A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

1
vote
0answers
28 views

Server Migration 03 -> 12

I have run into a wall and out of ideas. Here's the situation. I have a client that has a old '03 DC with a 12 replicating the '03 server. It is out dated and has to many group policies and stuff it ...
0
votes
0answers
13 views

sssd can't save user. Missing uid

I am trying to sync my Debian server using sssd. When i run the getent passwd username@domain, the user is not returned. The log says it's because i am missing an uid from the ldap lookup. However, i ...
21
votes
6answers
77k views

Finding why a user is locked out in Active Directory

A user's account keeps getting locked out in Active Directory. It's probably caused by an app that's using Windows authentication to connect to SQL Server. Is there a way to find out which app is ...
0
votes
1answer
12 views

Script adding an NISMap object in Active Directory from Windows and RHEL6

I am working on using Server 2008R2 Forest to house AutoFS maps in the existing schema using NISMap and NisObject class objects. I can manually create them (and it works) with ADSIedit. I have ...
0
votes
0answers
15 views

AD Roaming Profiles via VPN not synchronizing

I want to create local Client-VMs (Windows 8.1) for our developers. These should connect to our VPN and login on our AD server (Windows Server 2012 R2). I'm using serverside profiles for this so that ...
0
votes
0answers
8 views

Debugging libnss_ldap AD synchronization

I am trying to configure my Debian server to talk to an AD. I have a connection to the LDAPs port of the AD, and i can use LDAP search to connect and retrieve results. I can also see that the getent ...
0
votes
0answers
20 views

Problematic Active Directorys CA certificate

i came across one DC, which gives me RPC errors when dealing with AD Certificate Service.I can see in AD there is 2 Root CA , one is problematic. Is it safe to remove it? Or is there a procedure for ...
2
votes
1answer
2k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
1
vote
3answers
3k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
0
votes
4answers
5k views

Network Path not found while joining Active Directory

So I have an Amazon EC2 box running Windows Server 2008 with Active Directory installed on it. I also have a Windows 7 virtual machine, which is set to use the Active Directory box as its DNS and WINS ...
1
vote
1answer
237 views

Migrating Gmail to Office 365

I have been setting up Office 365 for my organization. We are currently using Gmail. I have synced our local Active Directory server w/ Office 365, as well as our domains. The problem I am having has ...
4
votes
4answers
2k views

Can you have multiple writable, authoritative BIND DNS servers for the same zone, like AD-integrated DNS?

In an AD-integrated DNS system, there really isn't a concept of one "Master" DNS server; all AD-integrated zones are authoritative and updatable across all DNS servers, and send updates to each other ...
0
votes
1answer
38 views

Assigning Department based on Active Directory OU's

We have just gone to Office 365 tied in with ADFS. We want to be able to see people's departments automatically when we view their contact info in Office 365. We do not have any Department ...
0
votes
1answer
2k views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
4
votes
1answer
7k views

What does the user icon with the little red up arrow in AD mean?

When looking at the members of a group in AD there are normal members (singe head icon) groups (two heads icon) and then Anonymous Logon / Authenticated Users and Everyone which share an icon which is ...
2
votes
1answer
1k views

Windows 2008 R2 Server: Network zones (Public / Private / Domain) Seem to change randomly

So far on 2 occasions we have noticed that the network zones assigned to our server nics has been changed without any interaction on our part. This is out of a few hundred servers we manage. Case 1) ...
1
vote
1answer
204 views

How to install RSAT on remote Windows 7 workstations using Powershell in 2003 AD

How do I install and enable RSAT tools on remote Windows 7 Workstations using Powershell? Actually this process I think has 2 parts: Installing the tools Enabling the features; How can this be ...
0
votes
1answer
2k views

SharePoint 2010 not seeing Active Directory users

I'm pretty new to Active Directory and SharePoint but I was given to understand they are supposed to play well together. Now I have successfully set up AD with multiple user accounts that work on ...
2
votes
1answer
5k views

UnKnown can't find <hostname>: Non-existent domain

I have a small network running Windows Server 2012 servers and Windows 7 clients. Right now I'm trying to setup DNS with an AD-Integrated Zone. I've configured my local machine, which is not a domain ...
0
votes
0answers
8 views

Using Windows Server 2012 CA to provide internal certificates

I want to use Windows AD CS in order to provide any web interface internal to my company with SSL encryption and trust certification. What I want is to make the HTTPS interfaces of webapps, switches ...
0
votes
1answer
39 views

Find IP of computers using AD account

I cant seem to find a log that contains the info I want in AD. I want to log logon events so I can see each user login and where it came from, similar to the information logged when a user provides ...
1
vote
3answers
1k views

Active Directory Nested Security Group

Can you nest Security Groups in active directory? Are there limitations to the nesting? Which versions of Windows Server/Active Directory support the nesting?
23
votes
2answers
1k views

Why can a and o in samAccountName be replaced with danish å and ø?

A coworker just demonstrated to me that accounts in our test AD was able to authenticate when replacing every a character in their samAccountName with Danish character å (ASCII 134 / å). E.g. ...
1
vote
1answer
21 views

Replace the domain controller without copying the AD

we might have some special terms to do with replacing our DC. The current DC is running on an old machine with Windows Server 2003. As of the GPOs we aren't able to manage all new computers and as the ...
8
votes
2answers
253 views

Rss feed of Active Directory Changes?

Is it possible to setup a RSS feed to view all changes made to an Active Directory database?
2
votes
1answer
1k views

How to check WSUS server updates downloaded size?

