A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
1answer
2k views

sharepoint 2013 user profile sync permissions problems

I’m trying to stand up a new SharePoint 2013 farm. I've got an issue where we aren't syncing all of the user properties between sharepoint and AD, and it’s the email properties in particular that I’m ...
-3
votes
2answers
54 views

What does “Administrator” have that allows them to RDP into a server?

I am trying to setup an Active Directory so that "Domain Users" can via RDP. If I assign the role "Domain Admin" to the user, they can login via RDP no problem but when I follow many tutorials (this ...
1
vote
2answers
16 views

Allow remote desktop service to dc from specified computers

I'm planning an architecture of secure terminals only to access DC's. So i have 2 computers which are secure and if i want to connect to the dc's i will have to log into those computers So what i ...
0
votes
0answers
32 views

Virtual Machine with Two NIC's Loosing Internet

Please Forgive my newbieness... I'm just a developer trying to learn a little of the hardware side. I've tried to look this question up but all results produce VMWare which I am not using. I've ...
-4
votes
0answers
24 views

After Changing IP Address of WIndows XP machine working Slow [on hold]

I have windows server 2008 where all client connected by this server , now i changed my network ip address fromm (192.168.0.1 to 192.168.0.254) to (192.168.1.1 to 192.168.1.254) , after that 2 windows ...
0
votes
0answers
30 views

Active Directory users on Multiple Domains

Hope someone can help me. I have a task to create a new active directory domain - which i have no issues doing. However those guys would like to get users from an particular OU from an corporate ...
0
votes
1answer
24 views

Few Concern: Migration domain controller 2008 R2 to 2012 R2 Domain

My Topic is Migration of 2008 R2 domain controller to 2012 R2 (All domain Controllers.) Current Set-up. I have 3 Domain Controller. DC2008r201: Running As PDC and DNS Installed. DC2008r201. ...
-1
votes
1answer
39 views

How should I manage my cloud-hosted virtual networks/machines?

I am currently hosting multiple production projects in Microsoft Azure. Each project is configured with a separate virtual network with two Windows VMs to act as web servers, and one server to act as ...
3
votes
1answer
1k views

Set up trust between Azure AD and local AD

We are moving some VM's and Cloud Services into Azure, but we need those services to still connect back to the AD of our partner. I'm a developer, not a sysadmin, so I'm not sure how to do this, or if ...
0
votes
0answers
38 views

Outlook connectivity issues

It is Exchange 2013 environment with outlook 2016. Some computers are in domain some are not. Computers out of domain work just fine, but those in domain have this problem once a day at random time: ...
3
votes
1answer
1k views

Does Windows log a “Member removed” event for security groups when an AD user account is deleted?

We have AD DS security auditing enabled on a Windows Server 2008r2 functional level domain. We use a third party tool to alert us to changes to our administrative group memberships. We recently ...
1
vote
1answer
37 views

Control Windows permissions on Samba share from linux

I have a Debian 8 with Samba 4 as a AD domain member. The DC is Windows Server 2008. The shares are able to handle Windows permissions - I use IDMAP backend = rid, since I cannot add uidNumber and ...
1
vote
1answer
3k views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
0
votes
3answers
74 views

How to monitor software installation in AD DS?

I'm trying to choose software for monitoring installed software in Active Directory Domain. I thought to use SCCM services, but found it too complicated. Maybe did anybody use a suitable solutions for ...
2
votes
1answer
2k views

two domains, one LAN, two DNS server, 3 problems

Background: we have 150 users using AD on domain ABC. Windows 2003. that serverDC1 has a DNS, DHCP roles, and there is serverDC2 which is its live DNS backup. logs seem healthy. then we chose to ...
5
votes
4answers
12k views

NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group

As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
0
votes
1answer
1k views

Access denied trying to login to Ubuntu 14.04 (Authentication with Active Directory)

I'm trying to set up my Ubuntu 14.04 print server to authenticate users with my Active Directory server, I've followed all of the steps using the following tutorial: ...
1
vote
1answer
27 views

Windows Server User Share Permissions

I've been attempting to setup the following on my new Windows Server AD setup: G:\Shares\_users (\\HS-W01\_users) = Listable by Domain Users, modifiable by Domain Admins. G:\Shares\_users\%username% ...
3
votes
1answer
3k views

How to check WSUS server updates downloaded size?

