A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

4
votes
3answers
569 views

update to samba 3.6.23-30 on RedHat server 6.7 breaks connections from clients on AD forest

I have a Samba server (version 3.6.23-30) running on a RedHat Enterprise sever version 6.7. It is joined to Active Directory, and authentifies the users to AD. Winbind is not running ("Winbind is not ...
1
vote
3answers
40 views

Store GPO Scripts in Netlogon or Policy Folder?

Is it best practice to store logon scripts centrally in \\DOMAIN\Netlogon or in the policy folder they get put in by default, eg. ...
0
votes
0answers
8 views

How can I change the default location of the Adobe Premiere Pro (creative cloud) media cache location?

Adobe Premiere Pro on Windows machines stores its 'media cache' files in the %appdata% directory. On our network, this is redirected to a server share, and consumes significant amounts of storage ...
0
votes
1answer
1k views

Issue connecting to AD FS configuration database

I just installed the AD FS role on my DC using the Windows Internal Database. All seemed to be fine after I set everything up, however, once I restarted my DC, when attempting to load the AD FS ...
-4
votes
1answer
36 views

Change computer (AD member) password on second computer (VM with the same SID) [on hold]

I have a laptop that is connected to an AD. It tends to be slow so I converted it to a VMWare virtual machine that I can run on my home office desktop. The VM has the same SID as the physical machine. ...
0
votes
0answers
17 views

All options greyed out when trying to configure Active Directory Domain Services Windows Server 2012 R2

I am configuring the first domain controller for a new domain. The install of Active Directory Domain Services seemed to go ok, but when I attempt to configure the domain controller it gets stuck on ...
0
votes
2answers
2k views

Autoenrollment Feature Cannot Reach Active Directory

I'm getting the following error message a couple of computers: Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does ...
1
vote
2answers
1k views

How to avoid frequent KVNO increases, when using Apache HTTPD with mod_auth_kerb talking to AD?

I've setup Apache HTTPD 2.4 with mod_auth_kerb, created a service account on Active Directory, added a SPN for my http hostname, created a keytab file on the linux machine, and had SSO start working ...
2
votes
2answers
54 views

Permissions reset?

I am a developer and I have a Windows Server 2012 development environment. Nothing special, onlyAD and a WebServer are installed on it. Everything is configured with the default values. When I do the ...
0
votes
0answers
10 views

Must change password during password change AD on SVR 2003

I have a Server 2003 AD (going to be replaced next quarter) with around 100 users, only around 50 or so are active. I've noticed that in the past month, any time a user password expires they are ...
0
votes
0answers
21 views

Active directory failed connectivity in dcdiag

I have been having some trouble with Active Directory on Windows Server 2012 R2. After doing a dcdiag I can see a fail at the top of the report. This dcdiag was run on the server itself, not a ...
2
votes
0answers
32 views

NTFS: User can edit/delete files without rights

I have a very strange NTFS rights phenomenon on a fileserver and I cannot find my mistake, pulling my hair out for hours now. What am I missing? My goal is: User from Group-A should be able to ...
0
votes
0answers
10 views

Redirect outgoing ports in windows [on hold]

first of all this is my first post so I want to say hello to this community. I want to create an Active Directoy server at home, just to learn how to do it. At home I have configured the server but ...
0
votes
1answer
27 views

Samba file server on Windows Domain can't authenticate users - gives “credentials chain check failed”

I have two TurnKey Linux Fileserver 13 (basically Debian 7.3) running Samba to share folders on our mostly-Windows LAN. Samba is configured to authenticate users using Active Directory on our domain ...
1
vote
0answers
18 views

Find Active Directory Groups for a specific location

I am a system admin for a site that I inherited from a previous admin. I am currently trying to determine what AD Groups are associated with this site (access to servers, other resources) so I can do ...
4
votes
1answer
4k views

Cannot login with cached credentials when laptop is locked and off the network

So when the computer is in the domain, everything is fine. When the computer is locked and not connected to the network, it will not login using cached credentials. However, if the laptop is ...
2
votes
1answer
17 views

System State Backup on Domain Controller

I wanted to do a one-time full server backup of the Domain Controller. However, there was almost 1 TB of data to backup. So I am just doing a System State backup instead, which is less than 5 GB. At ...
0
votes
1answer
1k views

