A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

6
votes
3answers
13k views

How to enable Automatic Logon for a computer in Windows Domain?

I need to setup publicly available computer to perform automatic log on using domain credentials when powering on. When it was not a domain member this option was available on control userpasswords2 ...
0
votes
2answers
1k views

Mutli-DC Environment DNS Error 4015

We recently added a new 2008 R2 DC to an existing 2003 forest with one 2003 DC. We haven't raised any functional levels. The 2003 DC was powered down (it hadn't been demoted yet, but all the FSMOs are ...
4
votes
3answers
1k views

How to find last login user on given computer name on AD

If anyone could help, it would be appreciated. I am trying to audit the network. I have list of computers that are active in last 3 months in domain. I have little script that run when user login to ...
3
votes
1answer
306 views

Diagnosing slow active directory logins

I'm having a hard time diagnosing intermittent slow logins on domain PCs. A bit of information about the network that has this problem: My domain spans 5 sites, all with VPN connections. DCs are ...
4
votes
1answer
31 views

Powershell - Merging Results in one table

I am new to powershell. I am trying to create a report that shows AD accounts that expire soon. The report should include the User Name, AccountExpirationDate and the Manager. I have the ...
1
vote
1answer
18 views

csvde to find 1 user based on SamAccountName

I want to use csvde to find 1 user based on SamAccountName and export all the details about that person to a CSV file. The problem I am having is filtering by SamAccountName csvde -f search.txt -p ...
1
vote
2answers
33 views

Server 2008 R2 > 2012 Migration

I am pretty new to windows server so please bare with me, i am looking to upgrade our current small server from server 2008 rs to windows server 2012 essentials, however we are only using one server ...
2
votes
2answers
37 views

How to clone, disjoin & rename a Windows 2008 R2 VM offline, then rejoin domain online

I have a Windows 2008 R2 domain joined server, which should be cloned as test server in the same domain! There is an MSSQL 2012 instance and Team Foundation Server 2013 installed, but this shouldn't ...
0
votes
1answer
20 views

AD FS and DC on same Server

i have to connect AD with Azure AD but we have a 2008 r2 server and wwe don`t want to upgrade the server to 2012 r2. Is it possible to have the domain controller and the ADFS server on the same ...
0
votes
1answer
2k views

Windows server 2003 MMC has detected an error in snap. It is recommended that you shutdown and restart MMC

I have Windows Server 2003 STD x64 SP2 and I have been installed AD on it. When I try to add computer there is an error message saying: MMC has detected an error in a snap. it is recommended that ...
1
vote
0answers
38 views

How do I workaround inaccessible DCs in a spoke site, in a hub and spoke configuration?

I have a Hub and Spoke configuration. The spokes can never see another spoke. SCOM is reporting errors that GPO can't access \company.com probably because every Domain Controller has an NS record, ...
3
votes
1answer
23 views

Integrating FreeIPA or RH IdM in an existing MS AD environment

I want to deploy FreeIPA or Red Hat IdM in my existing environment Currently my domain is managed by MS AD which is controlled by a separate group. Assume that changing anything in MS AD is going to ...
3
votes
1answer
1k views

How should DNS be configured for remote VPN access to a Windows Domain?

Suppose you have a small windows domain configured as follows: domain name is ad.example.com (as per these guidelines) DC1 is at 10.10.10.3 DC2 is at 10.10.10.4 DC1 and DC2 are running the ...
0
votes
3answers
2k views

RPC Server Unavailable When Trying to Join W2003 Server to W2003 Active Directory Domain

I have an Active Directory Domain with a Windows 2003 Standard SP2 Server as the DC. When trying to join an additional Windows 2003 Standard SP2 server to the domain I get message "The following error ...
0
votes
1answer
520 views

Cluster Aware Updating set up - VirtualComputerObjectName ignored

I am trying to set up Cluster Aware Updating, but it always fails with the following error: Add-CauClusterRole : Unable to create the CAU clustered role because a Network Name resource could not be ...
0
votes
0answers
17 views

