A Microsoft technology for sharing one set of user accounts, security permissions, and management information across many Windows servers and desktops.

learn more… | top users | synonyms (2)

0
votes
0answers
10 views

Wireless authentication with DD-WRT, Cisco and Microsoft

I'm looking for a way to authenticate my wireless users beyond them just knowing the wireless password. Ideally they would join the access point then get dumped to the login portal that they'd have to ...
0
votes
2answers
13 views

OpenLDAP proxy : caching credentials in case Active Directory master unreachable

I'm setting up a Debian server in my company where users are managed in an Active Directory. I'd like to authenticate users with AD but I'm thinking it would be better, if feasible, to have a local ...
2
votes
4answers
257 views

24 hour expiration of first password

EDIT** I'm thinking of running a scheduled task at the end of every workday to retrieve all accounts who have never logged on and disabling their accounts. Please excuse any syntax errors. I may very ...
0
votes
1answer
16 views

Passwordless login: virtual smart card with no pin?

I would like to set up a domain-joined computer for passwordless login with some low-privileged domain account that is specific to that computer. I've seen some blog posts that store the username and ...
0
votes
1answer
23 views

Migrate from MS Active Directory to Samba4

The target is to replicate a MS AD DC (Windows server 2012) to a new Samba4 AD DC, then migrate users to the new Samba domain. This is our first time, and the various documents on the Internet are not ...
0
votes
3answers
2k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
0
votes
1answer
39 views

Issues with delegating subdomain to AD server

I have a working authorative BIND 9.8.4-P2 server on freebsd on domain domain.com with IP 192.168.0.3 and name ns.domain.com that I did not set up on my own. It is a hidden server from which a subset ...
2
votes
1answer
8k views

UnKnown can't find <hostname>: Non-existent domain

I have a small network running Windows Server 2012 servers and Windows 7 clients. Right now I'm trying to setup DNS with an AD-Integrated Zone. I've configured my local machine, which is not a domain ...
-1
votes
0answers
17 views

How do I integrate Active Directory and IOS application [on hold]

Mobile IOS application should provide authentication that depends on Active Directory. What is the standadrd approach (technologies, libraries) to implement that? Thank you in advance!
-3
votes
1answer
16 views

Remove crashed SCCM 2012 from Active Directory 2008 R2 (schema version 69)

Our VM SCCM 2012 as been deleted by other administrator the last years and we haven't backup. I want remove all trace of SCCM from our Active directory and workstation but i don't know how to do this. ...
1
vote
0answers
9 views

Cygwin: Obtain comment field from Active Directory with mkpasswd

Running cygwin on W7x64. Since a generated /etc/passwd file is static, it has to be performed occasionally when new employees are hired. It polls Windows AD, and writes the passwd file. In the past, ...
2
votes
1answer
3k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
2
votes
3answers
55 views

Moving DNS and AD DS to their own servers

I have one WINDOWS SERVER 2012 running my DNS and AD DS on the same server. I am trying to move DNS to it's own server and ADDS to it's own server as well. What I have done so far is setup ADDS on ...
3
votes
2answers
50 views

AD | Prevent admins from changing passwords to the same thing

I have an interesting security problem: Admins with ad access have been changing their password to the same thing, and breaching the company security policy. User side, standard AD complicated ...
14
votes
1answer
26k views

How is DNS related to Active Directory and what are some common configurations that I should be aware of?

Please note that I do know the answer to this and have provided one below. I see a lot of newer systems administrators that don't understand the contents of my answer, so I hope that all of the ...
1
vote
1answer
974 views

Exchange 2013 really slow outside of localhost

We've got a 12 core xeon, 24GB of ram 2012 server. We've recently migrated from exchange 2010 (which was on another server) to exchange 2013 which resides on our new 12 core server. Accessing the OWA ...
0
votes
0answers
8 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
-2
votes
0answers
13 views

Server 2012 create share for each AD user and automount when they login?

I am trying to create a share directory for each user on my AD server, and when they login that share will automatically mount. I tried creating the share and using the Profile>Home Folder option in ...
0
votes
1answer
1k views

Active Directory DNS issue? Event ID 13 Access Denied,

Okay this is kind of a rehash of a prior post. (Clustered Storage Error: There are currently no logon servers available to service the login request) due to my belief that it is unrelated to the ...
0
votes
1answer
10 views

Delegate permission to “Pre-create Read-only domain controller account”

Is it possible to delegate permission to "Pre-create Read-only domain controller account" (found on the context menu of the Domain Controllers' OU) to a non-domain admin account?
1
vote
0answers
7 views

userAccountControl property - delegate permission to set PARTIAL_SECRETS_ACCOUNT

I am needing to set the userAccountControl property of a user account to include TRUSTED_TO_AUTH_FOR_DELEGATION (0x1000000) and PARTIAL_SECRETS_ACCOUNT (0x04000000). To set ...
0
votes
2answers
10k views

Windows Server Manager Kerberos error 0x80090322

I have been frustrated with this issue for two days now so I finally decided to ask this on serverfault. I'm setting up a Windows lab environment. It has a Win2012R2 domain controller (srv001) and ...
5
votes
2answers
12k views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
-1
votes
0answers
17 views

Active Directory authentication using RADIUS

I'm trying to authenticate linux hosts using a Radius server. For that, I've used this tutorial on youtube. Problem 01: Everything is working and I can authenticate via ssh, but I can't log via user ...
2
votes
1answer
3k views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
1
vote
3answers
3k views

Unable to resolve FQDN, hostname works

We are having an issue where computers who are not part of the domain cannot resolve the FQDN of a server (but regular hostname and ip do resolve). The strange thing is that this does work when the ...
1
vote
1answer
52 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...
5
votes
4answers
729 views

When the internet is down, so does Active Directory?

