A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
2answers
28 views

Active Directory Users Delegated Permissions

This is probably a dumb question, but how does the delegated user access ad to make these changes? I have set this up but a user cannot launch the active directory users and groups tool. Only admins ...
1
vote
1answer
896 views

AD sync to Azure AD: “AccountEnabled” is invalid

I am syncing our local AD (from SBS 2011) to Azure AD using the DirSync tool, but since a few days I get an error like the following (translated from local language): The object can't be updated ...
2
votes
1answer
1k views

How to check WSUS server updates downloaded size?

How can I check the updates size which were downloaded in WSUS? For example I need to check the updates size downloaded of April 9, 2013 for new 26 updates. And how can I locale the new updates on ...
0
votes
1answer
88 views

Nslookup not working in Active Directory on Windows Server 2012 R2

A few days ago, a colleague had to hard reset one of our servers runnning Windows Server 2012 R2. This server is in our Active Directory and has two DNS servers configured. After that reset, the ...
0
votes
2answers
43 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
3
votes
1answer
2k views

Domain Trust 2008 to 2003

I'm having trouble setting up the trust relationship between a Windows Server 2003 and a Windows Server 2008 AD. Domain a is Windows Server 2003 Forest functional level. Domain b is a Windows Server ...
2
votes
1answer
5k views

SquidGuard and Active Directory: how to deal with multiple groups?

I'm setting up SquidGuard (1.4) to validate users against an Active Directory domain and apply ACLs based on group membership; this is an example of my squidGuard.conf: src AD_Group_A { ...
2
votes
1answer
3k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
0
votes
1answer
911 views

Active Directory DNS issue? Event ID 13 Access Denied,

Okay this is kind of a rehash of a prior post. (Clustered Storage Error: There are currently no logon servers available to service the login request) due to my belief that it is unrelated to the ...
3
votes
0answers
122 views

Windows 2012 Master & Ubuntu Bind 9 Slave & SOA

I'm kinda like the maid... I don't do Windows. But thanks to new things we're implementing, I'm now attempting replicating a single zone from our AD cluster. We had this working just fine but ...
-1
votes
1answer
12 views

Migrating an Active Directory hub and spoke workplace to an Office 365 and a cloud AD solution

Hi Serverfault / Stack Exchange Community, I was looking for a few points of view on a solution that I am working on for a SMB to be more mobile that is about 40-50 people in size. They are ...
-3
votes
1answer
22 views

How to list OrganisationalUnits (OU's) in Active Directory with the count of users in each OU? [on hold]

I want to export the list of OU's within our organization alongside their number of users they have. So far I managed to get the list of OU's with Get-ADOrganizationalUnit -filter * | Sort-object ...
1
vote
1answer
25 views

Domain names on 2 similar windows domains (active directory)

I am fairly new to windows administration (Server 2008r2), but I am putting together a new environment, and am setting up active directory domains. I have broken my system into 2 parts, management ...
0
votes
1answer
15 views

Can a base DN for LDAP queries be a group DN?

I am trying to do LDAP integration for user authentication in HP NNMi. (NNMi on RHEL6 to Active Directory on W2K8 R2) I know I can get it to work if I use the OU that my users are in as the base DN ...
0
votes
1answer
2k views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
1
vote
3answers
3k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
2
votes
2answers
38 views

How to remove an orphaned Child Domain on Server 2012

I have a domain (working on Server 2012 functional level) and multiple child domains. I'm really stupid and therefore deleted the only domain controller on the child domain before demoting it and ...
5
votes
1answer
624 views

How to add custom OID for subject field on certificates issued by Windows Server 2008 R2 CA?

I'm using a Windows Server 2008 R2 domain controller with Active Directory Certificate Services installed. It's configured as an Enterprise Root CA. I have configured a custom certificate template so ...
1
vote
1answer
22 views

Do Explicit Deny ACLs apply to a Domain Administrator account?

I've had a need come in a client with a two way trust (source company doesn't want us to have full admin rights, so we're having lots of permissions issues). We effectively need Domain Admin rights ...
1
vote
1answer
1k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
1
vote
1answer
23 views

authentication error on WS2012 (trust relationship failed)

Given the following lab setup: HOST1 on Windows Server 2012 R2 (host running Hyper-V, joined test.local domain, static IP) DC1 on Windows Server 2012 (VM under Hyper-V on HOST1, AD and DNS roles, all ...
2
votes
2answers
29 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
0
votes
4answers
2k views

Bizarre - Domain Admin has no rights to modify domain scripts directory

Here is a quickie that has had me scratching my head. Not a showstopper, so an answer isn’t urgent, but still. I am trying to modify the logon scripts directory to include a login script. I have gone ...
-1
votes
1answer
25 views

Place Date in Description when moved to different OU

I am not sure if this is possible, but i am wondering if i could create a powershell script that would move any/all users listed in a CSV file to a different OU and add the date in the Desription ...
3
votes
1answer
34 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin ...
-1
votes
0answers
13 views

Building a Paid Subscription Website [on hold]

I would like offer a paid subscription-based service to my family and friends through a website portal but I am not sure how to do this. I am thinking that I need a website portal that has a payment ...
-3
votes
0answers
23 views

Restoring a Win2000 AD domain from a Win2000 BDC?

