A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
1answer
390 views

Why is a domain user unable to log on into a Windows 7 machine when Samba server signing is enabled?

I have an up and running Linux-based domain controller running Samba. The server functions properly as I am able to join Windows 7 machines to my domain and then log on into the machine using my test ...
2
votes
1answer
2k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
1
vote
1answer
1k views

Activating Windows 7 with MAK passed in Unattend.xml via WDS

I have configured WDS to deploy a Windows 7 Pro image (Volume Licensed) and I'm using an unattend.xml file for the configuration. The only problem I'm running into is activation. I'm passing a MAK ...
1
vote
2answers
1k views

Roaming Profile Permissions and Migration

Currently a client as 2003 DC and we are migrating them to a 2008R2 on a 2012 Hyper-V Host. They have a handful of roaming profiles - but with the usual setup - i.e. the only permissions on the actual ...
0
votes
0answers
13 views

Cannot search for user and groups in a trusted forest. Server asks for password of trusted domain

I am currently familiarizing myself with trusts.On each of two Server 2012 R2 I installed a domain controller in a new forest. dc1.forest01.local, 192.168.10.10/16 dc2.forest02.local, ...
0
votes
0answers
12 views

CentOS 7 Automated SSL Generation from Active Directory

I have an Active Directory Server setup for Certificate Services. I am able to manually generate certs as needed. However, I need to find a way to automate the sending of the cert request to AD and ...
5
votes
2answers
55 views

PowerShell: Get-ADUser Properties with åäö

I'm trying to extract select sets of users with Get-ADUser. The users belong to companies whose names include non-ASCII characters, e.g. "Gåäördet". Unfortunately, we do have to use the company ...
4
votes
1answer
1k views

Reading files on network share from a Windows service (app over tomcat as service)

I have a webapp over tomcat6, which is installed as a service in a WinServer (2008 or 2003r2, don't know for sure, people haven't let me put a hand over it so far). The Tomcat service runs with a ...
0
votes
1answer
138 views

Active Directory Password Formats

I'm working on an open source project that will manage active directory users. I am looking for feedback from Windows/Active Directory Admins on the formats of usernames they prefer or their ...
0
votes
2answers
33 views

User's AD account deleted then recreated, now cannot access TFS

I have a user who a couple months ago had access to our Team Foundation Server (TFS) 2013 instance (he was able to access queries, work items, backlogs etc via the web interface). Recently, we needed ...
0
votes
2answers
904 views

Domain Controller does not have a computer account for this workstation trust relationship

We've had an ongoing issue for a while and I'm here on a Saturday to try and figure it out, and I think I've found the problem, just not the cause... For a few months our second domain controller has ...
0
votes
0answers
8 views

How to get root CA certificate in windowsserver 2012

I am trying to connect to W2k12 server AD from my local unix box using net::ldaps. there seems to be CA certificate issue. as openssl s_client -connect AD.server.ip:636 is failing . Error: ...
4
votes
2answers
3k views

Exchange 2013 Setup fails - Couldn't find the Enterprise Organization container

I'm working on an Exchange 2013 CU6 installation at a site whose AD was comprised of two Windows 2003 domain controllers (in an odd HA cluster configuration). New Windows 2012 R2 DCs have been ...
4
votes
1answer
2k views

How should DNS be configured for remote VPN access to a Windows Domain?

Suppose you have a small windows domain configured as follows: domain name is ad.example.com (as per these guidelines) DC1 is at 10.10.10.3 DC2 is at 10.10.10.4 DC1 and DC2 are running the ...
2
votes
2answers
3k views

an active directory domain controller could not be contacted

After creating an active directory domain controller i tried to add client computers to the domain i kept hitting a snag. The following error occurred when DNS was queried for the service location ...
1
vote
2answers
38 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...
4
votes
3answers
6k views

Powershell: lastLogonTimestamp blank for some users

I am developing a script to report on users who have not logged in to the domain for 6 months. I'm using lastLogonTimestamp as within 14 days is precise enough for my purposes, and I don't want to ...
2
votes
3answers
337 views

Can my Active Directory domain name prevent a forest functional level from being upgraded to Windows Server 2008 R2?

