A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
9 views

How to access remote user name in nginx?

Please help, I have a RoR application running on RedHat 6.6 with Nginx as webserver and Passenger as application server. Now i need to implement SSO with windows authentication, i.e if a user has ...
-1
votes
2answers
220 views

What does “Administrator” have that allows them to RDP into a server?

I am trying to setup an Active Directory so that "Domain Users" can via RDP. If I assign the role "Domain Admin" to the user, they can login via RDP no problem but when I follow many tutorials (this ...
1
vote
0answers
7 views

Group policy setting to prevent asking user which encryption mode to use

Asked a similar question previously: Group policy setting to prevent asking user where to store recovery key I'm trying to enforce the encryption mode to the new XTS-AES so that if the users ...
-1
votes
2answers
65 views

An active directory domain could not be contacted

I have this problem with joining client PCs to the domain. I think i did everything right, set up AD DS, DHCP, DNS on my server, turned off the DHCP server on my router. I ensured that the Preferred ...
1
vote
1answer
660 views

Why can I create objects on my read only domain controller?

I have a Windows Server 2012 Domain Controller. I have configured another Server 2012 machine as a Read-Only Domain Controller. When I log in with domain administrator credential on my RODC I can ...
0
votes
1answer
2k views

Issue connecting to AD FS configuration database

I just installed the AD FS role on my DC using the Windows Internal Database. All seemed to be fine after I set everything up, however, once I restarted my DC, when attempting to load the AD FS ...
14
votes
1answer
2k views

GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10

I have a Windows Server 2012 R2 Domain. Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working. After further investigation (gpresult /h) it appears ALL group policy objects ...
-2
votes
0answers
21 views

How to fix error: The security database on the server does not have a computer account for this workstation trust relationship [on hold]

Sys Admins I need your help! Logged onto my Windows 2008 r2 NAS server & received the following error message: Group Policy Service failed logon access denied. So googled the issue and ...
0
votes
2answers
45 views

GPO shows applied under user settings, but contains only computer settings

I am having a spot of trouble with my policies and applying them on my Windows 10 machine. I have several GPOs applied at the top of domain level, some contain only computer settings, some contain ...
0
votes
1answer
2k views

sharepoint 2013 user profile sync permissions problems

I’m trying to stand up a new SharePoint 2013 farm. I've got an issue where we aren't syncing all of the user properties between sharepoint and AD, and it’s the email properties in particular that I’m ...
-1
votes
1answer
1k views

Migrate from MS Active Directory to Samba4

The target is to replicate a MS AD DC (Windows server 2012) to a new Samba4 AD DC, then migrate users to the new Samba domain. This is our first time, and the various documents on the Internet are not ...
5
votes
1answer
4k views

Diagnosing slow active directory logins

I'm having a hard time diagnosing intermittent slow logins on domain PCs. A bit of information about the network that has this problem: My domain spans 5 sites, all with VPN connections. DCs are ...
3
votes
1answer
2k views

Does Windows log a “Member removed” event for security groups when an AD user account is deleted?

We have AD DS security auditing enabled on a Windows Server 2008r2 functional level domain. We use a third party tool to alert us to changes to our administrative group memberships. We recently ...
0
votes
1answer
2k views

Access denied trying to login to Ubuntu 14.04 (Authentication with Active Directory)

I'm trying to set up my Ubuntu 14.04 print server to authenticate users with my Active Directory server, I've followed all of the steps using the following tutorial: http://www.kiloroot.com/add-...
2
votes
1answer
2k views

two domains, one LAN, two DNS server, 3 problems

Background: we have 150 users using AD on domain ABC. Windows 2003. that serverDC1 has a DNS, DHCP roles, and there is serverDC2 which is its live DNS backup. logs seem healthy. then we chose to ...
4
votes
1answer
3k views

How to check WSUS server updates downloaded size?

How can I check the updates size which were downloaded in WSUS? For example I need to check the updates size downloaded of April 9, 2013 for new 26 updates. And how can I locale the new updates on ...
3
votes
4answers
20k views

An Active directory domain controller could not be contacted

After creating an Active Directory domain controller I tried to add client computers to the domain but I kept hitting a snag. The following error occurred when DNS was queried for the service ...
0
votes
1answer
4k views

Sync Active Directory Users in FreeNAS

This is for FreeNas-9.1.1, I am using active directory which appears to be connecting ok, since the following list users/groups from that server with no problems wbinfo -u wbinfo -g I can also join ...
0
votes
0answers
6 views

IPMI and Recursive AD group permissions

It seems that SuperMicro's IPMI service does not allow for Active Directory permissions to be recursive, that is, a user in a group, with that group in a group that has admin permissions. Is there a ...
1
vote
1answer
12 views

Windows Server 2008 R2 functional level - inactive computer objects

I'm planning a domain migration and I would to understand which computer objects are up and running. Already tried the command “dsquery computer domainroot -stalepwd” but I still have some doubts with ...
0
votes
1answer
37 views

AD Replication with 3 sites/locations

I have created new forest with domain.local. Domain have 3 locations - A, B, C. ( One dc per location ) First dc-A is owner all FSMO roles. After configure all 3 sites with subnets added 3 IP "Inter ...
1
vote
3answers
209 views

Deploy active directory ONLY on the cloud and join workstations to it WITHOUT VPN (No DCs on premise, No RODCs etc.)

The company does not have any offices. All users are remote. However, they need an Active Directory to which workstations can be joined and users can be centrally managed. One suggestion is to ...
2
votes
1answer
48 views

Cannot promote Windows Server 2012 R2 to Domain Controller at a new site. “The wizard cannot gain access to the list of domains in the forest.”

