A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

3
votes
1answer
2k views

Powershell - Test user credentials in AD, with password reset

I can successfully use Powershell to tell if a user authenticates in Active Directory: Function Test-ADAuthentication { param($username,$password) (new-object directoryservices.directoryentry ...
1
vote
7answers
185 views

Active Directory Reporting/Software Enforcement [closed]

Got a two questions, and I am hoping to get the same answer for both =) 1) Got a small AD, about 150ish objects. Need a tool for reporting and auditing changes (e.g. computers added to domain, empty ...
0
votes
2answers
1k views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
4
votes
1answer
936 views

Unattended Windows 7 install with non-DHCP DNS Server: Domain join fails, claiming it can't find the domain

I'm trying to build an unattended Windows 7 image script that will do a simple domain join. The catch is that the DHCP-provided DNS server knows absolutely nothing about my domain, so I need to set ...
0
votes
0answers
28 views

AD domain name: Did I choose appropriately? [duplicate]

Edit: I realize this type of question has been asked before as active directory domain naming practices is a common topic of debate. I have read past posts, but I don't feel they are quite ...
3
votes
1answer
2k views

Domain Trust 2008 to 2003

I'm having trouble setting up the trust relationship between a Windows Server 2003 and a Windows Server 2008 AD. Domain a is Windows Server 2003 Forest functional level. Domain b is a Windows Server ...
-1
votes
1answer
375 views
+50

How to get all logged in users in an active directory environment?

Sometimes you want to write an email to all users that are currently in the office. You could now just insert all the email addresses into a mail but you might not know who's in the office your you ...
1
vote
3answers
3k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
-2
votes
0answers
24 views

Authentication issues because of Domain Controller Offline

We are a Development company & have multiple locations. We have 4 DC's, 2 in US & 2 in India. Currently the 2 DC's in US are down/Offline & as a result all the solutions like ...
0
votes
1answer
1k views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
0
votes
0answers
810 views

The Destination Server is Currently Rejecting replication Request - Error Event ID1864. Warning ID 2092

hope some one can help me with the subject mentioned error. My current set is that I have physical Win2k8R2 Box and a Virtual server with the same configuration. recently I am having replication ...
8
votes
3answers
349 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
0
votes
1answer
51 views

Can't open Active Directory Users and Computers, Group Policy settings issues

In the past I've been able to open "Active Directory Users and Computers" to manage the users and computers on our Windows Server 2008 R2 box. We just recently made some changes to our Group Policy to ...
-2
votes
1answer
24 views

NAS External Users [on hold]

I'm planning on setting up a new NAS on my small office (work) network with 1 DC running Windows Server 2008 R2 and a back up server also running Windows Server 2008 R2. My DC is my DHCP, DNS, File ...
1
vote
0answers
28 views

Mysterious Terminal Server HTTPS issue

The University I work for recently got into Terminal Servers, and one of them has been plagued by an unusual HTTPS issue where, after enough users have logged in and logged out, eventually users can ...
7
votes
1answer
73 views

Exchange Server Using Wrong Active Directory Site

Our Exchange 2013 server suddenly started logging errors about bad replication between sites (there should be no replication as there is no other server) as well as several other issues that appear to ...
0
votes
2answers
2k views

Samba server authenticating against Active Directory. Is it possible to reboot and still connect to the domain?

I have tried to setup Samba File Server with AD authentication. The authentication via Active Directory is successful but if you reboot the server the linux Samba file server will NOT join the domain ...
20
votes
6answers
75k views

Finding why a user is locked out in Active Directory

A user's account keeps getting locked out in Active Directory. It's probably caused by an app that's using Windows authentication to connect to SQL Server. Is there a way to find out which app is ...
0
votes
0answers
17 views

Should %LOGONSERVER% be set to the RODC [closed]

I'm not sure if I am properly authenticating with the RODC or not. If I go into the RODC's event viewer I can see LOGON events for various clients. When I go to the client and issue an echo ...
0
votes
0answers
12 views

RODC fails to enroll Kerberos certificate but works with the rest

I've a read only domain controller (WS2K8R2) that fails when enrolling the Kerberos PKI Certificate template. However, the rest of the domain controllers works with that template. In fact the ...
2
votes
1answer
983 views

How to check WSUS server updates downloaded size?

How can I check the updates size which were downloaded in WSUS? For example I need to check the updates size downloaded of April 9, 2013 for new 26 updates. And how can I locale the new updates on ...
3
votes
1answer
393 views

How can I create Organizational Units recursively on Powershell?

I'm writing a Powershell script to populate all the company users to a Active Directory from a CSV file. The script uses the Powershell command New-ADUser and it should know, for every user, where is ...
2
votes
1answer
4k views

UnKnown can't find <hostname>: Non-existent domain

I have a small network running Windows Server 2012 servers and Windows 7 clients. Right now I'm trying to setup DNS with an AD-Integrated Zone. I've configured my local machine, which is not a domain ...
-1
votes
0answers
32 views

Linux User Management Best Practices [closed]

I am a long time Windows administrator and I am working on moving into Linux. One thing that I really like about Windows is the ability to use Active Directory as a central user\group repository. I ...
2
votes
1answer
1k views

Windows 2008 R2 Server: Network zones (Public / Private / Domain) Seem to change randomly

So far on 2 occasions we have noticed that the network zones assigned to our server nics has been changed without any interaction on our part. This is out of a few hundred servers we manage. Case 1) ...
0
votes
0answers
13 views

AD and exchange 2010 issues on domain name [closed]

I seriously need help concerning a problem I have on my domain name. I searched but can't find a solution. I have domain name in @eb4g.com in AD with smtp and x.400 standard. A technician created an ...
1
vote
0answers
469 views

Cross Forest Authentication - RDP - Have to Manually Specify Domain

We are having an issue when a user in forestB is connecting via RDP to an XP system in forestA. We are in a transitional state where some users have migrated to our new forest (forestB) but still need ...
-1
votes
1answer
50 views

Prevent internet from being monopolized by one user

In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers. However, we want to prevent the ...
0
votes
1answer
18 views

Copy data from Azure AD to vm AD?