I have inherited an Active Directory environment that is at the Windows Server 2003 forest and domain functional level. The DNS domain name has no special characters--it looks like sampledomain.org. ...
-5
votes
2answers
3k views

Is Active Directory backup as flexible as OpenLDAPs or 389-ds's?

With 389-ds I can export my entire directory using db2ldif and import it into a new directory server using ldif2db without any issues; even in catastrophic failure situations. Now, the question is ...
0
votes
0answers
10 views

How to set cups quotas per users on centos from active directory domain?

How can I import cups users from active directory domain which is installed on windows server 2008 R2 and set quotas per users on cups printing server which is installed on centos 6.6 ?
3
votes
2answers
884 views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
0
votes
0answers
15 views

Why I need to login two times to apply changes to AD group membership or GPO filtering?

If I add a user to a group in AD, to reflect that change on a computer (see it on gpresult in security groups), I need to sign in and off the user session two times. Also the same happens when I add ...
3
votes
2answers
83 views

Workstations hang on “Change Password” after expired Password

For one of our customers we have configered a maximum password age of 90 days. If those 90 days are over, the users are forced on logon to change their password. This worked fine for the past 9 ...
0
votes
1answer
43 views

Windows refuses to add an additional DC

I am trying to add a second DC to my network. It seems to go well: I install AD DS on a second server, I enter my credentials and the domain, and the domain is shown. I choose it, but when I click ...
2
votes
1answer
40 views

Install Active Directory PowerShell module on Windows Server 2012

I need to install the AD PowerShell module on Windows Server 2012 but I can't afford for the server to restart during business hours. My question is can the AD module be installed from Add/Remove ...
1
vote
2answers
53 views

Replace DC/DNS in Active Directory

I have just tried to replace one of my domain controllers in a single domain forest keeping the old IP (But a new computername). As this is an environment I have "inherited" from a previous sysadmin I ...
1
vote
1answer
21 views

Disable anonymous bind to an Active Directory on Windows Server 2012R2

I have set up Active Directory on a Windows 2012R2 machine. I have been trying to disable Anonymous Binding to the AD but have not yet figured out how to do that. As a result, I am able to do bind to ...
0
votes
1answer
1k views

Cannot connect to domain error: The format of specified network name is invalid

I cannot connect clients to sbs2003 domain because of this error: The format of specified network name is invalid. Before that there is a prompt for a login and password, so the server is found. I ...
0
votes
1answer
1k views

Windows Server 2008 R2 hangs when Editing folder permissions

Background: The server in question is a member of a domain. This is a brand new server, freshly installed. I can log into this server using any domain user (which tells me that on some level it is ...
1
vote
2answers
39 views

create my own active directory in a EC2 instance of Windows 2012 in AWS?

I have been using Azure where I could use one of the Windows VM as a domain server with AD sitting in subnet 1 while others VMs sit on the subnet 2. So far so good. Now I am building the similar VMs, ...
0
votes
2answers
14 views

Is it possible to delegate AD FS admin functions via a web interface?

I am looking at IAM for a SaaS application. The application will have client organisations accessing it and each organisation will want to manage their own users, permissions and roles. Of course only ...
3
votes
5answers
3k views

Is it possible for an AD domain's DNS name to point to a web server instead of the DCs?

My active directory domain's name is "mywebsite.com" instead of "mywebsite.local". I had to do this as a workaround to other issues, and to change it will be a pain. When people inside of my company ...
1
vote
1answer
46 views

Why is ping not returning local DNS cache result? (Using DNS caching server on an internal network.)

Yet another post about this nslookup works but ping does not. I’ve read a handful of forum posts but could not find anything relevant to my setup and problem, of resolving external domain names on an ...
2
votes
3answers
168 views

Windows Hosts DNS query for _ldap._tcp.domaincontroller, is this normal?