How can I check the updates size which were downloaded in WSUS? For example I need to check the updates size downloaded of April 9, 2013 for new 26 updates. And how can I locale the new updates on ...
10
votes
1answer
605 views

Active Directory and Exchange Architecture Questions and Issues

Here's the background on our situation... Right now, we are setup as three distinct companies with three complete Active Directory and Exchange systems. The three offices (One in the US, two in ...
4
votes
1answer
358 views

Outsourcing Active Directory Server. Is it Possible? Is it Practical?

Our company is a fairly small shop. Nonetheless we want to "do things right," and part of that means implementing Active Directory. However, we don't have the budget for a full time system ...
2
votes
3answers
5k views

What rights does “Replicating Directory Changes” actually grant in Active Directory?

We need to grant a service ID the Replicating Directory Changes to Active Directory. People are concerned that we might accidentally let the service ID write data in Active Directory, or have ...
0
votes
0answers
6 views

Possible SPN issue with AGPM Authentication

here is an AGPM server in our forest root - AGPMServer.example.biz. The AGPM service is running as example\AGPM. If I log onto the server that hosts AGPM, I can connect no problem. My workstation ...
0
votes
4answers
1k views

Using admin credentials to log on as a user vs. storing passwords

Our office uses a Windows Domain with Active Directory to manage user access to machines and network resources. The IT staff maintains a record of everyone user's password, which is used mainly for ...
3
votes
1answer
22 views

Deploy Software via GPO, but also deploy configuration file

When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it? Here's the specific problem: We have a ...
1
vote
1answer
2k views

Windows 2003 Domain - Certificate Authority - New Automatic Certificate Request

I have an issue with a certificate authority in a windows 2003 domain. We need one configured to allow ssl/tls encrypted traffic over LDAP so that our Application Gateway server is able to allow users ...
0
votes
1answer
807 views

Active Directory GPO not working with Windows XP clients. Work fine with Windows 7

We have 2008 Enterprise R2 64 bit domain controller with Windows XP and Windows 7 as clients. When i try to use a group policy to make all users desktop wallpaper to a common JPG image ( Image is ...
2
votes
0answers
76 views

cifs Required Key Not Available

I have joined to a zentyal domain (AD Domain) using PowerBroker IS and I want it to mount my remote home directories when a remote user logs in. this is the config for PBIS: AllowDeleteTo "" ...
0
votes
1answer
25 views

Windows Server 2003 secondary DC issues

I have some strange issues with my domain controller. I have primary DC called 'netsun' with ADDS, DNS and DHCP, and secondary DC called 'ex_serv' with ADDS service and exchange. So my primary DC is ...
0
votes
1answer
14 views

In which order will GPOs be applied when a USER try to login to a PC in a different OU

If we have this Group Policy Management configuration (Windows Server 2008): domain.local OU1 PC1 USR1 GPO1 (Linked) OU2 PC2 USR2 GPO2 (Linked) ...
1
vote
3answers
37 views

Linux / AD integration with SSSD: how to choose what systems a user can log into?

We are trying out ActiveDirectory integration on some linux systems with SSSD. So far so good we joined the linux systems to the domain and we can log into linux systems with AD-defined users. Right ...
0
votes
1answer
42 views

How do I move Active Directory user information to the Exchange Global Address Book?

I am running Exchange 2013 and I have noticed in Outlook that a lot of the contacts in the Global Address Book are out of date. I recently went and update all of the Active Directory details so how ...
2
votes
1answer
1k views

AD: What is the difference between a managed and unmanaged computer?

I'm working on setting up Windows Deployment Services on a Windows Server 2003 machine. In my exploration of the various options for configuring this system, I wanted to learn the difference between ...
3
votes
1answer
152 views

How do I enable SAML Passive Authentication in ADFS 3.0?

For several years, I've used ADFS 2.x as a SAML IDP that works with SAML Passive Authentication. When the isPassive=true flag was set on the Request, the Response would include the following ...
1
vote
3answers
3k views

How to grant a group permission to access c$ shares

I'm looking for a way to centrally grant access to the c$ share of all our PCs to our IT active directory security group. They often use this to check desktop shortcuts, etc. Right now they have to ...
1
vote
1answer
40 views

How can I remove the minimum password length for a specified user in an OU?

How can I remove the minimum password length for a specified user in an OU? (I do not want the default domain password policy affecting my GPO.) When the "minimum password length" in my default ...
3
votes
2answers
22k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: ...
4
votes
13answers
58k views

Can I get all active directory passwords in clear text using reversible encryption?

EDIT: Can anybody actually answer the question? Thanks, I don't need no audit trail, I WILL know all the passwords and users can't change them and I will continue to do so. This is not for hacking! ...
0
votes
1answer
641 views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
0
votes
0answers
3 views

Connect MSSql using Service account “domain/User” via PHP/Yii [migrated]

i trying to use a windows service account user "DOMAIN/username" to access an existing MSSQL db environment via PHP/Yii i m able to successfully login to the MSSQL database directly using this ...
4
votes
2answers
352 views

Modifying Active Directory Connection Objects

In Windows Server 2008, Active Directory's automatically created connection objects for domain controllers have an attribute called options with a value of 0x1 = ( IS_GENERATED ). This value tells the ...
0
votes
1answer
47 views

Merging multiiple domains with the same existing domain name (office.local)

I am working with a new client who has 5 offices and four of which have a single domain controller with the name of OFFICE.LOCAL and another one with the domain controller DENTAL.LOCAL. Oh and all of ...
0
votes
2answers
50 views

Running a Windows Server 2012 Domain Controller in Hyper-V

I attempted to install Windows Server 2012 on a Dell PowerEdge 2850 and found out that the server may not support Server 2012. Is there any downside to running a Windows Server 2012 domain controller ...