A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

4
votes
1answer
25 views

How to filter settings within a GPO that only applies to Windows XP?

We have several GPOs containing many settings that have accumluated over time. I have spot-checked some of them and stumbled over settings that only apply to Windows XP (we exclusively run Vista and ...
0
votes
2answers
17 views

Group Policy to force all web traffic to a specific page OR GPO to display unclosable popup to get users attention

We have a number of tasks users need to complete over the month (time sheets, reports, etc) and I am trying to think of the best way to force users to complete these tasks. Currently, we send ...
9
votes
3answers
2k views

Domain computer cannot resolve internal hostnames, but nslookup can

I have a Windows 7 computer on my domain that is behaving oddly. It is possible to ping www.google.com It can ping internal hosts using their IP address It can ping the local Domain Controller/DNS ...
0
votes
0answers
8 views

ADSI Linked Server: Why can I query AD in VBA, but not as a Linked Server?

After all the reading and research I've done, this seems like the most logical place to post this question: Why can I query Active Directory using VBA, but not a Linked Server in SQL Management ...
4
votes
1answer
27 views

Event ID for an Active Directory Domain Rename

My Active Directory forest has 6 child domains. As part of a security control, we are required to get alerted (e.g. using SCOM) when someone triggers a change in the domain name. My question: Is ...
1
vote
1answer
42 views

Kerberos, Active Directory, and Linux/Unix Servers

I have done some research on the topic, but I can't quite find a straight answer to my question. Please tell me if my understanding is correct. Kerberos can be used as the bridge between a ...
2
votes
1answer
2k views

can't add sharepoint users from trusted domain

I have a very strange problem with our Sharepoint 2007 implementation. I went in today to grant access to a user and was greeted with "The user does not exist or is not unique." Let me start off by ...
1
vote
4answers
214 views

AD Domain Controllers being Slammed

My Windows Server 2008 Domain Controllers are getting hundreds of log in attempts per minute. For the most part the IP addresses are not in the Event Log however the ones that do occasionally show up ...
0
votes
0answers
26 views

Add a computer which is outside my LAN into my Active Directory

Is it possible to add a computer with public static ip address into my active directory? Do we need to use any vpn to bring the remote computer within the network to add that computer within active ...
0
votes
0answers
58 views

One user shows as Contact instead of Mailbox, after migration to Office365

We recently did a cutover migration from an on-premises Exchange 2010 server to Office 365. We've set up dirsync to synchronize accounts and passwords from our local AD. All mailboxes and shared ...
3
votes
1answer
2k views

Outlook 2010 exchange setup prompts for username@domain.local rather than email@domain.com

We use a hosted exchange service. When users want to set up Outlook 2010 to access their account, they open Outlook and run through the configuration steps. Autodiscover is enabled, and in the ...
0
votes
1answer
12 views

“Entire Directory” option missing from Locations in “Select Users, Computers, SrvAct, or Groups” dialog

I'm a very inexperienced server admin, so if fail to provide some important information I apologize in advance. I am doing some development for a very small software company and I'm having a bit of an ...
0
votes
1answer
835 views

sharepoint 2013 user profile sync permissions problems

I’m trying to stand up a new SharePoint 2013 farm. I've got an issue where we aren't syncing all of the user properties between sharepoint and AD, and it’s the email properties in particular that I’m ...
0
votes
2answers
1k views

Powershell - check if all users in a specific OU are disabled, disable if not

I tried to search for it but I didn't find anything. Could someone help me out with an example of a script that would do this?
0
votes
0answers
18 views

AAD Sync not able to connect to online service using powershell

When trying to connect to my Office 365 tenant using connect-msolservice from powershell I get the following error: Connect-MsolService : The HTTP request was forbidden with client authentication ...
2
votes
1answer
38 views

Alfresco Group Sync with Active Directory. Looking for a real groupID

I have an Alfresco Community 4.2.e running and synchronized with Active Directory with functional level 2008. I import users and groups from Active Directory. From ldap-ad-authentication.properties: ...
0
votes
2answers
67 views

Prevent users from downloading certain files

I am working for an organization which helps people with mental disabilities. All of them have a user account in our AD. The client computers are running a mix of Windows 7 and 8.1, and the server is ...
2
votes
2answers
65 views

Windows Server Administration - which services are safe to run internet facing?

Coming from a Linux background and now having to manage some Windows servers (2008R2 & 2012R2) I'm wondering which services are safe to run directly over the internet. The servers are all internet ...
0
votes
0answers
13 views

Mac Maverrick AD binding

I have about 40 Macs on my AD Domain running OS X 10.9 (plus OD server). Recently the two MacPros (one aluminium case and one black shiny ash tray) have lost their binding to the AD, so I have unbound ...
-1
votes
0answers
11 views

An invalid parameter was specified for this replication operation [on hold]

Created two sites - "One" and "Two" with a site link using SMTP intersite transport for replication. "one" site contains a DC1 and "two" site another DC2. Both the DC's are in same domain but ...
0
votes
1answer
21 views

Folder redirection for multiple locations

I need to find a way to redirect a folder at one location to the file server at the same location and repeat this for all of the other sites. So all of the computers at SiteA will redirect to the ...
2
votes
0answers
29 views

Group Policy - Drive Mapping Preferences - slow login even if only using Computer Config side

We are having some users with very slow login times, up to 20 minutes, but only for a handful of users. I've narrowed it down to a particular GPO that does nothing but Drive Mapping Preferences. I ...
4
votes
1answer
117 views

Search-ADAccount :: Finding Inactive, Disabled or Expired Accounts

The Search-ADAccount cmdlet has switches -AccountDisabled, -AccountExpired and -AccountInactive; the results of which may not be mutually exclusive nor inclusive. i.e. an account which was disabled ...
0
votes
0answers
13 views

Solutions for bridging Solaris/AIX to Active Directory?

