A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
1k views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
0
votes
0answers
3 views

Samba on Simply Mepis 1.5G can't join Active Directory domain

As a proof of concept I have Simply Mepis 1.5G (the Linux Box) running on an Oracle VirtualBox. Also on the Network I have a Windows Vista for Business Laptop and a Windows 7 Professional Laptop. I ...
1
vote
1answer
2k views

Exchange 2013 really slow outside of localhost

We've got a 12 core xeon, 24GB of ram 2012 server. We've recently migrated from exchange 2010 (which was on another server) to exchange 2013 which resides on our new 12 core server. Accessing the OWA ...
2
votes
1answer
2k views

Nagios NRPE plugin check_ad - Fixed

i've reading about this problem much and trying to solve it on my own ways but still not luck. I've running debian 7 as nagios server. Problem is that i cant check state of my Active Directory Domain ...
3
votes
2answers
1k views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
0
votes
1answer
15 views

Granular permissions needed to take Active Directory snapshot

Short and sweet, I am using ntdsutil in a script/scheduled task to take AD snapshots. The service account running the scheduled task is in the Domain Admins group so its gets proper permissions. I ...
0
votes
0answers
18 views
+50

“HTTP 503 - Service Unavailable” when trying to access ADFS password change page from an external network

I'm using ADFS 3.0 federated domain (SSO with Office-365) and I've successfully set up the password change page to work from any workplace joined device. I'm currently trying to set it up to be ...
-2
votes
0answers
22 views

Add New DC on Different domain

We have acquired an organisation with Vpn tunnel we are able to access each others network in a few days we are going to establish trust relationship But before that we are going to install a ...
0
votes
1answer
34 views

WIndows Active directory log

Hi im trying to log all the logins failed and correct from my users accounts for audit purposes (only username and time) is there a way I can do it with my windows active directory ? best regards
1
vote
1answer
26 views

Get full access to all properties in ADSI-Editor

I want to manipulate the properties of some users for testing puroposes with 'adsiedit.msc'. Is there a way to get full access to edit these values. For example i need to edit the lastLogon or ...
0
votes
1answer
25 views

Windows server 2003 DNS Issue. I cannot open a specific external website from internal Domain

Our public website was hacked and Google blacklisted it. We have fixed and it's visible for the public. This morning I wanted to see the site from our internal domain and I couldn't open it. Chrome ...
-1
votes
1answer
34 views

How to hide 'Shut down' button from an AD group assigned in local Administrators group (Windows Server)?

Basically I need to grant a group full local administrative permissions but hide or disable the shutdown button for them in the start menu. We have Windows servers from 2008 to 2012. I did my ...
4
votes
3answers
4k views

Quick-n-Easy way to remove outdated ActiveDirectory users?

We have around 70 current employees, but 178 accounts in ActiveDirectory. The prior administrators never removed old accounts, and sometimes they weren't even disabled. As it is, I am considering ...
1
vote
1answer
20 views

Clients can't update dNSHostName attribute after DNS suffix change

We have a bunch of Windows 7 and Windows Vista clients that belong to domain contoso.com. The clients are registered in DNS to client.contoso.com. We have changed the DNS suffix via GPO from ...
1
vote
3answers
87 views

AD Dynamic DNS Updates not triggering on clients

The problem Recently the computers at our organization moved to a new AD domain, due to a merger. We are having problems getting the clients to dynamically register their DNS records in our ...
0
votes
0answers
14 views

Allow Administrators to Override Device Installation Restrictions

I am trying to set up our Active Directory domain to lock down unauthorised hardware installation. I am testing the Device Installation Restrictions in Group Policy, using the settings under Computer ...
1
vote
1answer
1k views

Activating Windows 7 with MAK passed in Unattend.xml via WDS

I have configured WDS to deploy a Windows 7 Pro image (Volume Licensed) and I'm using an unattend.xml file for the configuration. The only problem I'm running into is activation. I'm passing a MAK ...
2
votes
2answers
2k views

How do I apply WinHTTP proxy settings domain-wide?

