Active Directory is a Microsoft technology primarily for managing multiple Windows servers and workstations in a single environment. It was first released in 2000.

learn more… | top users | synonyms (2)

5
votes
0answers
49 views

Synology and Active Directory - “no logon servers available”

I have a Synology Diskstation DS412+ here configured for Active Directory authentication on the shared folders. I have a shared folder that our backup software writes backups to (so, CIFS). This all ...
4
votes
0answers
44 views

“The zone can be scavenged after” keeps incrementing

What are you trying to do? I'm trying to enable DNS scavenging on a DNS zone that has about a hundred stale DNS records. What have you tried in order to make it happen? I setup DNS Scavenging per ...
4
votes
0answers
189 views

AD custom attribute of type numerical string crashes MMC when updated

I am using windows server 2008. I have a domain with one domain controller (this is a dev environment). I edited the AD schema and created a custom attribute called TestAttribute2 (the LDAP name is ...
3
votes
0answers
17 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
3
votes
0answers
45 views

Expensive LDAP queries from Workstations

Troubleshooting high LSASS process on a DC found expensive queries originating from a few workstations. Each query is as follows: Visited Entries: 1Million+ Returned Entries: <50 (most of the ...
3
votes
0answers
177 views

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
3
votes
0answers
211 views

Branch office & DNS

We've got a branch office with no on-site services at the moment and we'd like to change that. The biggest goal is to setup some file servers but faster log ons and DNS resolutions will be welcome as ...
3
votes
0answers
89 views

Error connecting ESX 5.0.0 to domain

I am trying to connect an ESX 5.0.0 to our Domain Controler, in order to give a Domain group specific roles security. But I do not see any groups after the host connects to the domain. Under ...
3
votes
0answers
52 views

Why is Office 2010 asking me to choose one of only one potential account to open a restricted document

We have implemented an AD Rights Management System in our domain. Occassionally, when I send a protected email to someone in my domain or someone sends one to me, I will be prompted with a dialog box ...
3
votes
0answers
684 views

DSGET escapes hash signs (#) in outputted Distinguished Names (DN)s but expects unescaped hash signs for input

Lets say I want to do the very simple query in AD dsquery user -name "John Smith" | dsget user -memberof -expand This will output the DNs of the AD groups that this user belongs to. I can make it ...
2
votes
0answers
37 views

Active Directory backup/restore without DSRM

I'm trying to backup my local DC to AWS for DR. When running locally, a system state backup and a restore through DSRM works fine. Unfortunately, a server in DSRM fails to boot in AWS (a situation ...
2
votes
0answers
23 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
2
votes
0answers
21 views

Mavericks - APN Active Directory Users not being pushed

We have hit a problem with our current AD -> OSX Server integration project. We have our OSX server (mavericks) connected to our AD domain and running open directory/profile manager. AD users can ...
2
votes
0answers
20 views

Are External LDAP referrals similar to a DNS Recursive or non recursive entry?

I'm very familiar with DNS, but less so with LDAP. In DNS I have the ability to delegate the CPU and IO load of referral chasing a given DNS query... or I can set norecurse and have the client ...
2
votes
0answers
28 views

Restrict IMAP access for a given account to only one IP address in Exchange 2013

I've created a "spam crawler" account with full access to all mailboxes in an Exchange 2013 environment to get messages in the junk folder to feed the Bayesian filtering running on SpamAssassin in a ...
2
votes
0answers
41 views

How do you dirsync mailusers in Office 365 from AD?

We have Contact objects in Active Directory that are synchronized into Office 365. However, many of these are contacts for users that we have also established an AD account for, meaning we have two ...
2
votes
0answers
23 views

Single MailCleaner installation for two distinct domains with user authentication

I would like to use one MailCleaner installation to handle two distinct domains as one centralised spam management system, sharing configuration and mainly the bayesian filtering database. Both ...
2
votes
0answers
23 views

Forcing not-yet-known SID value in AD LDS userProxy account

We are dealing with a chained provisioning request, the goal being to create successively an AD account and an AD LDS userProxy account associated with the just created AD account. The AD account SID ...
2
votes
0answers
73 views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
2
votes
0answers
48 views

doing ODBC System DSN's from Active Directory

2008R2 Active Directory, workstations are Win7 Ent, Office/Excel 2013, Oracle 11.2. Excel fetches data from Oracle using System DSN's. Where can I put ODBC System DSN's in Active Directory? Do I ...
2
votes
0answers
81 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
2
votes
0answers
71 views

configuration CAS with LDAP active Directory

I am using CAS server version 3.5.2 and after I configured it to connect to an LDAP server I got this message. Anyone have a clue about what is happening? My LDAP server is pfeserver.pfe.dz ...
2
votes
0answers
2k views

Windows 7 there are no logon servers available to service the logon request subdomain

I've read other solutions, but my problem is slighlty different. Problem occurs in domain environment. We work in a subdomain, but we also have some employees coming with notebooks registered in top ...
2
votes
0answers
460 views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
2
votes
0answers
199 views

vSphere 4.1 Client “Cannot complete login due to an incorrect user name or password” with new AD accounts

I've got a VMWare ESXi 4.1 server connected to a vCenter server, with an active directory domain. This has been in place for at least a couple of years, perhaps more. Using the vSphere client 4.1, ...
2
votes
0answers
87 views

Diagnosing slow active directory logins

I'm having a hard time diagnosing intermittent slow logins on domain PCs. A bit of information about the network that has this problem: My domain spans 5 sites, all with VPN connections. DCs are ...
2
votes
0answers
108 views

Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients

I've inherited a system that may have never been fully integrated as it could have been. We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
2
votes
0answers
93 views

Windows Sub CA not issuing certificates

I set up a fresh 2-tier PKI to try and replace an old broken PKI with a CA that was no longer available. Everything seems to be working between the offline root and online issuing CAs, but now I'm ...
2
votes
0answers
52 views

Windows 2008 R2 server loses connection to Active Directory

One of our many 2008R2 servers constantly loses connection to the domain, meaning that users cannot login to shares etc on the server, and it basically becomes useless. The event sometimes generated ...
2
votes
0answers
268 views

Windows 2008 R2 Server: Network zones (Public / Private / Domain) Seem to change randomly

So far on 2 occasions we have noticed that the network zones assigned to our server nics has been changed without any interaction on our part. This is out of a few hundred servers we manage. Case 1) ...
2
votes
0answers
100 views

How can I use a Linux BIND DNS server for my Active Directory forest?