To make this easier to wrap my head around, here's what I'm using in my examples: deecee = my domain controller dctoo = another domain controller internal.foo.bar = the full DNSDomainName of ...
0
votes
0answers
20 views

Group Managed Service Accounts: -PrincipalsAllowedToRetrieveManagedPassword

So the documentation for creating gMSAs says that the parameter "-PrincipalsAllowedToRetrieveManagedPassword" should restrict the ability of using the gMSA to the machines that are part of the ...
0
votes
2answers
27 views

disable logon to active directory with a blank password

I have set up Active Directory on a Windows Server 2012R2 instance. I have written a basic application which I use to authenticate to the AD. Basic authentication works, but I noticed that I am able ...
5
votes
1answer
1k views

Exchange 2010 Auto-mapping mailboxes feature doesn't work when groups grant permissions

I have a shared mailbox that I need to deploy to one of our departments in an Exchange 2010 SP2 environment with Outlook 2010 clients. I'm trying to rely on the auto-mapping feature introduced by ...
1
vote
1answer
1k views

Computers in site not authenticating on RODC

I have 2 networks : 172.33.0.x : My internal network 192.168.1.x : My DMZ network I have a DC in the internal network for my domain, and a RODC in the DMZ for the same domain. A firewall exists ...
4
votes
1answer
30 views

Re-install ADCS CA Certificate & CRL on Workstation

I installed Active Directory Certificate Services and created a Standalone CA. Everything went fine and it automatically installed the CA certificate and CRL on all my domain workstations. On one of ...
3
votes
1answer
1k views

Automatically refresh credential after password change

Lets say we have around 300 Windows XP machines on our ActiveDirectory domain that are used for processing something. Each has an account which is patterned on the machines name. As these are ...
0
votes
1answer
25 views

How to block incoming ports using group policy in active directory windows server 2012

We have a domain, and there are some computers in this domain. we applied some many policies like password policy and etc to this domain which makes it easier for us to control the use PC in our ...
3
votes
2answers
2k views

SharePoint 2013 Active Directory Group not working

Just setup a new 2013 SharePoint...Put a handful of users in an AD group that was then put in the SP site members group. Works perfect for most people, but some are getting access denied messages to ...
8
votes
5answers
25k views

How can I clear cached domain credentials?

Related: How can I enable domain authentication over wireless in Windows 7/2k8? To test the domain login over wireless connection feature I'm trying to set up in the above question, I need an ...
2
votes
1answer
28 views

Prevent windows from assigning certain drive letters

After configuring our network to use certain drive letters, I bumped into a problem when at some times, some of our users plugs one or two USB disks to the computer before boot. Windows then, ...
8
votes
3answers
2k views

Advice on Active Directory design for multihomed servers

I've been tasked by a customer to come up with a working Active Directory design for a scenario with the following requirements (simplified, they are actually a lot worse): There is a subnet for ...
2
votes
1answer
7 views

Configure startup programs for a user AD-wide

Sorry if this has been asked before, neither the search feature here, or Google was of any help. I'd like to configure startup programs for my own AD user that run whenever I login on any computer in ...
0
votes
2answers
79 views

Setting Windows Server Roles Between Servers

I need to know what is the best way to assign windows server roles and duties among servers. Right now I've got four servers: OldServer1: Xeon 3.4GHz, 4GB, 3x146GB SCSI, Windows Server 2003 R2 ...
0
votes
2answers
54 views

WIN 2012 DNS Issue

I am troubleshooting an issue with the dns server on the main DC in our forest. I ended up at this point while trying to get a second controller up and running. Current results for dcdiag /test:dns ...
0
votes
1answer
25 views

Active Directory in EC2: Can't create new users

I'm trying to set up a series of EC2 instances running Windows Server 2012 connected with Active Directory. This is a new AWS account and I've only done the following: created a VPC with a public and ...
1
vote
1answer
1k views

Unable to remove userphotos from users/mailboxes in Exchange 2013

I'm trying to remove user photos from all users/mailboxes in Exchange 2013. Documentation is hard to find, most of the documentation seems to refer to previous versions of Exchange, and the methods ...