A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

-1
votes
0answers
10 views

Where and how do I download Active Directory Migration Tool? [on hold]

I'm trying to download the Active Directory Migration Tool, but the Microsoft download page I'm trying to use keeps giving me a 404 error. I'm trying to get it from connect.microsoft.com here, which I ...
0
votes
1answer
8 views

If I apply local group policy for the first time why it is not taking effect untill I restart the machine?

I applied local group policy (Computer Configuration - Software Restriction Policy) but policy is not taking effect. I tried this on domain member (machine is in connection with Domain Controller) and ...
2
votes
5answers
70 views

Pursuit of True Active Directory Integration

Before you laugh at me and say, "If you want Active Directory, use Windows" or tell me to use Google, hear me out. My company relies very heavily on AD. Nay, we are married to it at this point, and ...
0
votes
2answers
3k views

Unable to register a client to domain

I have a domain Controller established on the server that uses static IPs. When I attempt to add a System to this domain, it is not successful. Following is the error details: An error occurred when ...
0
votes
2answers
1k views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
3
votes
1answer
2k views

Domain Trust 2008 to 2003

I'm having trouble setting up the trust relationship between a Windows Server 2003 and a Windows Server 2008 AD. Domain a is Windows Server 2003 Forest functional level. Domain b is a Windows Server ...
0
votes
1answer
23 views

What is the difference between Site Link Bridges and BASL?

I have a hub and spoke network where the spokes can't communicate with each other. I understand that BASL is what's responsible for making links to sites that are non routable. How does a Site Link ...
1
vote
0answers
15 views

Benign “The specified domain either does not exist or could not be contacted” error while using Active Directory Users and Computers

I have a single Windows Server 2012 R2 Active Directory Domain Controller for domain MYDOMAIN. I want to perform remote administration of the Active Directory from a workstation that is not joined to ...
1
vote
1answer
847 views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
2
votes
2answers
73 views

Windows Hosts DNS query for _ldap._tcp.domaincontroller, is this normal?

To make this easier to wrap my head around, here's what I'm using in my examples: deecee = my domain controller dctoo = another domain controller internal.foo.bar = the full DNSDomainName of ...
0
votes
0answers
27 views

Kerberos, Active Directory, and Linux/Unix Servers

I have done some research on the topic, but I can't quite find a straight answer to my question. Please tell me if my understanding is correct. Kerberos can be used as the bridge between a ...
1
vote
0answers
19 views

Specify DNS/Domain Controller when authenticating against a different domain

Client has two domains residing on the same subnet/physical network. Essentially there's just a POP3 mail server (OLDSERVER) and one of the old DCs (OLDDC) on life support to keep OLDSERVER happy. ...
2
votes
1answer
2k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
1
vote
1answer
831 views

Authenticate Dovecot against Active Directory

I'm trying to authenticate Dovecot against a Microsoft Active Directory on a Windows 2008 R2 Domain Controller. Dovecot (Version 2.2.9) is running on Ubuntu 14.04 (3.13.0-30-generic). My Configs: ...
1
vote
2answers
36 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
3
votes
2answers
44 views

Workstations hang on “Change Password” after expired Password

For one of our customers we have configered a maximum password age of 90 days. If those 90 days are over, the users are forced on logon to change their password. This worked fine for the past 9 ...
1
vote
0answers
289 views

SQL Server 2012 permissions from AD group login not refreshed until server restart

We have some IIS sites which runs under Managed Service Accounts (Windows Server 2012). Theese MSAs are members of resource groups in Active Directory. We are using resource groups as logins in SQL ...
3
votes
0answers
16 views

Installing MSA (Managed Service Accounts) using deployment tools

I have to install several new servers (2012R2) for a project, which will run IIS and MSMQ, I need to script the complete install, so I need to be able to change permissions on IIS Application Pools ...
0
votes
1answer
38 views

The user name or password is incorrect error while joining Windows domain

I am trying to add an second domain controller (DC) to my domain. The server is running Windows Server 2012 R2. After getting the error when promoting it to an domain controller I tried uninstalling ...
1
vote
0answers
22 views

Windows Server 2003 Active-Directory migration

I am going to migrate my windows server 2003 active directory to a windows server 2008. Nearly everthing works fine now but I can't set the operations masters. I am logged in as Administrator on my ...
0
votes
0answers
12 views

PHPPGAdmin on Windows - authenticate users against Active Directory

I installed PHP, Apache 2.4, and PostgreSQL 9.4.1 on Windows machine which belongs to Windows domain. My pg_hba.conf: hostnossl all postgres 127.0.0.1/32 md5 hostnossl all all ...
22
votes
9answers
84k views

Group Policy installation failed error 1274

I'm trying to deploy an MSI via the Group Policy in Active Directory. But these are the errors I'm getting in the System event log after logging in: The assignment of application XStandard from ...
1
vote
0answers
8 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
7
votes
3answers
11k views

Restrict access to IIS site to an AD Group

Is it possible in IIS to set up a site in IIS and only let users of a certain AD Group get access to it?
7
votes
8answers
41k views

Get list of AD groups a user is a member of

Suppose I have the user id of a user in Active Directory. I'd like to get a list of all AD groups in which that user is currently a member of. How can I do this from the Windows command line? I've ...
1
vote
3answers
3k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
2
votes
1answer
2k views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
1
vote
3answers
85 views

Linux / AD integration with SSSD: how to choose what systems a user can log into?