We're already configuring Internet Explorer proxy settings through group policy and it works great. Sadly, I've recently run into multiple issues where those settings are ignored by certain services. ...
-2
votes
0answers
22 views

Stub zone or conditional forwarders?

We have main domain name abc.local and 3 sub domains 1abc.l0cal 2abc.local 3abc.local we acquired a company who has domain name xyz.local How do we start add to trust relationship by adding a ...
-1
votes
0answers
21 views

Sysvol Folder in 2008 server

Hi we have many clients with Ad as server 2003, recently we have started adding 2008 as ADC. Now I see in server 2008 sysvol folders are empty is there something to worry? how to fix this in my ...
-2
votes
0answers
8 views

home and vmware lab on same subnet (AD) [migrated]

I have a question about network topology. Namely, I wanted to set up a cluster vmware for testing SQL Server: fail over, always-on etc ... But I do not know how to reconcile this with your home ...
4
votes
1answer
91 views

How to disable all the admins accounts except built-in administrator on a domain?

Suppose that an administrator for a domain is fired and you are now the new administrator of a windows 2012 server. While managing the network, something tells you that some people are using local ...
0
votes
1answer
1k views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
3
votes
2answers
642 views

Extraneous _msdcs. forward lookup zone failing replication, how do I check what uses it? and can I delete it?

We run Active directory on windows server 2008 and 2008 R2 in 2008 AD mode. Our DNS is part of the AD and runs on the same servers as the Global Catalogue. My predecessor created the environment ...
4
votes
1answer
1k views

Why does a SPN on a different host cause a server to lose its trust? How should I fix it?

I have a brand new server image that loses its trust as soon as it's joined to the domain. I suspect it's because of the duplicate SPN I discovered using the LDAP version of this Powershell script ...
3
votes
1answer
4k views

Troubles with sssd and Active Directory Integration

I have Debian Squeeze and sssd installed. When I try to login to server by user 'alexwinner' by ssh I see in the log: (Fri May 11 18:56:03 2012) [[sssd[krb5_child[26281]]]] [get_and_save_tgt] (1): ...
3
votes
1answer
82 views

DC locator service (Server 2008R2/2012) - what triggers switching to alternative DC

I'm wondering how frequently DC locator checks availability of domain controller it is connected to. I assume it picks domain controller upon startup, but I'm not sure about the following: - How often ...
2
votes
4answers
12k views

Finding all users who are local admin on domain

In our windows 2003 domain there are a few computers where domain users are member of the local administrator group. I am looking for the best way to create a list of all the computers where this is ...
3
votes
2answers
67 views

Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain

I'm using federated identity for Office-365 single sign-on. I have added the password change endpoint to my ADFS 3.0 server, and successfully opened the adfs update password page. However, whenever I ...
0
votes
0answers
13 views

Active Directory DDNS update with a DNS Hidden Master

Active Directory queries DNS server for a SOA(master DNS) record before sending out Dynamic DNS updates to the master DNS. Would AD still work if we set up a hidden master for DNS ? Usually Hidden ...
1
vote
0answers
11 views

ADSI Editor modifiedCount explanation

I would like to adjust the properties for my DC in ADSI Editor but I'm not sure what the "modifiedCount" property means. I couldn't find documentations online to explain this. Would appreciate your ...
-3
votes
0answers
12 views

I have server 2008 r2 & suddenly gpo starting giving error to give access in all accounts & repeatedly disables the Administrator account also

I have server 2008 r2 & suddenly gpo starting giving error to give access in all accounts & repeatedly disables the Administrator account also, any suggestions ? Thanks in advance...
0
votes
2answers
2k views

Cannot connect to domain error: The format of specified network name is invalid

I cannot connect clients to sbs2003 domain because of this error: The format of specified network name is invalid. Before that there is a prompt for a login and password, so the server is found. I ...
1
vote
2answers
37 views

