A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

8
votes
3answers
80k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: get-...
0
votes
0answers
4 views

RSOP and GPResult: Permission denied for local admin, but gpupdate works

I am on Win7 in Domain Network. I logged in using domain user which is in local administrators group, and I want to see list of group policies applied to my account / machine from DC. Running RSOP mmc ...
6
votes
1answer
50 views

Restructure Active Directory Forest Root Domain

We have a forest root domain of legacy_domain.loc, and another domain modern_domain.loc which exists in a structure similar to: legacy_domain.loc ----- modern_domain.loc | ...
0
votes
0answers
9 views

AD LDS - Can't enable LDAP over SSL

I have basically read some kilometers of documentation and I still can't enable LDAPS on AD LDS... I installed a self-signed certificate and a certification authority following for instance this link ...
0
votes
1answer
2k views

Issue connecting to AD FS configuration database

I just installed the AD FS role on my DC using the Windows Internal Database. All seemed to be fine after I set everything up, however, once I restarted my DC, when attempting to load the AD FS ...
0
votes
1answer
13 views

How to Delete Orphaned Domain

I am trying to remove child domain from parent domain therefore follow below link http://myblogs-amit.blogspot.com/2011/12/how-to-remove-default-trust_13.html Step01 to Step04 Successfully done but ...
1
vote
0answers
20 views

Recover from a deleted account that was used to install AD LDS

AD LDS was installed on a standalone Windows 2012 R2 server using a windows admin account named: adlds-admin However, that account has since been deleted by mistake. AD LDS is running fine. We ...
0
votes
0answers
12 views

How to enable NumLock on Windows 7/8/10 logon screen with GPO

I am currently migrating my company to Active Directory. Because my boss has enforced strong passwords, everyone needs to type at least one digit to log on their computers. Some of them have the ...
1
vote
2answers
43 views

Obtain a list of servers from AD on which a specific software is installed?

Is it possible to obtain a list of servers from within Active Directory on which a specific software is installed? For example, get all servers that have wampserver version 5 installed on them.
0
votes
2answers
2k views

Autoenrollment Feature Cannot Reach Active Directory

I'm getting the following error message a couple of computers: Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does ...
1
vote
1answer
3k views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
0
votes
2answers
69 views

Find Computer in AD from non-joined Windows 7

I have a powershell script we use for several things, when a new computer has been installed with Windows 7. We also use it on Windows 10, and it all works well. It runs at first login and the ...
0
votes
2answers
2k views

ldap query with nested group

I try to build a ldap query to MS Active Directory. I found that there is a LDAP_MATCHING_RULE_IN_CHAIN type to do so. Which results in the follow syntax: (&(sAMAccountName=Benna)(memberof:1.2....
0
votes
0answers
11 views

Can I manage sudoers from Open Directory?

I have configured Open Directory & integrated it with Microsoft Active Directory so that the users sync with Open Directory. Now I want to manage sudo commands from Open Directory. Is this ...
1
vote
1answer
41 views

Powershell change AD variable “PasswordLastSet”

Is it possible to edit the PasswordLastSet value via powershell (or any method?)? If that is not possible, is there anyway i can set so a users password (not account) expires in X amount of days. I ...
0
votes
1answer
2k views

Active Directory Domain Service started then stopped after dcpromo

I use Windows Server 2008 to install Active Directory follow this guide After a restart, I can only login to local account,not domain account due to the error No logon server are available! I check ...
-3
votes
0answers
16 views

server programm for Subversion Active Directory support [on hold]

I would like to start a svn server with active directory support like the VisualSVN but it should be for free. Additionally I needs to be hosted on Windows Server. I am also already happy for just a ...
1
vote
0answers
16 views

Active Directory, wildcard security certificate, and remote access

Is there any way to secure an entire Active Directory (AD) domain using a single trusted, third-party Certification Authority (CA)-signed wildcard security certificate so that remote access will be ...
1
vote
1answer
1k views

Server 2008 R2 ADUC - Naming information cannot be located

I'm having a very hard time with Active Directory. Brand new server with a fresh install of Windows Server 2008 R2 - SP1; Everything was fine until it restarted after installing updates. When I try ...
3
votes
1answer
3k views

can't add sharepoint users from trusted domain

I have a very strange problem with our Sharepoint 2007 implementation. I went in today to grant access to a user and was greeted with "The user does not exist or is not unique." Let me start off by ...
1
vote
2answers
40 views

Which Ports need to be accesable on a Domain Controller for Clients to logon?

We are currently segmenting our network. We will move the servers in another subnet than the clients. Of cause the clients still need access to the domain controller to authenticate against it. I ...
2
votes
2answers
179 views

Does a GPO apply if “Security Filtering” tab is empty, but there is a security group in Delegation which has Read and Apply right?

As in the subject, does a GPO apply if "Security Filtering" tab is empty, but there is security group in Delegation which has Read and Apply rights? Security Filtering tab says "The settings in this ...
3
votes
1answer
3k views

Domain Trust 2008 to 2003

I'm having trouble setting up the trust relationship between a Windows Server 2003 and a Windows Server 2008 AD. Domain a is Windows Server 2003 Forest functional level. Domain b is a Windows Server ...
0
votes
1answer
2k views

Find deleted Organizational Unit Windows Server 2008 R2

I really need help right now. In AD DC one of our organizational units named "Columbus" is missing. It has Users in the unit, and now the Users and the Organizational unit is now missing. I searched ...
1
vote
3answers
4k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
0
votes
0answers
19 views

Cannot join domain from different subnet

This is the first time I have encountered such a strange problem. I am not able to join my machines with domain. Here are details. Subnets: 192.168.1.0/24 192.168.2.0/24 both subnets can ...
3
votes
2answers
31 views

Does Active Directory send a user's access token across the network?