How can I check the updates size which were downloaded in WSUS? For example I need to check the updates size downloaded of April 9, 2013 for new 26 updates. And how can I locale the new updates on ...
0
votes
2answers
27 views

AD DNS: Point subdomain to external shared hosting

When creating my domain I didn't realize until computers were joined to it that my AD domain is example.com and my organization's website is also example.com, but is hosted on a remote shared web ...
1
vote
1answer
558 views

Enlarging initials field in AD

I have two 2008R2 domain controllers in one domain. The user attribute "initials" can only contain 6 chars. I need it to be 12. What is the impact of using adsiedit to enlarge this attribute to more ...
0
votes
2answers
55 views

How to manage credentials/access to multiple remote windows servers

My company has numerous remote servers which we manage. These servers are all Windows Servers and a spread out across different hosting companies / data-centres. Their purpose is IIS Web hosting, SQL ...
3
votes
1answer
3k views

can't add sharepoint users from trusted domain

I have a very strange problem with our Sharepoint 2007 implementation. I went in today to grant access to a user and was greeted with "The user does not exist or is not unique." Let me start off by ...
8
votes
6answers
23k views

Fix error determining whether the target environment requires adprep in windows server 2012, during domain controller promotion

I am unable to promote my newly installed Windows Server 2012 machine to a domain controller. I have two existing domain controllers. The primary is at Windows Server 2003 level, and is running ...
1
vote
1answer
3k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
0
votes
0answers
9 views

Folder Redirection on Mandatory profile fails

I am new to the forum. We are using server 2008 R2. Clients windows 7 professional 64 bit. We used to have roaming profiles with folder redirection for all the school students and staff. Its good. ...
0
votes
0answers
30 views

The schema master did not complete a replication cycle after the last reboot

I'm attempting to add a Windows Server 2012 Domain Controller to an Existing Windows Server 2003 network, and then following that, will migrate it to be the domain master. I'm following this tutorial ...
1
vote
1answer
93 views

rundeck unable to auth against Active Directory

I'm trying to setup rundeck so that it authenticates against Active Directory I keep getting this error The wiki contains information about the 403. Reason: !role error ...
3
votes
1answer
14k views

UnKnown can't find <hostname>: Non-existent domain

I have a small network running Windows Server 2012 servers and Windows 7 clients. Right now I'm trying to setup DNS with an AD-Integrated Zone. I've configured my local machine, which is not a domain ...
1
vote
2answers
29 views

Forest trust on the same subnet to migrate users

Wondering if anyone could offer some advice on something. I have a domain that desperately needs to be upgraded. Typically, one would add a new DC with a reduced functional level to the domain, ...
1
vote
1answer
26 views

Find the users of Active Directory global group?

I am using following command to get the users of Active Directory Global Group. dsquery group -name "Groupname" |dsget group -members But, this is piped command and it's not working in Visual ...
0
votes
0answers
11 views

LDAP filter alphanumeric

Does LDAP (precisely Active Directory) allow to filter out only alpha-numeric characters? Client app crashes on some non-printable characters (like vertical tab U+000B), when trying to get AD groups ...
0
votes
1answer
3k views

Sync Active Directory Users in FreeNAS

This is for FreeNas-9.1.1, I am using active directory which appears to be connecting ok, since the following list users/groups from that server with no problems wbinfo -u wbinfo -g I can also join ...
1
vote
3answers
779 views