Server 2008 R2 PS script cannot update Active Directory

I have a Powershell script that updates users attributes in Active Directory that runs just fine from the PowerShell ISE. However when I try to run the script as a scheduled task it cannot access ...
0
votes
1answer
26 views

AWS Server 2012 R2, adding clients

I have a AWS machine running MS server 2012 R2. Setting up as a domain controller. I have both public and private IP address associated with the machine. the internal network is on 172.xxx.xxx.xxx ...
3
votes
3answers
194 views

DNS resolution issues until Windows DNS service is restarted

I am managing a pair of Windows 2008 R2 Enterprise SP1 domain controllers with AD integrated DNS. We occasionally see member servers in the local domain intermittently fail to resolve an internet DNS ...
0
votes
0answers
26 views

Apache Kerberos auth prompts user for password

I am trying to setup single-sign on against our Active Directory server for my Apache using the mod_auth_kerb module. I have the following configuration in Apache: AuthType Kerberos AuthName ...
1
vote
1answer
27 views

Windows Security Policy not Updating - Admin templates work fine

I have a domain with a mix of physical and virtual servers. Some time ago another admin may have performed some manual scripted updates at the client level that are now preventing changes in the ...
0
votes
0answers
19 views

Unable to join domain [on hold]

I am having difficulty connecting my laptop to my domain. I have recently set up a domain controller in my flat but, when I try and connect to it using my machine, it says "An attempt to resolve the ...
0
votes
0answers
21 views

Active Directory Corruption

We are looking at the topic of DR at the moment and I would like your expert help in the creation of a DR plan in the event that our Active Directory somehow becomes corrupt. We have 4 domain ...
0
votes
1answer
31 views

multi instance failover clustering (sql server)

just want to straighten my concept properly - when we are talking about SQL multi instance failover cluster, e.g. on a 2 node cluster, it means that each node can run its own sql instance, but each ...
3
votes
1answer
57 views

How convince Security auditors to change frequent password change policy?

I am a new Junior IT Manager in a small company of around 500 employees and the current policy regarding passwords has enforced password expiration within 30 days, with a password history of 5. As ...
0
votes
1answer
2k views

Security-Kerberos Error, event ID 4

I have two new Domain Controllers on new Forest. Servers have DFS and IIS services installed. Everything seemed to go Ok for a While. After updating servers I got new errors. Now once in hour ...
3
votes
1answer
667 views

what happens when a domain functional level is set lower than forest functional level?

For. e.g When a forest functional level is set to windows 2008, what happens if a domain functional level is set to windows 2003? My question is, why does the rule says domain FL should be >= forest ...
-2
votes
1answer
37 views

Active directory overwriting existing computers [duplicate]

while adding another user with same computer name active directory i overwriting old one. Is there any way to prevent this? I mean can i get some message or access denied when i try to add second ...
-2
votes
0answers
30 views

2 nodes Fail over cluster with vSAN, Virtualizing DC and Secondery DC [closed]

I am building a new network for a small office from scratch (aproximetly 40-50 computers) They need: 1)-Domain Controler 2)-MS Exechange Server 3)-File Server 4)-SQL/Database Server "Not Too Much ...
1
vote
4answers
2k views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
-2
votes
1answer
37 views

How to Map Network Drives Using Logon Scripts & Group Policy Objects? [on hold]

I want to know how do I map network drives using the logon script method and the group policy objects method? If anyone could post me a in depth answer for going about these methods and explaining the ...
0
votes
2answers
41 views

Powershell command regarding AD groups

We have a security group, SQL DBA. I need to know all servers that are part of this group. Is this possible? I'm a backup admin, just starting to learn AD/Windows, so apologize if its a stupid ...
6
votes
1answer
4k views

How to connect AD Explorer from Sysinternals to Global Catalog

I'm using the sysinternals AD Explorer quite frequently to search and inspect an Active Directory without any big problems. But now i'd like to connect not only to a single AD Server. Instead i like ...