I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully ...
1
vote
1answer
45 views

Ldap+kerberos authentication through AD

Is it possible to configure ldap+kerberos authentication on a linux machine without joining it to windows domain? I have to create a pool of VMs using RHEVM with a pretty short lifetime and I do not ...
0
votes
0answers
21 views

Squid NTLM authentication started to fail

I have a squid server authenticating against a Win2k3 AD. The authentication is failing since today and I'm sure it is something on the windows side because on the linux machine there were no ...
0
votes
0answers
18 views

Is it possible to import a GPO into Samba 4 without the use of Windows tools?

I have an Ubuntu 12.04 server which also includes a Samba 3 installation. Currently, I only use it to authenticate users who try to log on into Windows workstations and it works very well. Now, I ...
1
vote
0answers
15 views

Single Sign on for Virtual Machine

Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on? The objective is to only have to login once to the host machine and for the ...
2
votes
1answer
1k views

Linux LDAP query to AD : missing group members

Two different Linux servers (CentOS & Ubuntu) on my LAN cannot see certain members of an AD group when performing an LDAP query. We're setting up a software appliance which can use LDAP for ...
2
votes
3answers
1k views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
0
votes
2answers
1k views

Win 2012 AD, can't login with some users: there are currently no logon servers available to service the logon request

I have a Windows Server 2012 R2 with a fresh AD created, I have the admin user and test1. I added to the domain another Windows Server 2012 R2 machine and I can't log with the admin user, I get that ...
0
votes
0answers
35 views

How to do when rename Domain Name in Active Directory

I installed a DC on Windows Server 2012 R2 over MS Azure. Now I see that the name of the domain what I use, isn´t so good, so I must change it. When I start Start the Active DIrectory users and ...
3
votes
2answers
817 views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
-13
votes
1answer
137 views

forget my old password. how can i recover that [closed]

I am an AD admin. I changed my colegues password. He is also an user in active directory. Is there any way to see his old password. I need to set his old passwprd back.
-3
votes
0answers
33 views

Where and how do I download Active Directory Migration Tool? [on hold]

I'm trying to download the Active Directory Migration Tool, but the Microsoft download page I'm trying to use keeps giving me a 404 error. I'm trying to get it from connect.microsoft.com here, which I ...
0
votes
1answer
20 views

If I apply local group policy for the first time why it is not taking effect untill I restart the machine?

I applied local group policy (Computer Configuration - Software Restriction Policy) but policy is not taking effect. I tried this on domain member (machine is in connection with Domain Controller) and ...
2
votes
5answers
82 views

Pursuit of True Active Directory Integration

Before you laugh at me and say, "If you want Active Directory, use Windows" or tell me to use Google, hear me out. My company relies very heavily on AD. Nay, we are married to it at this point, and ...
0
votes
2answers
3k views

Unable to register a client to domain

I have a domain Controller established on the server that uses static IPs. When I attempt to add a System to this domain, it is not successful. Following is the error details: An error occurred when ...
0
votes
2answers
1k views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
3
votes
1answer
2k views

Domain Trust 2008 to 2003

I'm having trouble setting up the trust relationship between a Windows Server 2003 and a Windows Server 2008 AD. Domain a is Windows Server 2003 Forest functional level. Domain b is a Windows Server ...
0
votes
1answer
26 views

What is the difference between Site Link Bridges and BASL?

I have a hub and spoke network where the spokes can't communicate with each other. I understand that BASL is what's responsible for making links to sites that are non routable. How does a Site Link ...
1
vote
0answers
23 views

Benign “The specified domain either does not exist or could not be contacted” error while using Active Directory Users and Computers

I have a single Windows Server 2012 R2 Active Directory Domain Controller for domain MYDOMAIN. I want to perform remote administration of the Active Directory from a workstation that is not joined to ...
1
vote
1answer
874 views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
2
votes
2answers
83 views

Windows Hosts DNS query for _ldap._tcp.domaincontroller, is this normal?

To make this easier to wrap my head around, here's what I'm using in my examples: deecee = my domain controller dctoo = another domain controller internal.foo.bar = the full DNSDomainName of ...
1
vote
0answers
32 views

Specify DNS/Domain Controller when authenticating against a different domain

Client has two domains residing on the same subnet/physical network. Essentially there's just a POP3 mail server (OLDSERVER) and one of the old DCs (OLDDC) on life support to keep OLDSERVER happy. ...
2
votes
1answer
2k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
1
vote
1answer
853 views

Authenticate Dovecot against Active Directory

I'm trying to authenticate Dovecot against a Microsoft Active Directory on a Windows 2008 R2 Domain Controller. Dovecot (Version 2.2.9) is running on Ubuntu 14.04 (3.13.0-30-generic). My Configs: ...
1
vote
2answers
39 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
3
votes
2answers
47 views

Workstations hang on “Change Password” after expired Password

For one of our customers we have configered a maximum password age of 90 days. If those 90 days are over, the users are forced on logon to change their password. This worked fine for the past 9 ...
1
vote
0answers
292 views

SQL Server 2012 permissions from AD group login not refreshed until server restart

We have some IIS sites which runs under Managed Service Accounts (Windows Server 2012). Theese MSAs are members of resource groups in Active Directory. We are using resource groups as logins in SQL ...