1
vote
2answers
54 views

AD - storing last 4 of employee social sec number as the employeeNumber attritubte?

I am currently working on scripting some of our access at work and would love an easy way to enter and retrieve the last 4 of a user's social sec number. It's the primary way we identify people that ...
2
votes
1answer
27 views

Advantages of auxiliary classes when extending Active Directory schema

I need to add some attributes to the user class in Active Directory. I see that to do this it is either possible to add the attributes directly to the user class, or to create an auxiliary class ...
2
votes
1answer
49 views

Changing LDAP schema casts Confluence AD integration unoperable

I have had our instance of Atlassian Confluence configured to be integrated with our Active Directory. In AD, all the users were being created under default Users folder in Active Directory Users ...
1
vote
2answers
372 views

Please help - Schema/RID master is unavailable and cannot connect to it via ntdsutil

I am in serious need of help. I had of 2 domain controllers and one currently went down last night indefinitely. I have one DC holding up the entire domain. Kinda in a panic. Our servers are running ...
3
votes
3answers
280 views

Active Directory examples of hierarchy

i am in the process of restructuring the hierarchical structure of the local active directory server of the institution i am working for. I was wondering if anyone knew of any place i could find best ...
0
votes
1answer
69 views

Install the same Active Directory Schema extension again

is there any possibilty of problems, due to a 2nd time installation of the schema extension for a lync server, in an active directory childdomain of a forest? Replication overhead would not be that ...
3
votes
0answers
149 views

AD custom attribute of type numerical string crashes MMC when updated

I am using windows server 2008. I have a domain with one domain controller (this is a dev environment). I edited the AD schema and created a custom attribute called TestAttribute2 (the LDAP name is ...
3
votes
2answers
1k views

Custom attributes in Active Directory - determining usage/function and possible removal options?

I've bumped into a highly-customized Active Directory environment (2003 FL) that's got me wondering if there's any particularly easy way to figure out what a custom attribute's function is, and what, ...
1
vote
1answer
251 views

ActiveDirectory lastLogonTimeStamp Inactive

In joining a new company, I have inherited it's history. I find that the User and Computer Object property lastLogonTimeStamp is not available. I have checked that the AD Schema version is 2003 R2, ...
1
vote
1answer
442 views

Where is “Custom Attribute 14” in AD Schema?

I'm getting the following error when writing to Active Directory attribute 14 00002082: AtrErr: DSID-03151314, #1: 0: 00002082: DSID-03151314, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att ...
3
votes
1answer
670 views

Migrating to Windows Server 2008 R2 Domain Controllers - a few Questions/Issues

Ok so here's our setup: We have 2 Windows 2003 Domain Controllers. I am trying to replace them with Windows 2008 R2. The 2003 servers are named DC01 and DC02. The 2008 R2 servers are DC1 and DC2. ...
0
votes
1answer
475 views

Remove security permissions from AD objects for old SID´s

I have the following problem. Recently we have migrated from Notes/Domino to Exchange 2010. We had some problems with the first installation. In case of that we decided to reinstall Exchange. Stupid ...
1
vote
1answer
2k views

How to change OrganizationName after setup /p

I am working on cloning our primary AD DC to create a development environment. I have exported the relevant data from AD using ldifde but in order to import it on the new server, I need the Exchange ...
6
votes
3answers
3k views

Where do I store sensitive data within Active Directory?

I am essentially storing a private key (Hash) in any of the OctetString attributes within Active Directory. My question is, what attribute is secure by default and makes sense to keep private data ...
1
vote
1answer
764 views

AD Schema updates, Exchange 2007 SP3 == Server 2008?

In terms of schema updates does 'Exchange 2007 SP3' adprep /forestprep and 'Server 2008' adprep /forestprep do the same thing? I'd like to add a 2008r2 DC to an existing 2003-level forest (which ...
10
votes
1answer
6k views

Where does Active Directory-integrated DNS store its data?

This has been bugging me for a while. We all know Active Directory is a LDAP database. We also know that the Windows DNS service, when running on a domain controller, can store its data in AD ...
1
vote
2answers
454 views

Server 2003 R2 Schema Update

I have some questions about updating our Active Directory Schema. Right now We have 4 Domain Controllers across 3 sites. They are all running Windows Server 2003 with SP1. None of them are R2. They ...
0
votes
1answer
337 views

Do I need R2 of Server 2003 to update the schema on a DC to support Mac systems?

I'm attempting to integrate a Snow Leopard server and a number of client machines into my AD network and I'm wondering if I can update the schema on a DC running Server 2003 (NOT R2) to support mac ...
5
votes
2answers
2k views

Active Directory and Apple's Workgroup Manager

I thought I'd share my experiences here. I work for a small business with only ~20 users. I wanted the ability to use managed client preferences to assign things like the software update server. ...
0
votes
1answer
1k views

auto generate AD network Diagram with visio or other tools

It's there a way in visio to automaticly design the Network Diagram of my domain ? I found Microsoft Active Directory Topology Diagrammer, but this software not design the member of my domain. I ...
11
votes
3answers
5k views

How safe are Windows Active Directory Schema Updates?

I'm trying to get a better understanding about how Active Directory handles Schema updates, specifically how safe the procedure actually is given how critical AD is and given the range of situations ...
0
votes
2answers
4k views

how long to replicate adprep /forestprep to second domain controller?

i updated our sbs 2003 server using adprep /forestprep waited about 1/2hr and checked the second DC 's usn number, the sbs 2003 is 8875 and the usn for the second DC is 4410? can i force the second ...
0
votes
1answer
70 views

Active Directory Trusts and Schema

Our company is in the process of implementing a "cloud proxy" that will utilize Active Directory for user/password lookup. The idea is to expend this and build trusts to customer's AD. My Question ...
4
votes
1answer
398 views

What are best practices to store delegated permissions in OpenLDAP?

My network's core user database is managed by OpenLDAP. Recently we need to introduce a possibility for one user to act on second user's behalf. As all application-related rights and permissions are ...
1
vote
1answer
907 views

Server 2008 R2 schema changes - any since RC?

I know that there were schema updates in the 2008 R2 beta and more in the 2008 R2 Release Candidate. Does anyone know if there are any additional schema changes required for 2008 R2 RTM? I haven't ...