I am setting up business servers for a small office use with 5 users / 5 devices or so. Nothing elaborate here. I've set up a SINGLE Lenovo TS440 server (single NIC) with Windows Server 2012 R2 ...
0
votes
2answers
2k views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
0
votes
1answer
13 views

cannot config LDAP in filenet p8 5.2

i tried to fulfil this form many times and click "test LDAP connection". it's alway return success. but when i click "run task", it's alway return Running the task failed with the following message: ...
2
votes
5answers
212 views

How to prevent remote code execution from a domain member server?

Is there a way, using a firewall, Group Policy setting, or other control, to prevent someone logged into a domain member from being able to remotely execute code on a domain controller (that they ...
1
vote
0answers
26 views

Create SCCM device collection based on last logged on users who are members of an AD security group

I'm trying to create a device collection in SCCM 2012 which contains only the devices who are used by the users who are members of a certain User AD Security Group. I tried to accomplish this by first ...
2
votes
1answer
25 views

Reversible Encryption - Not Defined but Showing as Enabled?

I'm reviewing our complex password policy that was setup by a previous admin and I'm trying to gain some clarification on the setting for Reversible Encryption. In our organization, reversible ...
4
votes
4answers
4k views

Differences between Active Directory Server and PDC

The Samba documentation states quite clearly that is only capable of functioning as an NT4 style Primary Domain Controller and can not function as an Active Directory server. I manage a group of ...
4
votes
1answer
109 views

Server2k8: Prevent membership in a group based on membership in another group

I'm revamping my company's service accounts, and we've discovered that some need to be able to log on locally, and some are OK with just logging in as a service. I've created two groups, ...
1
vote
2answers
41 views

Change different domain account without being admin Windows

I have 2 accounts on a domain. I can log into a citrix virtual desktop with the one account fine, but the other won't let me log into anything until I first change my password. I am remote, so I ...
0
votes
1answer
35 views

Is it possible to add permissions to an Active Directory account using PowerShell?

We're deploying Active Directory, and we're using PowerShell scripts for most of it: creating the forest, creating AD elements (users, groups, sites, subnets), etc. We'd like to make some users able ...
1
vote
1answer
1k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
3
votes
2answers
2k views

Retreive the current Kerberos KVNO from Active Directory

I have a Kerberos problem with a Linux host connecting to a Windows KDC. I suspect that Kerberos key with the wrong version is to blame. One way to be shure would be to delete the SPN and create it ...
1
vote
1answer
21 views

Active Directory Group Policy - Default Domain Policy CSE GUID

The active directory attribute: "gPCUserExtensionNames" contain a CSE GUID and a Tool Extension GUID string value in order pass information for GPO behavior. I have found in the Default Domain ...
1
vote
1answer
4k views

ActiveDirectory domain service wizard: Prerequisites check for domain controller upgrade fails

I want to test my software's SSO, so I am trying to configure ActiveDirectory on Windows Server 2012, following this tutorial. At "prerequisites step", the window is supposed to look like: but ...
0
votes
2answers
373 views

Windows not passing credentials when accessing share

My company is using a domain environment with Windows 2003 servers. All is great, except for one fussy laptop. Any network-related activity between it and domain servers is slow. Internet activity is ...
0
votes
1answer
43 views

Allow access to only certian AD Group users to IIS site

I have created Active Directory Group to allow access to certain user to IIS site (IIS version 8.5). I have installed "URL Authorization" module as shown in below link: ...
0
votes
0answers
18 views

how to get info on failed authentication to domain - security audit?

Setup: 1 Windows Server 2012 box as Domain Controller, named DC1. 2 Windows Server 2012 R2 boxes, S1 and S2, on the same network, same config, joined to the domain. Issue: At random times, S1, S2 or ...
0
votes
0answers
19 views

AD DC - Error 4625 Status 0x80090308

I recognzie a small amount of Event 4625 entries with a status of 0x80090308 and substatus 0x0; 2% over all 4625's. It is basically a failed logon but without any information I could use to look ...
0
votes
0answers
17 views

Two different IIS applications with different auth methods for the same domain

I have been working on a kind of SSO solution for an intranet application. My approach has been: configure the application within IIS with Windows Security authentication configure IE adding the ...
-2
votes
0answers
34 views

Migrate Linux User Account To Active Directory

How can I add a linux user to an active directory account and keeping all the settings / profile from the linux account? In otherwords how can I add a specific linux user to AD so that when I login ...
0
votes
3answers
3k views

RPC Server Unavailable When Trying to Join W2003 Server to W2003 Active Directory Domain

I have an Active Directory Domain with a Windows 2003 Standard SP2 Server as the DC. When trying to join an additional Windows 2003 Standard SP2 server to the domain I get message "The following error ...
-3
votes
2answers
45 views

Windows 2008 dead server to windows 2012 Active directory move [closed]

Our windows 2008 AD server has failed, but i am able to read the hard drive via a usb cradle. We have got a new server now running windows 2012. Is there anyway I can move the active directory? Any ...
2
votes
1answer
2k views

Windows 2008 R2 Server: Network zones (Public / Private / Domain) Seem to change randomly

So far on 2 occasions we have noticed that the network zones assigned to our server nics has been changed without any interaction on our part. This is out of a few hundred servers we manage. Case 1) ...