the subnet as belonging to ...
2
votes
2answers
1k views

Active Directory faking account lock outs

I am having some issues on my domain with user accounts refusing to log in because the account is locked out, but in active directory (users and computers) the account is not marked as being locked ...
0
votes
0answers
11 views

AD Account Policies/Group Policy not updating Mac keychain passwords

We currently run Windows Server 2008 R2, AD and have a multi Desktop OS environment ranging from Macs to Windows. Macs are bound to AD for login and password authentication through the directory ...
0
votes
0answers
9 views

Domain policy expiration doesn't match net user command

In Active Directory, we have recently changed our password policy. We had our users set to where their passwords would not expire previously. Now, we have set max password age in our domain policy ...
0
votes
0answers
9 views

IE11 & 2012R2 History GPO

probably a really simple one but I've not been able to find it. I am running a 2012R2/Win 8.1 environment and want to stop IE from storing any browsing history on a machine level. I've already set ...
1
vote
1answer
206 views

What are the effects of a machine account being member of Domain Admins?

I recently stumbled over a workstation account being member of the Domain Admins group. I assume that this is not recommended, right? Nevertheless, I am curious what the actual effects of this ...
2
votes
1answer
28 views

W2012 R2 AD certificate Services sha algorithm

So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
0
votes
0answers
66 views

Office 365 - Outlook For Mac Not Authenticating

We have Office 365 (for business) and a few users who want to use O365 apps on their Mac. Outlook is causing a problem when trying to authenticate / authorise the application (before adding the email ...
1
vote
2answers
31 views

where should I point my top level domain DNS for Internal Active Direcotry Services

We are planning to switch our environment from workgroup to domain (active Directory services). We are planning to register our top domain at some public register. That domain is going to be used just ...
3
votes
1answer
2k views

Domain Trust 2008 to 2003

I'm having trouble setting up the trust relationship between a Windows Server 2003 and a Windows Server 2008 AD. Domain a is Windows Server 2003 Forest functional level. Domain b is a Windows Server ...
0
votes
2answers
1k views

Win 2012 AD, can't login with some users: there are currently no logon servers available to service the logon request

I have a Windows Server 2012 R2 with a fresh AD created, I have the admin user and test1. I added to the domain another Windows Server 2012 R2 machine and I can't log with the admin user, I get that ...
1
vote
0answers
16 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
2
votes
0answers
20 views

Alfresco Group Sync with Active Directory. Looking for a real groupID

I have an Alfresco Community 4.2.e running and synchronized with Active Directory with functional level 2008. I import users and groups from Active Directory. From ldap-ad-authentication.properties: ...
0
votes
1answer
16 views

Computer under domain gives req_timed_out in browser for application

I've Windows Server2008R2 with ADDS configured. Also the same server got the Java application running in Tomcat. So, when I open the particular service of that application from the computer which is ...
1
vote
0answers
13 views

Secure channel trust verification fails

Working on an issue with setting up a trust between two domains with several firewalls in between, and a pinhole routing between two servers in them. newdc.newdomain.com is a 2012 server in a brand ...
3
votes
3answers
47 views

PowerShell: How to retrieve a specific property _exclusively_

How can I retrieve a specific property exclusively? I am aware of the select-object cmdlet which seems to be dowdy in that respect: PS C:\> Get-ADOrganizationalUnit -SearchBase ...
2
votes
1answer
15 views

Does DSML Services for Windows run on Windows Server 2008?

I realize that DSML Services for Windows lists Windows 2000 or Windows Server 2003 as a requirement, but can anybody tell me if it will still run on Windows Server 2008? We're using DSML to talk to ...
0
votes
0answers
17 views

One user shows as Contact instead of Mailbox, after migration to Office365

We recently did a cutover migration from an on-premises Exchange 2010 server to Office 365. We've set up dirsync to synchronize accounts and passwords from our local AD. All mailboxes and shared ...
4
votes
3answers
3k views

DNS servers assigned by DHCP reverting to old addresses, for entire site

We recently had to perform a disaster-recovery fail-over from our main site, which involved changing the IPs at which our main office Domain Controllers (which also serve DNS) reside. It went off ...
0
votes
2answers
37 views

Make sssd respect Acctive Directory nested groups

I have managed to get sssd working and getent passwd *username* as well as getent group returns AD data. I am now facing a problem with nested groups in Active Directory. In the AD i have supergroup ...
-3
votes
0answers
34 views

Can i recover my all domain computers and users from IFM and in-cooperate them in new forest? [on hold]

My only Active Directory Server on win server 2008 R2 with one domain controller crashed today. i.e there wan no additional domain controller. The only backup that i had was IFM media. So can i ...
0
votes
1answer
36 views

sssd can't save user. Missing uid

I am trying to sync my Debian server using sssd. When i run the getent passwd username@domain, the user is not returned. The log says it's because i am missing an uid from the ldap lookup. However, i ...
0
votes
1answer
17 views

