A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
11 views

ADFS on Windows Server 2012R2 in Azure sptting “Not a valid Win32 FileTime” exception on passive authentication

I'm receiving this error logged under ADFS Tracing - Debug: ServiceHostManager.LogFailedAuthenticationInfo: Token of type 'http://schemas.microsoft.com/ws/2006/05/identitymodel/tokens/UserName' ...
0
votes
1answer
15 views

How to change Active Directory Forest name

I have an active directory forest that was set up as domain.example.com initially. I want the forest to be example.com and then have domain domain.example.com exist under the forest. Is there an easy ...
1
vote
1answer
1k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
0
votes
1answer
6 views

Windows 2012 R2 causes WMI Failures after install of Directory Sync Tool from Office 365

After installing Office 365 AD sync as referenced on Office 365, you may run into WMI errors on your server along with a ton of other errors. This issue has been driving me nuts on multiple client ...
0
votes
2answers
19 views

Is it possible to create a GPO which excludes servers?

Is it possible to create a Group Police Object which only applies to workstations. (Excludes Servers). If this is possible, can you please point me in the right direction to learning how to do it?
0
votes
1answer
94 views

Restoring read only domain controller from VM checkpoint

I have several RODC on remote sites, and sometimes power failures corrupts ADDS database which takes some time to recover. I'd like to move RODC to virtual machine (on same server) to be able in case ...
1
vote
2answers
533 views

How to logon with local account? RODC “There are no logon servers to process your request”

I have a site-to-site VPN, writeable DC in main office, Read-only DC in branch office. Today the VPN went down, but i couldn't log in to the read-only DC - the error message came up There are no ...
2
votes
4answers
201 views

RODC deployment

Is it useful to enhance security by implementing RODC in the same site, which RWDC exist also? Pointing the site user the RODC instead of the RWDC. Thanks.
0
votes
2answers
91 views

RODC password replication and A/D sites and subnets

I work at a school district with about 30 school sites. Windows 2008 A/D setup - all central at the district office. In A/D, all is under one site, and no subnets defined. One A/D forest and only one ...
0
votes
1answer
35 views

As DNS clients do DCs put more load on DNS servers than regular workstations?

All DCs in this example are running DNS and DFSR. Edit: this is a single domain with an AD integrated zone. I have a DC in a central location and 60 or 70 DCs each in different a branch office. ...
7
votes
4answers
875 views

When the internet is down, so is Active Directory?

I am setting up business servers for a small office use with 5 users / 5 devices or so. Nothing elaborate here. I've set up a SINGLE Lenovo TS440 server (single NIC) with Windows Server 2012 R2 ...
0
votes
0answers
13 views

Outlook, Exchange 2013, and Active Directory DNS

I am experiencing issues where Exchange Users (in Outlook clients and Outlook Web Access) can't navigate to, or access the Exchange Server. (Page cannot be displayed). It does however work outside of ...
2
votes
1answer
3k views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
-1
votes
1answer
5k views

How do I create a read only user for LDAP queries in Microsoft Active Directory for a PHP query program?

I want to create a user that can query LDAP on my Windows 2008 R2 Active Directory. It only works with Domain Admins. I read the Account Operators group will also work. Both these have write rights, ...
-1
votes
0answers
23 views

sub-domain and active directory

Please give your advice! I am trying to build a new BIND DNS(non-mircosoft) and create a sub-domain since: I have many hosts on DNS and use a lot of resources on specific domain/name-server, such as ...
0
votes
2answers
40 views

Active Directory crashed without backup or failover. Recreating from scratch

My Active Directory server crashed and I do not have a secondary DC, no RAID, no backup and the system disk is completely dead. I know it is bad and stupid to not have a backup but let's leave those ...
-2
votes
0answers
30 views

Domain admin unable to do admin tasks on workstations

Our domain administrator account has got a problem. When we try to run a certain program with out domain administrator it gives an error that the file is not found. If i run it with another account ...
1
vote
1answer
1k views

Exchange 2013 really slow outside of localhost

We've got a 12 core xeon, 24GB of ram 2012 server. We've recently migrated from exchange 2010 (which was on another server) to exchange 2013 which resides on our new 12 core server. Accessing the OWA ...
1
vote
1answer
30 views

AD SelfService for creating users

I've set up a small computer lab with approx. 30 computers with Win8. They are connected to an Active Directory (Windows Server 2012R2) and have roaming profiles. However, creating users causes ...
8
votes
5answers
11k views

Linux + Active directory authentication + only letting certain groups login

I have some linux boxes that use Windows Active Directory authentication, that works just fine (Samba + Winbind). What I would like to do now though is only allow certain people or certain groups to ...
0
votes
2answers
2k views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
1
vote
3answers
3k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
1
vote
1answer
28 views

AD administrator password out of sync between controllers and clients

I have found myself in an odd situation. I have a development network of 15 Windows 2012 R2 servers on a HyperV virtualisation server. There are two AD controllers for the single domain, and 13 ...
0
votes
3answers
3k views

RPC Server Unavailable When Trying to Join W2003 Server to W2003 Active Directory Domain

I have an Active Directory Domain with a Windows 2003 Standard SP2 Server as the DC. When trying to join an additional Windows 2003 Standard SP2 server to the domain I get message "The following error ...
0
votes
2answers
2k views

How do I restore Windows 2008R2 AD Snapshots on a new server?