Unable to join domain using samba tool net or realm/sssd

On a rhel7 server I am trying to join the server to a domain, but I am getting the following failure: net ads join -S domain.example.org -U name Enter name's password: Failed to join domain: failed ...
1
vote
1answer
29 views

Centrally deploying print drivers to Windows clients

I'm looking to set up a central print server to allow Windows 7 and 10 clients in remote offices without a local print server to have print drivers installed automatically when the printer is added ...
0
votes
1answer
50 views

Getting Windows domain username in correct case (to match Active Directory)

How can I get a Windows 7 domain user's username in the case that it is stored in Active Directory (such as RoseRoss), rather than whichever case they happened to type it when logging in to their ...
3
votes
2answers
58 views

Windows bginfo to show A.D expiry date?

Is there anyway in bginfo to show the # of days before A.D. User password needs to be changed? E.g you must change your password in 10 days. A.D password are to be reset every 2 month or 60 days.
1
vote
1answer
28 views

AD Query: Disabled Accounts still in Groups

Is it possible to have a query that finds all users in Active Directory that are disabled, but are also members of ALL groups - or All groups except for 1? Tried the following: ...
1
vote
1answer
1k views

Problematic Active Directorys CA certificate

i came across one DC, which gives me RPC errors when dealing with AD Certificate Service.I can see in AD there is 2 Root CA , one is problematic. Is it safe to remove it? Or is there a procedure for ...
0
votes
3answers
3k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
1
vote
1answer
63 views

Use Linux BIND DNS server for my Windows Active Directory 2008 R2

How can I use a Linux BIND DNS server for my Windows Sever 2008 R2 Active Directory? We are trying to avoid having to use the Windows Sever 2008 Server as a Domain Controller at all. We want to use ...
1
vote
2answers
49 views

How to assign remote users from GPO/users not authorized

My account and my admins can remote into any machine on the network, but standard users get an "user not authorized" error. The only solution I've found is to manually add the users to the Approved ...
0
votes
0answers
11 views

Trying to make Parse Server authenticate to Active Directory

We are developing a parse server app for students to use. We need to be able to authenticate at the Parse level (not the mobile app) to the school's AD. We looked at Auth0 but that looks like we ...
0
votes
0answers
19 views

What is the effect of provisioning the same active directory schema twice

if a domain has been provisioned once using samba-tool with the name, say 'MYDOMAIN', can this be repeated? If so will this result in an update of the existing records, or will a fresh domain with ...
2
votes
3answers
18k views

An Active directory domain controller could not be contacted

After creating an Active Directory domain controller I tried to add client computers to the domain but I kept hitting a snag. The following error occurred when DNS was queried for the service ...
5
votes
1answer
4k views

Diagnosing slow active directory logins

I'm having a hard time diagnosing intermittent slow logins on domain PCs. A bit of information about the network that has this problem: My domain spans 5 sites, all with VPN connections. DCs are ...
0
votes
0answers
10 views

Uid lookups from Isilon to Active Directory do not work

If I run id 1000001from an ssh session to an isilon node, configured to authenticate with Active Directory, it returns id: 1000001: no such user. Running id TESTDOMAIN\\user1 returns the info ...
1
vote
1answer
29 views

Secure AD Access

I was just trying to access and Active Directory-Server via php (ldap) to be able to use Windows credentials for a Website Login. I did this using xampp on my standard Windows connecting to a Windows ...
2
votes
1answer
88 views

Secondary domain controller not functioning when primary domain controller is not reachable

We are small business intelligence company and we have a head office and a branch office. I have active directory running on windows 2012 R2 in the head office and another active directory running on ...
2
votes
0answers
30 views

Placing AD Administrators in to /etc/sudoers

I've added the following to /etc/sudoers: %DOMAIN\\domain\ admins ALL=(ALL) ALL When I log in to use the administrator account I get this: [administrator@internal.mydomain.com@plex ~]$ sudo ...