We are trying out ActiveDirectory integration on some linux systems with SSSD. So far so good we joined the linux systems to the domain and we can log into linux systems with AD-defined users. Right ...
2
votes
1answer
1k views

How to check WSUS server updates downloaded size?

How can I check the updates size which were downloaded in WSUS? For example I need to check the updates size downloaded of April 9, 2013 for new 26 updates. And how can I locale the new updates on ...
0
votes
1answer
2k views

SharePoint 2010 not seeing Active Directory users

I'm pretty new to Active Directory and SharePoint but I was given to understand they are supposed to play well together. Now I have successfully set up AD with multiple user accounts that work on ...
1
vote
1answer
544 views

How can I delegate “Attributes 1-15” in Exchange / AD?

The following attributes are present on an Exchange user, and this is what my colleague sees: (notice the locks) How can I properly delegate Read access (or Read write if it must be) to these ...
-4
votes
2answers
50 views

Possible to name a computer the same as a domain?

If I have a domain called "HOUSE" with user "JOHN", would it be possible to rename a PC to "HOUSE" with a local user called "JOHN"? So both would then be HOUSE\JOHN. Edit: I should add, the PC is on ...
0
votes
1answer
2k views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
0
votes
0answers
14 views

Redirect DNS-Queries in Samba4 AD of local domain

I am running an Ubuntu 14.04 Samba4 AD Server and I control my networks DNS via a different server. I am using the samba version served by ubuntu which is 4.1.6. Is it possible to configure the ...
3
votes
1answer
62 views
+50

Windows DirectAccess - Server 2012 R2, Windows 8.1 Client, “No SAs match the specified criteria”

I put this question on SuperUser, but judging from the lack of response I think I picked the wrong place, so I'm cross-posting here. I'm trying to get DA set up and it is being a major pain. I have ...
1
vote
5answers
3k views

Windows : Only Run Install Startup Script if Directory Doesn't Exist

I want to install some programs via a startup script, but once it has run for the first time it'll just reinstall wasting time and overwriting. It's a Server 2008 R2. Somewhere I found this IF NOT ...
4
votes
1answer
34 views

At which point becomes a changed computer group membership active?

When adding a computer object to an AD group, at which point in time does the group membership become active? Is there some kind of kerberos refresh interval (similar to group policy refresh)? I ...
0
votes
2answers
29 views

Migrating Windows Server 2003 Active-Directory to Windows Server 2008

I would like to migrate a Windows Server 2003 to Windows Server 2008. I installed Active-Directory on the Windows Server 2003. During the installation of Active-Directory on my Windows Server 2008, ...
2
votes
1answer
5k views

UnKnown can't find <hostname>: Non-existent domain

I have a small network running Windows Server 2012 servers and Windows 7 clients. Right now I'm trying to setup DNS with an AD-Integrated Zone. I've configured my local machine, which is not a domain ...
0
votes
1answer
971 views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
2
votes
1answer
95 views

Joining 150 computers to Active Directory

I am a junior system IT administrator. We have Windows server 2008 R2 standard and 150 computers with Windows 7 professional (32 bit). We have installed an Active Directory domain on the server and we ...
0
votes
1answer
64 views

Why does windows xp standalone group policy apply in the safe mode to the default administrator?

I am trying to turn standalone Windows XP installed on VirtualBox virtual machine into an AppStation-style machine (only one allowed application, taskbar, start with lone shutdown option, and a ...
0
votes
2answers
2k views

How do I grant local administrator rights, but not Domain Administrator Rights?

How do I grant local administrator rights, but not Domain Administrator Rights? i.e. For user x, I want to grant install rights on the computer, but the user should not have Domain admin rights as I ...
1
vote
1answer
187 views

Group Policy for allowing non-admin users security log rotation

We recently turned on auditing in a GPO, and when non-admin level users login, an error about the "Security Log is Full" is presented. To work around it for now, I had to add the AD user to as a ...
-2
votes
1answer
73 views

MS AD 2008К2 2 sites, multiple networks

We have a PROD site with 2 networks 1.1.1.X/28 and 10.10.10.X/24. We have DR site with 2 networks 1.1.1.X/28 and 20.20.20.X/24. The net 1.1.1.X/28 is not the same (you can't reach host on PROD from ...
2
votes
1answer
1k views

Windows 2008 R2 Server: Network zones (Public / Private / Domain) Seem to change randomly

So far on 2 occasions we have noticed that the network zones assigned to our server nics has been changed without any interaction on our part. This is out of a few hundred servers we manage. Case 1) ...
-1
votes
0answers
23 views

Accessing user home directories

In a theoretical AD DS setup, there's some Home Folders. These Home Folders are set up by Windows with the annoying permissions of only the Owner can access. I'm aware that you can run programs using ...
1
vote
1answer
92 views

Is there a way to force permissions to update when removing user from admins?

I'm in an Active Directory domain, remoted into a Server in which my domain account is in the Administrators group. Someone else removes me from that Administrators Group while I'm still logged in. ...
1
vote
2answers
280 views

A unique identifier for a Domain

I asked a question over on StackOverflow and was directed to ask a related one here to see if I could get any additional input. Basically, I am looking to have my application aware of what domain ...
0
votes
0answers
27 views

Collecting PC to Printer relationship information across an entire domain using a script

I'm trying to create a script which will enable view every PC to Printer relationship across an entire domain of around 1200 machines. In theory I am looking for a script to be run so that it will ...