Clients not authenticating with RODC - nltest gives SERVICE_NOT_ACTIVE

I am new to the Windows world and pretty much followed the guide from this Windows Server Blog For the life of me I can not get clients to authenticate with the RODC. When I have the on-site RWDC ...
4
votes
1answer
109 views

sAMAccountName used for logged on users

When RDP'd to a server I'll often find that there are no available sessions as there are users currently logged in. Within our environment we utilise a user privilege management solution which creates ...
1
vote
1answer
29 views

Deleted GAL in EMC and ADSIEDIT now Error

I attempted to delete a Global Address List via Exchange Management Console and ADSIEDIT as I made a typo during the creation. Now when I try to create a new GAL, i get the following error [PS] ...
0
votes
3answers
33 views

Active Directory Export GPO user

I would like to get in .csv (or any other readable format) all my AD users and the policies that they need to comply (the type of authentication each user needs, his event logging properties and even ...
1
vote
2answers
48 views

How to setup a Domain Controller in the cloud

We are implementing a new Windows Server 2012 R2 domain controller for our 2 small offices, and we want to set it up on Amazon EC2. I have read that with this type of setup you normally use a VPN. How ...
6
votes
2answers
76 views

Setting up a Windows Domain in a O365-only company

My company is quite young and small, but since we're growing, we want to rollout some software deployment solution. We haven’t decided which one yet, but they usually need a Windows Domain, and we ...
3
votes
2answers
766 views

Limiting view of Active Directory Users and Computers

I am delegating a group of users to a specific person to be able to keep up with thier account management, and I have delegated them the authority to do this to just this group. Is there a way that I ...
0
votes
2answers
1k views

Installing Exchange in a RODC Site

I'm trying to install Exchange 2010 to a server in a site that uses an RODC. It tells me that "No domain controllers for the domain DOMAIN and the site SITE are available" I'm going to be moving the ...
1
vote
1answer
346 views

do I need to create an AD site for VPN network

I have Windows Domain level 2008 R2. There are four GC DC in four different physical locations. I have Kerio-based VPN network for replication and remote administration. Here is how network ...
0
votes
1answer
1k views

Cannot connect to domain error: The format of specified network name is invalid

I cannot connect clients to sbs2003 domain because of this error: The format of specified network name is invalid. Before that there is a prompt for a login and password, so the server is found. I ...
0
votes
1answer
1k views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
0
votes
2answers
88 views

what happens when a DC fails? How can the clients identify DC failure? [closed]

When a DC fails, it loses the privilege to authenticate and so client will find for secondary DC closest to its site. In another scenario, client has selected a DC closest to its site by using subnet ...
1
vote
1answer
49 views

Additional Keyboard settings from Active Directory

We have some users in our company who need to use additional Keybaords, in order to achieve this one of the other admins had written a VBS script which runs when users in a particular group log in to ...
1
vote
1answer
33 views

Accessing local groups remotly for a Windows Fileshare where user accounts are on an AD

I am asking this question with almost no knowledge of Windows and Active Directory. I have a Windows Server (2012), that I am using as a file server (FILE01.domain.tld). There are some local groups ...
2
votes
1answer
775 views

Problems mounting Kerberos authenticated NFS share on CentOS 6.4

I'm trying to mount a Kerberos authenticated NFS share on a CentOS 6.4 machine. I have tried exporting the protected share from both another CentOS 6.4 machine and from our NetApp with the same ...
0
votes
1answer
1k views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
2
votes
1answer
2k views

How to connect AD Explorer from Sysinternals to Global Catalog

I'm using the sysinternals AD Explorer quite frequently to search and inspect an Active Directory without any big problems. But now i'd like to connect not only to a single AD Server. Instead i like ...
-2
votes
1answer
55 views

Can a site contain domain controllers from multiple domains?