I am trying to setup an Active Directory forest that uses a Linux BIND server for DNS. The goal is that the Domain Controller (DC) to be able to make entries in the /etc/bind/db.foresta.net file from ...
2
votes
0answers
37 views

Load balancing inconsistencies & AD server causing network crawl

We've configured a TS load balancing farm consisting of the Active Directory server which acts as the TS Broker and 6 Terminal Servers who are members of the farm. The load balancing is set to basic ...
2
votes
0answers
634 views

LDAP over SSL Unsuccessful on 2003 DC, Working on 2008 R2 DC in Same Domain

I have a publicly signed UCC for LDAP over SSL in a test domain. It contains the Server Authentication OID Extension and works fine on a 2008 R2 DC in the same domain. The CSR was generated on the ...
2
votes
0answers
36 views

DNS check showing Failed

Domain Controller OS - Windows Server 2008 R2 Standard. The Name of the Server is QSIT035V2 Can you tell me why i am receiving "QSIT035V2 failed test DNS" Error? Please see the print-screen Attached ...
2
votes
0answers
99 views

Strange Folder Redirection

I've recently inherited a client who has a folder redirection policy GPO and home paths specified through user attributes in AD. Now the strange thing is, I have literally no idea how it is working. ...
2
votes
0answers
91 views

Windows Roaming Profile Reverting to Local Profile

I'm trying to set up roaming profiles within a Windows Server 2012 domain. Here is what I did: I created a shared folder, which I am able to access at \\dc1\profile when logged in as the roaming ...
2
votes
0answers
167 views

How do I download the avatar image from an Active Directory server?

I'm using the ldapsearch.exe binary that was installed along with an Oracle client. It took awhile to tease out the arguments that it wanted, but I'm able to successfully connect to AD and parse out ...
2
votes
0answers
433 views

Unable to request new certificate: access denied. (2008 R2)

When trying to request a new certificate for DomainControllerAuthentication from our DC designated as the CA, we keep receiving an access denied error. The following events are generated in the event ...
2
votes
0answers
133 views

Domain Trust with Selective Permissions - Object permission Allowed to Authentiicate applied by OU?

http://technet.microsoft.com/en-us/library/cc738653(v=ws.10).aspx Referencing the page above: My goal is to have all computers in the domain allow authentication from the object I am adding. In ...
2
votes
0answers
103 views

SBS 2011 Essentials and too many new Mac users

We currently have about 15 users on a Windows SBS 2011 Essentials Server. I've just been informed that we plan to bring aboard about 15 more users that will be using Macs. We'll be using a Mac ...
2
votes
0answers
371 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
2
votes
0answers
118 views

Adding a 2008 server to a 2003 Domain with DNS devolution?

I'm running into a problem adding a 2008 server to our existing 2003 domain, and as I am not a Windows admin, I'm not getting the problem here. Some reading around on Technet seems to indicate that ...
2
votes
0answers
119 views

MS Operations Manager 2012 Web Console access Active Directory Users And Computers

Does anyone know if it is possible to add/manage "Active Directory Users And Computers" to/from the System Center 2012 Operations Manager Web Console?
2
votes
0answers
224 views

How do I print, identified as an AD user, from an Ubuntu client to a Windows print server?

I know my question may be confusing, so I'll clarify. I'm an admin at a school and am setting up the labs to use Ubuntu (12.04). Users already can authenticate against Active Directory (currently ...
2
votes
0answers
255 views

Processing of group policy failed - Only on 32bit machines

When forcing a group policy update I get the following messgae, but only on 32bit windows machines. 64bit works fine. Running windows 7. The processing of Group Policy failed. Windows could not ...
2
votes
0answers
47 views

Auxiliary class

I try to modify an AD schema, adding a custom auxiliary class in user (Cn=MyName,CN=Users,DC=xxx,DC=yyy) With adsiedit when the new object window pops-up to add the class, I can only select ...
2
votes
0answers
113 views

Certificate enrollment request chain not trusted

I am working on a MSFT lab for Direct Access, and need to create a Web certificate. The instructions ask be to do the following: On EDGE1, click Start, type mmc, and then press ENTER. Click ...
2
votes
0answers
133 views

Unable to access file system via RemoteApp but works fine in RDP session

I've written a program that accesses a file on a remote server, through a remotely mounted drive on another server. The program runs fine (is able to access the file) when I start an RDP session, and ...
2
votes
0answers
202 views

Windows 2008 R2 Active Directory + NDES CA, OpenSSL clients renewing certificates

I posted another question which seems to be getting nowhere, so maybe it was too specific (or I was on the wrong track). I have OpenSSL clients which generate Certificate Signing Requests, which are ...
2
votes
0answers
146 views

BES overwrites outlook contacts How to stop this behavior

We have a particular user who really likes to send around his V-Card from his blackberry contacts. To do so, he adds himself as a contact in Outlook and then emails the contact card as required. ...