A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
2answers
2k views

Win 2012 AD, can't login with some users: there are currently no logon servers available to service the logon request

I have a Windows Server 2012 R2 with a fresh AD created, I have the admin user and test1. I added to the domain another Windows Server 2012 R2 machine and I can't log with the admin user, I get that ...
2
votes
1answer
24 views

Active Directory member servers in the DMZ

I want to be specific about terms. When I say DMZ I'm talking about a place where you would put servers that expose a service to untrusted networks like the Internet, or in some cases merely networks ...
1
vote
1answer
11 views

Unable to change domain password even if the password is complex

I have a problem with users not being able to change their passwords. When they try to change the password, they get this error: "Your new password does not meet the length, complexity, or history ...
3
votes
1answer
5k views

Login user picture on domain

How can I change the "user picture" for each indivudal user that is displayed during the logon for Windows Vista, 7, 2008, 2008R2 machines throughout a domain?
0
votes
1answer
17 views

Security-Kerberos Error, event ID 4

I have two new Domain Controllers on new Forest. Servers have DFS and IIS services installed. Everything seemed to go Ok for a While. After updating servers I got new errors. Now once in hour ...
0
votes
1answer
12 views

How to recover default background of domain computers

I have set a default logon screen for computers on a WinSrv 2012 , but for some stupid reason have ticked the "Remove this item when no longer applied", and now I was re adjusting the policy and after ...
3
votes
1answer
2k views

can't add sharepoint users from trusted domain

I have a very strange problem with our Sharepoint 2007 implementation. I went in today to grant access to a user and was greeted with "The user does not exist or is not unique." Let me start off by ...
1
vote
2answers
33 views

Active Directory and usage of Sites

I have been reading through the AD articles in here and still have a fog going about Sites compared to Child Domains. I have been using a Windows 2012 R2 Domain and Functional level to manage a mini ...
25
votes
3answers
2k views

What features of Windows 8/8.1 Pro will not work without a Microsoft Account?

With respect to domain-joined Windows 8/8.1 Pro machines, what features of Windows will not work unless a Microsoft Account is used? Also, aside from "feature loss," are their any gotchas of not ...
-1
votes
0answers
15 views

Exports users from WordPress site into Active Directory [duplicate]

Is this possible, if so, how? It doesn't need to be in details but I am wondering if anyone could throw me a bone. : D Export user accounts from a WordPress site into a file. Import the file into ...
0
votes
1answer
19 views

Active Directory multi-site “trust proxy”

We have a multi-site domain with several sites in a hub and spoke-design. From the hub site, we have established a one-way trust to another domain though a VPN tunnel. Now, when someone from the ...
1
vote
2answers
128 views

What does “Assigned” mean in the Azure AD Application user list?

Within the Azure portal, inside an Active Tenant I have an application with users listed, of which are created in the tenant. What does the term Assigned mean? I incorrectly assumed that it meant ...
19
votes
3answers
43k views

Any difference between DOMAIN\username and username@domain.local?

I'm trying to troubleshoot an obscure authentication error and need some background information. Is there any difference between how Windows (and programs like Outlook) process DOMAIN\username and ...
2
votes
1answer
7k views

UnKnown can't find <hostname>: Non-existent domain

I have a small network running Windows Server 2012 servers and Windows 7 clients. Right now I'm trying to setup DNS with an AD-Integrated Zone. I've configured my local machine, which is not a domain ...
-2
votes
0answers
13 views

I cannot to open The consol Avtive Directory Domain Services [on hold]

If I want to open an active directory Users and Computers, I have a error message with: Naming Information Cannot be located because: The target principal name is incorrect Do you have some idea to ...
3
votes
2answers
3k views

Are there alternatives to Sysinternals ADInsight?

I had been using ADInsight from Sysinternals to trace Active Directory calls from my workstation, but the application has failed. Where previously the Active Directory events were traced and logged, ...
1
vote
2answers
1k views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
-1
votes
0answers
34 views

Building a Paid Subscription Website [closed]

I have a plugin "Active Directory Integration" that can connect from WordPress to Active Directory, but it can only update users from AD (Active Directory) to WP (WordPress), not from WP to AD. I ...
1
vote
0answers
363 views

Slow first login to a AD-joined Samba box

I have joined my first Debian box to an Active Directory (2008 R2). It works, I can log in with AD credentials, browse Samba shares. There is just a problem with the time it takes for someone to log ...
0
votes
2answers
875 views

Set group permission on folder

I have a folder with lots of subfolders D:\Data\Subfolder1 D:\Data\Subfolder2 D:\Data\Subfolder3 D:\Data\Subfolder4 D:\Data\Subfolder5 ... I need to create three active directory groups ...
1
vote
2answers
99 views

Windows server 2012 Active Directory VS Windows server 2008 Active Directory

I want to do a test to compare "Windows server 2012 Active Directory" and its earlier version "Windows server 2008 Active Directory" in performance and functions. My question is, where should I start? ...
0
votes
1answer
3k views

Sync Active Directory Users in FreeNAS

This is for FreeNas-9.1.1, I am using active directory which appears to be connecting ok, since the following list users/groups from that server with no problems wbinfo -u wbinfo -g I can also join ...
0
votes
2answers
36 views

Active Directory Users Delegated Permissions

This is probably a dumb question, but how does the delegated user access ad to make these changes? I have set this up but a user cannot launch the active directory users and groups tool. Only admins ...
1
vote
1answer
911 views

AD sync to Azure AD: “AccountEnabled” is invalid

I am syncing our local AD (from SBS 2011) to Azure AD using the DirSync tool, but since a few days I get an error like the following (translated from local language): The object can't be updated ...
2
votes
1answer
1k views

How to check WSUS server updates downloaded size?