We've been using Win2008R2's AD Snapshot feature to perform a nightly backup of our AD domain. I'm trying to figure out the steps that I need to run through to use one of these nightly backups to ...
0
votes
1answer
21 views

Upgrade AD FS 1.0 on Win 2008 R2 to 2.0

Since AD FS 2.0 is available for Windows 2008 R2, can i simply upgrade AD FS 1.0 to 2.0 just by installing AD FS 2.0 or uninstalling AD FS 1.0 then installing AD FS 2.0. Or is this too risky? I wonder ...
1
vote
1answer
1k views

Activating Windows 7 with MAK passed in Unattend.xml via WDS

I have configured WDS to deploy a Windows 7 Pro image (Volume Licensed) and I'm using an unattend.xml file for the configuration. The only problem I'm running into is activation. I'm passing a MAK ...
0
votes
1answer
27 views

How do I set up a Windows image (not part of the domain) to sync time with the domain controller?

I'm creating a Windows image to distribute to computers, and I want to set it up so that it will sync time to the domain. The problem is that the image is not joined to the domain, so w32tm /config ...
0
votes
1answer
20 views

How can I create a filter in Active Directory to show only 'Enabled' Computer Accounts

Please note: I am referring to COMPUTER accounts. Not USER accounts. In Active Directory, it is easy to create a filter to show only Disabled Computer Accounts by ticking the box "Disabled Accounts" ...
0
votes
1answer
29 views

What actually happens when a computer is deleted from Active Directory? [on hold]

If I open AD and then delete a computer, what will happen to that computer? Will it physically get removed from the domain? What would happen if I tried to log into the computer after it had been ...
0
votes
0answers
20 views

Samba 4 not working correcty as dns for internal (LAN) addresses

[Edit] We tried to use samba_internal dns and also bind9_dlz on the server where samba is installed, but both cause problems when trying to access internal addresses even by IP. So we use our DNS, ...
0
votes
0answers
13 views

Exchange 2013 Schema Prep Error

I am installing Exchange 2013 CU9 into a site with an existing Exchange 2013 Cu3 installation. During the ADPREP phase of installation I am getting the following error. PS ...
3
votes
2answers
974 views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
0
votes
1answer
39 views

Remote Desktop will not connect using hostname, DNS issue related to WLAN/LAN switching

We have a set of wireless devices in our directory. While these are connected wirelessly, I can connect Remote Desktop with no problems. The issue is when it's connected directly, the hostname seems ...
0
votes
1answer
32 views

I see my clients in AD but not in WSUS

I set up a WSUS but dont see any clients in the Unassigned Computers group. I can find my clients in the ADAC, when I select myWSUS (local) > computers. My group policy management got a domain ...
0
votes
1answer
20 views

Do I need a DNS in my domain to let my clients find the WSUS server?

I have my WSUS installed on the same system as my Active Directory management. The weird thing is, that when i put a client in the same domain, i find it in my AD but not on my wsus. The client ...
0
votes
0answers
16 views

How to restrict asdm access based on Active Directory group membership?

I have a Cisco ASA 5505. I have enabled AAA authentication for ASDM to authenticate with my Active Directory server. How can I restrict logging into ASDM to certain users that belong to a specific ...
13
votes
4answers
945 views

How can we remotely administer our “fleet” of Windows 7 laptops?

I'm working with a startup that's teaching kids to program. We've just obtained our first "fleet" of laptops - half a dozen refurbished thinkpads running Windows 7 - and I'm looking for the best way ...
0
votes
0answers
25 views

How to give permissions to user (not admin) to access task manager WS 2012 R2?

I have a terminal server with ws 2012 R2. In it I have installed domain server and remote desktop services. I have administrator account, and other account without administrator rights called ...
0
votes
0answers
30 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
2
votes
1answer
27 views

unable to join server to existing domain in azure within virtual network

I have created a Virtual Network on Azure and have created two VM's within the Virtual network, with IP's 10.0.0.4 and 10.0.0.5. I have added Active Directory role to a one of the VM's and promoted it ...
1
vote
1answer
1k views

Nagios NRPE plugin check_ad - Fixed

i've reading about this problem much and trying to solve it on my own ways but still not luck. I've running debian 7 as nagios server. Problem is that i cant check state of my Active Directory Domain ...
0
votes
1answer
26 views

Populate “Lab” Domain via LDAP

I have a lab environment where I need to own Active Directory Services/DNS/DHCP/etc at work. I have a pseudo "production" environment in this lab that has everything from vCenters to Jenkins to VDI ...
7
votes
2answers
2k views

Can a password change in Active Directory be reverted?

I often need to log in with a user's domain account to make sure that I've set up their profile correctly, but there's no easy way to do this other than to call them and give them a temp pass and ...
0
votes
0answers
26 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
2
votes
1answer
3k views

How to connect AD Explorer from Sysinternals to Global Catalog

I'm using the sysinternals AD Explorer quite frequently to search and inspect an Active Directory without any big problems. But now i'd like to connect not only to a single AD Server. Instead i like ...
1
vote
1answer
18 views

caching AD credentials on 2012 r2 File Server

I am setting up a fileserver at a remote branch office that has very very limited bandwidth Is there a way to store the 10 or so users authentication credentials locally on the File Server so that ...
-3
votes
2answers
23 views

Domain & Active Directory Migration [closed]

We just acquired a very small company, what is the best and easiest way to integrate a small domain to our own domain?
0
votes
1answer
20 views

Broken Exchange in AD Environment

One of our testing exchange servers hadn't been used for awhile and when a tech was trying to get it working again (hub transport wouldn't start, SID errors in event log, etc.) he got frustrated and ...
1
vote
2answers
33 views

Windows Server 2003 Directory Services Restore Mode Lock-Out

I've got a Windows Server 2003 R2 Standard machine. Against my advice, the company making use of this server made it do everything. Zero redundancy outside of some flat file backups. After months ...