Getting “403 - Forbidden: Access is denied” when hitting the URL without “www” prefix

I'm facing problem in my domain area. when i hit for example http://abc.com then I'm not able to access the site which are hosted on my domain. It gives the below error 403 - Forbidden: Access is ...
0
votes
1answer
27 views

How to secure AD administration with MFA

I'm evaluating an MFA solution such as Duo or Okta (any one have an opinion on that?). Adding MFA to web logins is straight forward but I want to add another layer of security to our Active Directory ...
1
vote
1answer
25 views

Apache LDAP (Active Directory) not working

I've had some mixed success with Apache and LDAP. First, it is working.. but not entirely. So, a basic LDAP config, it looks like this: AuthLDAPBindDN "omitting this" AuthLDAPBindPassword ...
1
vote
0answers
23 views

Windows Active Directory and Linux integration: new AD Group does not show up in Linux

In my organization, the support team has created a new AD group for me but it does not show up on any of the nodes in our cluster(using RHEL). I went through this article to understand Windows and ...
1
vote
1answer
1k views

Server 2008 R2 ADUC - Naming information cannot be located

I'm having a very hard time with Active Directory. Brand new server with a fresh install of Windows Server 2008 R2 - SP1; Everything was fine until it restarted after installing updates. When I try ...
0
votes
1answer
10 views

Dsquery group –name A* --> dsquery failed:'A*' is an unknown parameter

From here: http://ss64.com/nt/dsquery-group.html Examples Find all groups on the current domain with a name that starts with 'Admin' C:\> dsquery group -name Admin* Find all groups in the ...
1
vote
1answer
328 views

How do I migrate, and rename a computer using ADMT command line?

I've checked all the ADMT documentation, experimented with negative results and am unable to get ADMT to rename a computer during a migration. The command I'm using is: C:\admt>admt computer ...
0
votes
1answer
1k views

Active Directory Domain Service started then stopped after dcpromo

I use Windows Server 2008 to install Active Directory follow this guide After a restart, I can only login to local account,not domain account due to the error No logon server are available! I check ...
1
vote
1answer
1k views

Removing a cloned virtual machine from an AD domain

Scenario: we're in the process of setting up central virtualised server that acts as a demonstration environment. This VM (running Windows 7) will be cloned and put on sales laptops so demonstrations ...
0
votes
0answers
26 views

Powershell to find conflict objects in Active Directory

We are doing AD remediation in our enviornment with ADRAP tool and received lot of errors. One of the error where I stuck is Conflict Objects. Below is the description. When two or more objects with ...
0
votes
0answers
36 views

Windows Server 2012 has stopped accepting new wksts joining our domain, error 53: the network path was not found

We have Windows Server 2012 R2 Standard as our DC. Several workstations were added to our domain successfully. But then (I cannot determine what exactly could be a show-stopper) it stopped accepting ...
0
votes
1answer
1k views

Find deleted Organizational Unit Windows Server 2008 R2

I really need help right now. In AD DC one of our organizational units named "Columbus" is missing. It has Users in the unit, and now the Users and the Organizational unit is now missing. I searched ...
1
vote
3answers
4k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
-6
votes
3answers
91 views

How to set up Active Directory in windows 7? [on hold]

I just installed Remote Server Administrative Tools (RSAT) on windows 7, and turned features on as mentioned in the installation guide. Now the Administrative Tools have been installed and ...
7
votes
4answers
34k views

Can't give 'send-as' permissions in Exchange 2010

I'm trying to give 'send-as' permissions to one user in Exchange 2010. Here is the Powershell command I'm running: Add-ADPermission "User1" -User "Ourdomain\User2" -Extendedrights "Send As" ...
0
votes
2answers
1k views

ldap query with nested group

I try to build a ldap query to MS Active Directory. I found that there is a LDAP_MATCHING_RULE_IN_CHAIN type to do so. Which results in the follow syntax: ...
0
votes
1answer
36 views

Bulk converting AD groupscope from domain local to universal

I have been testing the following command to convert individual "global groups" to "universal", it works fine. dsmod group <GroupDN> -scope {L|G|U} However, is there a way to convert a whole ...
0
votes
1answer
30 views

How do you get detailed information on Active Directory logon failures?