Cannot log in to active directory

I am having a great trouble here. We are working on a research project in which we need SharePoint 2013. Therefore, we used a cloud environment and booted up three machines and installed Active ...
2
votes
3answers
5k views

How to rename multiple computers in a domain

I've inherited this stupid name convention: COMPANYNAME-CITY20090724 or COMPANYNAME-CITY-JOHN It doesn't tell me anything about the location (floor, department). John left the company months ago. ...
0
votes
2answers
1k views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
0
votes
0answers
30 views

Windows 2-node failover cluster with AD setup

Is it possible to create a 2-node failover cluster with AD, but only with 2 physical servers? Creating a failover cluster requires an AD, but sadly I don't have any available hardware to install it. ...
2
votes
3answers
5k views

What rights does “Replicating Directory Changes” actually grant in Active Directory?

We need to grant a service ID the Replicating Directory Changes to Active Directory. People are concerned that we might accidentally let the service ID write data in Active Directory, or have ...
5
votes
1answer
1k views

Unattended Windows 7 install with non-DHCP DNS Server: Domain join fails, claiming it can't find the domain

I'm trying to build an unattended Windows 7 image script that will do a simple domain join. The catch is that the DHCP-provided DNS server knows absolutely nothing about my domain, so I need to set ...
4
votes
2answers
4k views

SQL Server running under a domain account cannot register its SPN

I am trying to configure a fresh install of SQL Server to run under a domain account. However, I get intermittent errors when trying to connect to the server using another domain account, and I still ...
0
votes
2answers
32 views

vsFTPd authenticating with SSSD

I am currently trying to setup an FTP sever that authenticates through Active Directory using SSSD. My config files are as follows: /etc/vsftpd/vsftpd: [root@StudentOrgFTP vsftpd]# cat vsftpd.conf ...
0
votes
2answers
31 views

In which order will GPOs be applied when a USER try to login to a PC in a different OU

If we have this Group Policy Management configuration (Windows Server 2008): domain.local OU1 PC1 USR1 GPO1 (Linked) OU2 PC2 USR2 GPO2 (Linked) ...
0
votes
2answers
347 views

DNS 'Accidentally' Uninstalled in AD Domain - Server 2008

So, I did something quite foolish (it's a long story) and accidentally started an uninstall of DNS on one of my domain controllers. Fortunately, my Active Directory appears to be functioning properly, ...
0
votes
0answers
42 views

Unable Join SOME 64 bit Windows 8.1 Pro Clients to Windows Sever 2003 Domain

We just deployed 12 brand new Windows 8.1 Pro 64 bit client machines. They are all identical models and all wired identically to our network/server room. 8 of the machines joined the domain with no ...
1
vote
0answers
35 views

Server Migration 03 -> 12

I have run into a wall and out of ideas. Here's the situation. I have a client that has a old '03 DC with a 12 replicating the '03 server. It is out dated and has to many group policies and stuff it ...
21
votes
6answers
78k views

Finding why a user is locked out in Active Directory

A user's account keeps getting locked out in Active Directory. It's probably caused by an app that's using Windows authentication to connect to SQL Server. Is there a way to find out which app is ...
0
votes
1answer
15 views

Script adding an NISMap object in Active Directory from Windows and RHEL6

I am working on using Server 2008R2 Forest to house AutoFS maps in the existing schema using NISMap and NisObject class objects. I can manually create them (and it works) with ADSIedit. I have ...
0
votes
0answers
19 views

AD Roaming Profiles via VPN not synchronizing

I want to create local Client-VMs (Windows 8.1) for our developers. These should connect to our VPN and login on our AD server (Windows Server 2012 R2). I'm using serverside profiles for this so that ...
0
votes
0answers
11 views

Debugging libnss_ldap AD synchronization

I am trying to configure my Debian server to talk to an AD. I have a connection to the LDAPs port of the AD, and i can use LDAP search to connect and retrieve results. I can also see that the getent ...
0
votes
0answers
34 views

Problematic Active Directorys CA certificate

i came across one DC, which gives me RPC errors when dealing with AD Certificate Service.I can see in AD there is 2 Root CA , one is problematic. Is it safe to remove it? Or is there a procedure for ...
2
votes
1answer
2k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
0
votes
3answers
2k views

Entering new user data into AD LDS

I need some help configuring AD LDS (Active Directory Lightweight Directory Services). I'm not an administrator, have never configured domains and I don't have a clue how to add new users to existing ...
1
vote
3answers
3k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
0
votes
4answers
5k views

Network Path not found while joining Active Directory

So I have an Amazon EC2 box running Windows Server 2008 with Active Directory installed on it. I also have a Windows 7 virtual machine, which is set to use the Active Directory box as its DNS and WINS ...
1
vote
1answer
242 views

Migrating Gmail to Office 365

I have been setting up Office 365 for my organization. We are currently using Gmail. I have synced our local Active Directory server w/ Office 365, as well as our domains. The problem I am having has ...