For e.g. I am creating a site with 2 clients and 1 DC in it. I am setting the subnet to cover these objects. So my site say SITE1 will have 2 clients and 1 DC. So when one of these clients tries to ...
5
votes
1answer
46 views

Windows 7 login issues

I have one user who has been having this issue I have never seen before. She is always having issues starting up her machine, such as Windows getting stuck on welcome screen after logging in, or stuck ...
7
votes
1answer
52 views

Exchange Server Using Wrong Active Directory Site

Our Exchange 2013 server suddenly started logging errors about bad replication between sites (there should be no replication as there is no other server) as well as several other issues that appear to ...
0
votes
1answer
33 views

Link server 2012 account picture with active directory

We have a Windows Server 2012 R2 remote desktop deployment, with a session collection consisting of 6 session hosts. We also use Office365 and DirSync to enable single sign on with ADFS running also. ...
0
votes
0answers
16 views

Removable Storage User Configuration Group Policy not working when Windows Server 2008 R2 is used as a client

I have enabled read write restriction for a group of users, if a user from this group is to log onto a win 8.1 system or Windows 7 system and tries accessing a USB drive it says access is denied, ...
0
votes
2answers
1k views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
3
votes
1answer
27 views

Why does a SPN on a different host cause a server to lose its trust? How should I fix it?

I have a brand new server image that loses its trust as soon as it's joined to the domain. I suspect it's because of the duplicate SPN I discovered using the LDAP version of this Powershell script ...
0
votes
1answer
46 views

Faulty DC preventing NTFRS replication

When adding a new DC (2012 R2) to a domain (2008) everything goes well except that it never advertises as DC. Doing a bit of diagnosis i found out that ntfrs replication never starts, consequently ...
1
vote
1answer
579 views

Nagios NRPE plugin check_ad - Fixed

i've reading about this problem much and trying to solve it on my own ways but still not luck. I've running debian 7 as nagios server. Problem is that i cant check state of my Active Directory Domain ...
7
votes
3answers
2k views

Active Directory disaster recovery with DPM

I have a sort of catch-22 question here. Suppose I'm using Microsoft System Center Data Protection Manager (2010 or 2012, it works the same way) to backup, amongst various other things, my Active ...
24
votes
3answers
1k views

What features of Windows 8.1 Pro will not work without a Microsoft Account?

With respect to domain-joined Windows 8.1 Pro machines, what features of Windows will not work unless a Microsoft Account is used? Also, aside from "feature loss," are their any gotchas of not using ...
2
votes
1answer
2k views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
3
votes
2answers
675 views

What are pros and cons of keeping a local administrator account in Windows 7 workstations in a domain?

We have a network with Windows 7 Enterprise machines, all members of a domain. We've been keeping a local (unlocked) 'Admin' account on each workstation in parallel to the built-in (locked) ...
5
votes
1answer
72 views

In Active Directory, how do I delegate write permissions on specific attributes of protected user accounts?

We have a tool being developed that will keep specific attributes of Active Directory user objects up to date with an authoritative source of employee information truth elsewhere, so that when ...
5
votes
2answers
301 views

Is there a way to tell how long a machine has been in an security group?

Machines get added to a security group to prevent them from getting a GPO. I'd like the machines to get removed after 30 days of being in the group. Ideally, I'd like to also be able to generate a ...
1
vote
1answer
27 views

User blocked in AD by some windroid device

We have a user that is constantly blocked. We checked the logs in the domain controllers and all the information shown is that a WINDROID device is the source. How can I know which device is causing ...
0
votes
1answer
24 views

2 Domains - 1 ADFS - 1 SharePoint - 1 Authentication way

I'm wondering if this if possible: I have 1 AD Domain: InternalDomain. I want to create a secondary domain: CustomersDomain. I would like my SharePoint to be able to authenticate users from both ...
0
votes
1answer
23 views

Adding additional 2008R2 DC to Window 2012 R2 domain

I am migrating our company's AD from a Windows SBS 2008 to a news Windows 2012 R2 Essentials server. Everything went fine and the new AD now is in production stage. The last step is adding an ...