This is where I landed, I have a Win2000 "DC" That in actuality is a BDC. My predecessor left it as is since it worked and he didn't have to redo the user profiles. I now want to upgrade to 2008, ...
14
votes
3answers
12k views

How to use Google Apps as an OD/AD/LDAP Provider

I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login. However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other ...
0
votes
0answers
9 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
2
votes
1answer
2k views

Windows 2008 R2 Server: Network zones (Public / Private / Domain) Seem to change randomly

So far on 2 occasions we have noticed that the network zones assigned to our server nics has been changed without any interaction on our part. This is out of a few hundred servers we manage. Case 1) ...
19
votes
3answers
43k views

Any difference between DOMAIN\username and username@domain.local?

I'm trying to troubleshoot an obscure authentication error and need some background information. Is there any difference between how Windows (and programs like Outlook) process DOMAIN\username and ...
3
votes
4answers
4k views

How can I logon to a user account on a domain without destroying user password?

I am the Domain Administrator. Is there a way I can log on to a workstation, as a User, without knowing their password? I know I can reset the user password from Active Directory. But say I did this, ...
-1
votes
0answers
11 views

subdomain working but not the main website

I am managing all my subdomains through ADC. I have created multiple sub and assigned them an IP in A record. They are all working. But when I ping or browse main website it is not working from ...
2
votes
2answers
2k views

New 2012 Domain Controller and error “The security database on the server does not have a computer account for this workstation trust relationship”

I have a Windows Server 2012 domain controller on a domain DOM1 running at a Windows Server 2008 R2 domain and functional level. All other domain controllers in DOM1 are 2008 R2. DOM1 has a two-way ...
-1
votes
2answers
3k views

How do I grant local administrator rights, but not Domain Administrator Rights?

How do I grant local administrator rights, but not Domain Administrator Rights? i.e. For user x, I want to grant install rights on the computer, but the user should not have Domain admin rights as I ...
2
votes
1answer
3k views

Can I add a Distribution List as a member to another Distribution List?

I'd like to add some distribution lists as members of a different distribution list to make things easier. Is this possible? If so, can somebody tell me how to set this up? Thanks in advance.
2
votes
1answer
3k views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
4
votes
1answer
2k views

Slow “applying computer settings” on workstation when I simulate domain controller being turned off that holds the FSMO roles in a two DC domain

Slight problem testing fail-over procedure with my two domain controllers. I have two domain controllers, DC1 and DC2. DC1 has all FSMO roles, is Active Directory integrated DNS DC2 is Active ...
0
votes
1answer
2k views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
2
votes
3answers
2k views

Powershell - Find users belonging to more than one AD group

I'm new to AD and Powershell so please forgive me if I use the wrong terminology. I have a series of 50+ Active Directory groups called "ABC-something". Every active user needs to belong to exactly ...
0
votes
2answers
25k views

Windows Domain Controller/DNS Failure

I have a previous question up about this, but I've come to some new information and I figured I would start a new post to stir up some new discussion. To start, I will give you all a short ...
2
votes
0answers
188 views

LSA SID cache keeps old entry for renamed domain user - why?

I have a question about LSA SID cache on a domain member server. Recently I run into the issue when some users after their name was changed in AD has difficulties accessing application I support, and ...
3
votes
1answer
103 views

DNS settings for DCs in remote sites

I have our main DC here at the main site acting as the DNS server by itself, I have plans to put an additional one later. This is how its IP is configured DC1 IP: 10.10.5.201/24 Preferred DNS: ...
-2
votes
0answers
15 views

Searching users from another domain produces no results [on hold]

I am trying to add a user from another domain to grant permission to a folder but it seems it cannot contact the other domain since it doesn't give any results. What could be the possible cause of ...
4
votes
3answers
194 views

How to check who reset the password for a particular user in active directory on a windows server?

I have the details about a user account when it was last modified (a password reset was done). But I would be interested to know who reset the password for this user. Is there any way I can find this ...
-1
votes
1answer
50 views

Join domain on Samba DC with a Windows 7 client [closed]

i'm an IT apprentice and i'm new on this forum. I've a problem for join my samba domain. I use Samba 4.2.1 on debian 7.8 and i use a virtual machine on virtualbox. So the problem is when i'm trying ...
-1
votes
2answers
34 views

Add user to a group in Active Directory using powershell

I am trying to add a user to a group in AD using powershell. I am using the following command: Add-ADGroupMember -Identity ...
0
votes
1answer
24 views

How to deny access on files to several groups easily?

Currently I'm working with permissions on files on the network with Windows Server 2012 Active Directory as follows: I set up one domain controller, on the domain controller I create users and groups. ...
0
votes
3answers
2k views

RPC Server Unavailable When Trying to Join W2003 Server to W2003 Active Directory Domain

I have an Active Directory Domain with a Windows 2003 Standard SP2 Server as the DC. When trying to join an additional Windows 2003 Standard SP2 server to the domain I get message "The following error ...
2
votes
1answer
31 views

ADDS: Mandatory Profiles through powershell

Intro I'm a networking student from Belgium and I just got assigned a big project. Basicly i'm responsible for the ADDS. We have to create several OU's and every OU needs at least 20 users or more. ...