I'm opening a new site (physical and logical) in my international Windows domain. The site is connected to the main office by a VPN over a slow connection (I'm using pfsense as my main router and ...
0
votes
1answer
31 views

Setting up local administrator accounts that still require a domain administrator for certain tasks

Having started in a new place recently, I've been tasked with setting up 2 new workstations, however I'm having a hard time figuring out exactly how the workstations here were configured in the past, ...
1
vote
1answer
23 views

Prevent conflicting Active Directory object from being created?

I have an environment with separate Active Directory and DNS infrastructures and am using DNS CNAMEs for several storage servers. Normally windows clients can reach the storage correctly whether ...
10
votes
3answers
3k views

At what point does a domain suit a network better than a workgroup?

At what point does a domain suit a network better than a workgroup? Is there a threshold below which a domain is simply too much work for benefits gained? Is there a point after which a workgroup is ...
3
votes
2answers
1k views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and I'...
0
votes
2answers
48 views

Which security group in AD to manage domain computers

I want to add another user rights to manage all domain computers. I created a group in AD called ITAdmin and added myself and this user in it. Then I added this group to several other groups like : ...
1
vote
1answer
1k views

Problematic Active Directorys CA certificate

i came across one DC, which gives me RPC errors when dealing with AD Certificate Service.I can see in AD there is 2 Root CA , one is problematic. Is it safe to remove it? Or is there a procedure for ...
0
votes
0answers
41 views

How to delete old profiles saved on a shared server folder

We have a Windows Server 2012R2. Just a bit of a background, we are replacing the old IT team at this place, and we've ran into a few problems trying to organize and clean up this network. What we ...
0
votes
1answer
11 views

redirect specific computers to Specific ou

Helle All, I am planning to redirect the specific name of the computers to specific OU like as below Condition 1. Name which starts with CMP* need to move to "Com" OU Condition 2. Name which starts ...
1
vote
1answer
75 views

How to enable NumLock on Windows 7/8/10 logon screen with GPO

I am currently migrating my company to Active Directory. Because my boss has enforced strong passwords, everyone needs to type at least one digit to log on their computers. Some of them have the ...
0
votes
0answers
20 views

Show domain user on login screen

I've a domain used by both teachers and students. Right now teachers can able to input username and password easily but for the students its quite difficult for them to do the task. I've created two ...
3
votes
1answer
7k views

Active Directory - Join domain in specific OU when its a workstation

I would like to know how can I accomplish the following: When I join a workstation (with Windows 7) in the domain, I want that computer to be put into a specific OU. Only when its a workstation with ...
1
vote
1answer
31 views

Windows Server promote to Domain Controller succeeded and failed?

Edit: Ignore this post. It turns out I'm having other problems, even with another brand new install of Windows Server 2012 R2 on a different physical box. So I'm pretty sure there is a different ...
9
votes
4answers
84k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: get-...
-2
votes
1answer
40 views

Every two days Windows Domain removes my administrative privileges [on hold]

My computer, running Windows 7 professional, is on a domain. I have to change my account to set it administrative privileges every two weeks. I don't know why, every two days, my user is remove from ...
0
votes
1answer
17 views

Suggestion required for Mailbox migration from Mailenable 7.5 POP/SMTP to Exchange Server

I need some help and suggestion for some mailbox migration. I have an Active Directory domain where all my new Exchange Server 2016 is installed and configured. The domain name is mydomain.com which ...
0
votes
0answers
48 views

How to change from the default shell authenticating using SSSD/AD

Within in the sssd.conf file, does anyone know what the syntax should be to allow me to switch between different login shells? Thanks example@example.com:~$ chsh -s /bin/zsh Password: chsh: user '...
0
votes
1answer
1k views

likewise-open issue

I've been struggling non-stop for two days on this issue and it is driving me insane. I am trying to get my Linux-Mint machine to connect to the Windows Domain so that I can gain access to the ...
0
votes
1answer
30 views

Group policy vs. Local group policy: which is correct for this use case?

Quick background: I've been working with group policy since Win2k; I'm in an organization that's just getting around to rolling out Active Directory. I've got a few cases where I need to provide ...
0
votes
3answers
4k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
9
votes
1answer
305 views

Is it possible for a child domain and a OU in the parent domain to share the same name?

I'm adding this Q/A because I just stumbled upon this limitation today, and I was not able to find any documentation about it; there is an old KB article about this issue, but it's currently not ...
0
votes
1answer
31 views

Active directory account logging in from an unknown application or service

I have a 2008 R2 AD domain, where there are repeated attempts to login by a user is no longer here. The password has been changed, so the failed attempts are expected, but what I don't know is where ...
-3
votes
0answers
14 views

Windows 10 creating .v2 profile versions, then fails to load them (Domain account) [closed]

So we've got a domain account here and for whatever reason everything works but every Win 10 computer creates .v2 profle version. In the end logging as "temporary user". Anyone got the some problem? ...
6
votes
2answers
96 views

Using Azure AD to push Group Policy settings

I am trying to use Azure Active Directory instead of using a traditional domain controller. I would like to use Azure AD to authenticate users and to push GPO settings, such as folder redirection, ...
4
votes
2answers
4k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.example.org port 636 with the ssl checkbox. This is on the local server itself. ...
2
votes
2answers
8k views

ActiveDirectory domain service wizard: Prerequisites check for domain controller upgrade fails

I want to test my software's SSO, so I am trying to configure ActiveDirectory on Windows Server 2012, following this tutorial. At "prerequisites step", the window is supposed to look like: but ...
-2
votes
2answers
39 views

Primary domain controller has crashed, and exchange 2010 don't find the secondary?

Primary domain controller has crashed, and exchange 2010 don't find the secondary one! I also promote the secondary to Primary but still nothing. Mistakenly restarted the Exchange server and now I ...
0
votes
1answer
1k views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...