In my domain controller event log, I'm getting an account failure from a username of a service account. The info is: Security ID: DOMAIN\serviceaccount Account Name: serviceaccount Additional ...
-1
votes
0answers
29 views

Noob Q: Active Directory GPO not applied immediately

What are the reasons why a GPO could take multiple days to apply? What I'm doing is adding servers to a group. The group has a GPO applied to it which determines the members of the Administrators ...
6
votes
1answer
11k views

What does the user icon with the little red up arrow in AD mean?

When looking at the members of a group in AD there are normal members (singe head icon) groups (two heads icon) and then Anonymous Logon / Authenticated Users and Everyone which share an icon which is ...
126
votes
6answers
171k views

How can I find out what AD groups I'm a member of?

I'm running a Windows XP desktop in a corporate environment. How can I find out what AD groups I belong to?
0
votes
1answer
26 views

Buffalo Linkstation(NAS) Joining Active Directory

I am using Windows Sever 2008. I have 2 Buffalo Linkstation and there are same problem. Cannot to join Active Directory Domain Failed to join Active Directory Domain. Please confirm the Active ...
0
votes
1answer
2k views

sharepoint 2013 user profile sync permissions problems

I’m trying to stand up a new SharePoint 2013 farm. I've got an issue where we aren't syncing all of the user properties between sharepoint and AD, and it’s the email properties in particular that I’m ...
0
votes
1answer
36 views

Roaming Administrator Profile

I have a 2012 R2 AD server running 100%. A certain group of users need to be able to run programs that require elevation and install programs as needed. I have tried making the user a member of ...
1
vote
1answer
40 views

Check If A Service Account Has Logon Interactive Privileges

I want to loop over all my domain service accounts and make sure that people can't log on the server using that account. How can I check if a service account has interactive logon privileges and/or ...
-1
votes
0answers
30 views

Config passwordhook.dll in ws 2012 r2

Do you have any ideas how I should configure the "Environment" value in passwordhook.dll ? The available documentation for this dll is not so good. Right now, I'm using my Path from Environment ...
0
votes
0answers
44 views

How to open FileZilla Client in windows explorer?

We have a shared drive (windows 7), and I want to set up a server-client FTP system on office local network, so that people can have access to different folders or sub-folders with permission. I ...
1
vote
1answer
2k views

Computers in site not authenticating on RODC

I have 2 networks : 172.33.0.x : My internal network 192.168.1.x : My DMZ network I have a DC in the internal network for my domain, and a RODC in the DMZ for the same domain. A firewall exists ...
2
votes
0answers
463 views

EDB log files accumulating on Windows 2003 DC

We have a domain controller that has over 4,000 edb*.log files since 11/29/10. Our other DCs have one file. The kb247715 article discusses how the edb logs work. Clearly something isn't right on the ...
0
votes
1answer
18 views

Cannot login anywhere on domain: Profile cannot be loaded

I'm having this issue with one of our users. This is a roaming profile, and I've tried logging in on a few machines, but we're still getting the same error. I did go through cleaning folders and the ...
3
votes
1answer
1k views

Set up trust between Azure AD and local AD

We are moving some VM's and Cloud Services into Azure, but we need those services to still connect back to the AD of our partner. I'm a developer, not a sysadmin, so I'm not sure how to do this, or if ...
4
votes
1answer
936 views

Windows Server 2003 DC migration to 2 x 2012 R2 DCs - DCDiag error = Advertising: SERVER IS NOT RESPONDING or IS NOT CONSIDERED SUITABLE

We are upgrading our single 2003 domain controller (DC1) to two 2012 R2 controllers (DC2 in Sevenoaks and DC3 in Manchester (different site in Sites and Services for Manchester)). DCpromo (the wizard ...
2
votes
1answer
33 views

What are some issues with setting up a new AD Forest with a DNS name under an existing AD Forest?

Active Directory Forest A exists as domain.net, with child domains of nam.domain.net, eur.domain.net etc. Forest B needs to be raised. What issues could arise from setting this up as msg.domain.net? ...