How can I check the updates size which were downloaded in WSUS? For example I need to check the updates size downloaded of April 9, 2013 for new 26 updates. And how can I locale the new updates on ...
0
votes
1answer
90 views

Nslookup not working in Active Directory on Windows Server 2012 R2

A few days ago, a colleague had to hard reset one of our servers runnning Windows Server 2012 R2. This server is in our Active Directory and has two DNS servers configured. After that reset, the ...
0
votes
2answers
49 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
3
votes
1answer
2k views

Domain Trust 2008 to 2003

I'm having trouble setting up the trust relationship between a Windows Server 2003 and a Windows Server 2008 AD. Domain a is Windows Server 2003 Forest functional level. Domain b is a Windows Server ...
2
votes
1answer
5k views

SquidGuard and Active Directory: how to deal with multiple groups?

I'm setting up SquidGuard (1.4) to validate users against an Active Directory domain and apply ACLs based on group membership; this is an example of my squidGuard.conf: src AD_Group_A { ...
2
votes
1answer
3k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
0
votes
1answer
921 views

Active Directory DNS issue? Event ID 13 Access Denied,

Okay this is kind of a rehash of a prior post. (Clustered Storage Error: There are currently no logon servers available to service the login request) due to my belief that it is unrelated to the ...
3
votes
0answers
123 views

Windows 2012 Master & Ubuntu Bind 9 Slave & SOA

I'm kinda like the maid... I don't do Windows. But thanks to new things we're implementing, I'm now attempting replicating a single zone from our AD cluster. We had this working just fine but ...
-1
votes
1answer
15 views

Migrating an Active Directory hub and spoke workplace to an Office 365 and a cloud AD solution

Hi Serverfault / Stack Exchange Community, I was looking for a few points of view on a solution that I am working on for a SMB to be more mobile that is about 40-50 people in size. They are ...
-3
votes
1answer
27 views

How to list OrganisationalUnits (OU's) in Active Directory with the count of users in each OU? [on hold]

I want to export the list of OU's within our organization alongside their number of users they have. So far I managed to get the list of OU's with Get-ADOrganizationalUnit -filter * | Sort-object ...
1
vote
1answer
26 views

Domain names on 2 similar windows domains (active directory)

I am fairly new to windows administration (Server 2008r2), but I am putting together a new environment, and am setting up active directory domains. I have broken my system into 2 parts, management ...
0
votes
1answer
17 views

Can a base DN for LDAP queries be a group DN?

I am trying to do LDAP integration for user authentication in HP NNMi. (NNMi on RHEL6 to Active Directory on W2K8 R2) I know I can get it to work if I use the OU that my users are in as the base DN ...
0
votes
1answer
2k views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
1
vote
3answers
3k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
2
votes
2answers
40 views

How to remove an orphaned Child Domain on Server 2012

I have a domain (working on Server 2012 functional level) and multiple child domains. I'm really stupid and therefore deleted the only domain controller on the child domain before demoting it and ...
5
votes
1answer
632 views

How to add custom OID for subject field on certificates issued by Windows Server 2008 R2 CA?

I'm using a Windows Server 2008 R2 domain controller with Active Directory Certificate Services installed. It's configured as an Enterprise Root CA. I have configured a custom certificate template so ...
1
vote
1answer
24 views

Do Explicit Deny ACLs apply to a Domain Administrator account?

I've had a need come in a client with a two way trust (source company doesn't want us to have full admin rights, so we're having lots of permissions issues). We effectively need Domain Admin rights ...
1
vote
1answer
1k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
1
vote
1answer
24 views

authentication error on WS2012 (trust relationship failed)

Given the following lab setup: HOST1 on Windows Server 2012 R2 (host running Hyper-V, joined test.local domain, static IP) DC1 on Windows Server 2012 (VM under Hyper-V on HOST1, AD and DNS roles, all ...
2
votes
2answers
29 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
0
votes
4answers
2k views

Bizarre - Domain Admin has no rights to modify domain scripts directory

Here is a quickie that has had me scratching my head. Not a showstopper, so an answer isn’t urgent, but still. I am trying to modify the logon scripts directory to include a login script. I have gone ...
-1
votes
1answer
28 views

Place Date in Description when moved to different OU

I am not sure if this is possible, but i am wondering if i could create a powershell script that would move any/all users listed in a CSV file to a different OU and add the date in the Desription ...
3
votes
1answer
39 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin ...
-3
votes
0answers
23 views

Restoring a Win2000 AD domain from a Win2000 BDC?

This is where I landed, I have a Win2000 "DC" That in actuality is a BDC. My predecessor left it as is since it worked and he didn't have to redo the user profiles. I now want to upgrade to 2008, ...
14
votes
3answers
13k views

How to use Google Apps as an OD/AD/LDAP Provider

I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login. However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other ...
0
votes
0answers
15 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...