Question: does AD send a user's access token across the network? Research: The following two passages contradict themselves--given that TGTs are transmitted across the network by design. From the ...
0
votes
1answer
19 views

Delegate Specific rights to Helpdesk on AD

Domain Controller - Windows Server 2008 R2 standard I need to delegate only below task to helpdesk id for specific OU i.e 1) Creating User 2) and after creating that user, add them to specific ...
0
votes
1answer
1k views

Linux to authenticate using MS AD using samba

I am trying to complete a poc which needs linux server to connect to MS AD and authenticate using domain creds. After some reference, I felt samba would do good here and so I have installed and ...
0
votes
1answer
16 views

Can an Exchange Online distribution group be configured to forward mail to it's users alternate email?

I've been trying to figure out how to create a distribution list containing personal email addresses for all our staff. This could be done by adding each staff member as a mail contact with their ...
0
votes
0answers
18 views

“Move the contents of folder to the new location” not working

I have a GPO that applies to all of my users for folder redirection. The GPO is being processed and the folders are being redirected, however, the contents of the local profile folders are not being ...
0
votes
1answer
2k views

sharepoint 2013 user profile sync permissions problems

I’m trying to stand up a new SharePoint 2013 farm. I've got an issue where we aren't syncing all of the user properties between sharepoint and AD, and it’s the email properties in particular that I’m ...
0
votes
0answers
15 views

Active Directory on Server 2008, How do I Delegate the right to add WriteMembers ACL on AD group

$group = Get-ADgroup $Group_RW $groupDN = $group $Ruta = "AD:\"+ $GroupDN $acl = get-acl -Path $Ruta $SID = new-object System.Security.Principal.SecurityIdentifier $GrupoOUsuario.SID # The following ...
3
votes
1answer
37 views

Can I recover a bitlocker encrypted drive offline?

Windows 10, server 2012 R2 domain I'm confused about the options for recovering a bitlocker encrypted drive offline. Lets say I'm encrypting the HDDs of domain computers with bitlocker using TPM (...
0
votes
1answer
18 views

Generate duplicate Active directory on Server 2008 r2

Currently We are using window server 2008 r2 and installed Active directory on server, which working fine. Problem is that, Some of roles which are not working well(Can not install/uninstall roles), ...
0
votes
1answer
56 views

Seizing a domain from dead primary domain controller

My old Primary Domain Controller died after a series of power problems. I tried to follow this set of instructions http://kpytko.pl/active-directory-domain-services/seizing-fsmo-roles/ to get another ...
0
votes
0answers
13 views

Why is my sshd looking for a wrong kvno in keytab?

My FreeBSD box is using Heimdal Kerberos-implementation. It is registered with the corporate AD, its msDS-KeyVersionNumber-attribute is set to 2, and its keytab has the following entries: FILE:/etc/...
3
votes
1answer
2k views

Does Windows log a “Member removed” event for security groups when an AD user account is deleted?

We have AD DS security auditing enabled on a Windows Server 2008r2 functional level domain. We use a third party tool to alert us to changes to our administrative group memberships. We recently ...
0
votes
1answer
1k views

Migrate from MS Active Directory to Samba4

The target is to replicate a MS AD DC (Windows server 2012) to a new Samba4 AD DC, then migrate users to the new Samba domain. This is our first time, and the various documents on the Internet are not ...
1
vote
1answer
32 views

Writing a script to find what computer a user is logged into

So I want to specify a username and return the computer name. When I run this, it tells me that my $computers obj is null. Why would $computers = Get-ADComputer | where {$_.accountdisabled -eq $false}...
5
votes
1answer
4k views

Diagnosing slow active directory logins

I'm having a hard time diagnosing intermittent slow logins on domain PCs. A bit of information about the network that has this problem: My domain spans 5 sites, all with VPN connections. DCs are ...
1
vote
1answer
3k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
0
votes
0answers
12 views

Last Name attribute not available for Read/Write in Delegation of Control Wizard

I am using Active Directory Users and Computers version 6.1.7601.17514 I am attempting to delegate the ability for our HR users to edit the First and Last Name for user accounts in Active Directory. ...
2
votes
1answer
1k views

How do I query members of an Exchange distribution group using LDAP filter syntax?

I'm trying to use a couple of Exchange distribution lists for access to an application (the list, due to the culture at this particular enterprise, is kept more up to date with people moving in and ...
4
votes
2answers
49 views

Disable password complexity on Windows 2012 R2

I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only. I have created a group (called Formation) in AD to identify these ...
0
votes
1answer
1k views

Access denied trying to login to Ubuntu 14.04 (Authentication with Active Directory)

I'm trying to set up my Ubuntu 14.04 print server to authenticate users with my Active Directory server, I've followed all of the steps using the following tutorial: http://www.kiloroot.com/add-...
0
votes
1answer
29 views

Windows 7 client machine login without Ad connection

We Have a windows server 2012 and client domain machine is windows 7. The problem is the user can login from the windows 7 machine without the activedirectory connection.So how to prevent this login ? ...
0
votes
0answers
21 views

Security Filtering not working on group policy [duplicate]

I am trying to achieve something which should be theoretically straightforward: Group Policy Object called "Staff shared drives" applied to all users GPO contains a few drives mapped through User -> ...
0
votes
0answers
8 views

Can't add trusted domain's users to ACLs

I am currently testing external trusts as a way to share resources with another organisation we're very close to. The test environment includes 2 servers running 2012 R2. One for each domain with AD (...