Currently I only have Azure AD that work with Office 365. Now I am planning to create a vm to use RADIUS server. I need to copy user and groups from Azure AD to vm AD. So, how can I do that? I read ...
2
votes
1answer
986 views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
-2
votes
0answers
35 views

Cannot bind to localhost nor 0.0.0.0 on Windows Server with Active Directory

I have an application (IEDriverServer, Selenium's IE driver) which by default binds to 0.0.0.0. It works fine on my Windows 7 machine, however when I try to run it on Windows Server 2012 R2 with ...
2
votes
1answer
2k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
0
votes
1answer
2k views

SharePoint 2010 not seeing Active Directory users

I'm pretty new to Active Directory and SharePoint but I was given to understand they are supposed to play well together. Now I have successfully set up AD with multiple user accounts that work on ...
4
votes
1answer
2k views

A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly. However, we have one ...
1
vote
1answer
1k views

Active Directory FRS problems. 13508 error and other problems

I have 3 Domain Controllers. We will call them DC1, DC2 and DC3. DC3 and DC2 show Event ID 13508 in their FRS logs with no follow-up event(13509 I think) to say the error had been fixed. DC1's FRS ...
1
vote
4answers
10k views

How to reference a Domain Controller out of the Local Network?

We have multiple servers scattered over different hosting providers. For learning, experimenting and, ultimately, production purposes, I set one of them as a Domain Controller. That went well, most ...
-1
votes
1answer
56 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
1
vote
2answers
950 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
6
votes
3answers
13k views

How to enable Automatic Logon for a computer in Windows Domain?

I need to setup publicly available computer to perform automatic log on using domain credentials when powering on. When it was not a domain member this option was available on control userpasswords2 ...
0
votes
2answers
1k views

Mutli-DC Environment DNS Error 4015

We recently added a new 2008 R2 DC to an existing 2003 forest with one 2003 DC. We haven't raised any functional levels. The 2003 DC was powered down (it hadn't been demoted yet, but all the FSMOs are ...
4
votes
3answers
1k views

How to find last login user on given computer name on AD

If anyone could help, it would be appreciated. I am trying to audit the network. I have list of computers that are active in last 3 months in domain. I have little script that run when user login to ...
3
votes
1answer
325 views

Diagnosing slow active directory logins

I'm having a hard time diagnosing intermittent slow logins on domain PCs. A bit of information about the network that has this problem: My domain spans 5 sites, all with VPN connections. DCs are ...
4
votes
1answer
41 views

Powershell - Merging Results in one table

I am new to powershell. I am trying to create a report that shows AD accounts that expire soon. The report should include the User Name, AccountExpirationDate and the Manager. I have the ...
2
votes
1answer
21 views

csvde to find 1 user based on SamAccountName

I want to use csvde to find 1 user based on SamAccountName and export all the details about that person to a CSV file. The problem I am having is filtering by SamAccountName csvde -f search.txt -p ...
1
vote
2answers
33 views

Server 2008 R2 > 2012 Migration

I am pretty new to windows server so please bare with me, i am looking to upgrade our current small server from server 2008 rs to windows server 2012 essentials, however we are only using one server ...
2
votes
2answers
49 views

How to clone, disjoin & rename a Windows 2008 R2 VM offline, then rejoin domain online

I have a Windows 2008 R2 domain joined server, which should be cloned as test server in the same domain! There is an MSSQL 2012 instance and Team Foundation Server 2013 installed, but this shouldn't ...
0
votes
1answer
25 views

AD FS and DC on same Server

i have to connect AD with Azure AD but we have a 2008 r2 server and wwe don`t want to upgrade the server to 2012 r2. Is it possible to have the domain controller and the ADFS server on the same ...
0
votes
1answer
2k views

Windows server 2003 MMC has detected an error in snap. It is recommended that you shutdown and restart MMC

I have Windows Server 2003 STD x64 SP2 and I have been installed AD on it. When I try to add computer there is an error message saying: MMC has detected an error in a snap. it is recommended that ...
1
vote
0answers
41 views

How do I workaround inaccessible DCs in a spoke site, in a hub and spoke configuration?

I have a Hub and Spoke configuration. The spokes can never see another spoke. SCOM is reporting errors that GPO can't access \company.com probably because every Domain Controller has an NS record, ...
3
votes
1answer
31 views

Integrating FreeIPA or RH IdM in an existing MS AD environment

I want to deploy FreeIPA or Red Hat IdM in my existing environment Currently my domain is managed by MS AD which is controlled by a separate group. Assume that changing anything in MS AD is going to ...