0
votes
0answers
10 views

Server 2012 SysPrepped Image Prompts to Approve Eula after Domain Join

I am trying to upgrade our base web server image from Server 2008 R2 to Server 2012. Our cloud vendor allows us to SysPrep an IAAS instance, image it and then restore it. I have this part all ...
1
vote
1answer
72 views

Backup Active Directory users' files, deploy via GPO? [on hold]

Am looking for a solution which can be configured to be deployed via group policies. I've looked into Windows Backup, but it doesn't fulfill our requirements. We need something like this: Runs ...
4
votes
0answers
47 views

Third Party Wildcard Certificate on DCs for LDAPS

I am trying to provide Authentication as a Service to my customers. LDAP authentication is perfect for this however I am not a fan of clear text sessions.... enter LDAPS. Active Directory of course ...
3
votes
1answer
38 views

Does anyone know how to get cross-forest printers in the ADDS “printer directory?”

I'm in the midst of an active-directory forest migration at the moment, and in addition to that, the powers that be have decided to start on an upgrade from Windows XP to Windows 7 for our client PCs. ...
-1
votes
1answer
29 views

User right to only be able to add machines to an Active Directory domain

I know that to be able to add a machine to AD a user need domain rights. I would like to know if is it possible to give a user only the right to add a machine to AD but without the rest of the rights ...
1
vote
1answer
31 views

Windows domain grant desktop access only to some users

I must grant only domain admin members to open a server desktop session. How to limit desktop access to some computers (typically servers) for some groups only?
-1
votes
1answer
39 views

How to check if a AD group is being denied access to a file or a folder

How to check if a particular AD group is being denied access to a particular file or a folder, using bat /powershell 2.0
1
vote
1answer
70 views

Fake Recycle Bin via Group Policy

Is it possible to create a fake recycle bin where the files aren't actually deleted using MS AD/ Group Policy? The goal is to be able to recover 'deleted' files after, let's say, a dirty resignation. ...
0
votes
0answers
12 views

Creating a template/default roaming profile

With Windows Server 2012 R2 Datacenter and running Windows 8.1 machines, is there a way to create a default or template that will contain shortcuts and files for a new user when they are created? ...
2
votes
1answer
66 views

Active Directory Administrative Center over Active Directory Users and Computers

Is there any difference using Active Directory Administrative Center over Active Directory Users and Computers? In training videos I've seen people mostly use the older look Active Directory Users and ...
-1
votes
1answer
72 views

Deploying software on active directory [closed]

I am not sure if this is the right place to post this question but I figured since some users here are familiar with Windows Servers and Active Directories, that I might to get some information about ...
1
vote
2answers
49 views

Computer name description

we are in the process of migrating windows operating systems and to make future search easier in AD I'd like to put in more details into the description box in the computer name dialog. e.g. ...
1
vote
1answer
43 views

windows security log - failure reason startswith %%

Please help - do You have the list with descriptions of failure reasons eg. %%2313, %%2307... I've researched Net and nothing.. :( Mainly I see it in ID 4625 in Windows security logs. On ...
1
vote
0answers
24 views

EFS file access problems

in my organization, i have a deadline to deploy EFS using AD CS, and i am working with a single windows server 2003 box, which is the Root CA, and is the same server responsible to certificate ...
3
votes
2answers
239 views

Determine last time a computer powered up

Is there a way to determine by querying Active Directory when a computer was running? I want a quick way to exclude computers in the domain that have been off for (say) 7 days. The LastLogonTime ...
0
votes
1answer
154 views

Join Windows 2003 R2 guest to Windows 2012 R2 domain controller

I'm trying to join a Windows Server 2003 R2 guest to a domain with a Windows Server 2012 R2 Domain controller server. I get the error "The following error occured attempting to join the domain ...
5
votes
2answers
105 views

Delegating Control — Windows Active Directory

Attempting to make a site administrator user account for an Active Directory Domain. Using the Active Directory Delegate Authority Wizard. a user account has been grated rights in a OU. However, when ...
3
votes
1answer
39 views

“Deny Logon Locally” effects

I'm planning to harden my AD-based infrastructure. One privilege that I'm planning to limit is the "local logon" privilege. Now, if I push "Deny Logon Locally" through GPO, besides preventing ...
5
votes
1answer
61 views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain ...
1
vote
5answers
168 views

Windows network shares organization

I would like to have some feedback about the best practices you use to publish your network share. Now, we have on our file server : one named directory for each of our user, which is backed up ...
4
votes
1answer
95 views

PowerShell DSC Group Resource - “Could not find a principal with the provided name”

I am trying to use PowerShell DSC to add a domain group to the local administrators group. Here is the code: Configuration TestSetup { Node localhost { Group Administrators { ...
0
votes
0answers
32 views

Why AD DS user is able to write to ADLDS(ADAM) container(user is neither imported nor added as foreignsecurityprincipal)?PS/dsacls cmd to fix it-DENY

I have installed 'AD LDS' instance on one of my windows server 2012 which is part of a domain. I brought few users (windows security principals to 'AD LDS') as 'ForeignSecurityPrincipals' from AD DS ...
2
votes
3answers
68 views

Windows Networking - Multiple SItes [closed]

I have 6 x sites located all around the land down under. All 6 sites are linked via a meshed VPN network and can see each other. Now, in Head Office i have 2 x AD Servers (1 backup) on the one ...
5
votes
3answers
86 views

Workstations in remote site don't know about new AD realm

I've recently migrated a classical Windows Domain (samba3) to an Active Directory domain (samba4). Workstations in remote sites do not have a local DC so they are not aware of the transition, hence ...
2
votes
0answers
68 views

What are some good reasons to create a new forest, child domain, tree, site, or OU in Active Directory? [duplicate]

When is it worth it to create one of the above and when is it better to keep things in the same place?
-4
votes
1answer
56 views

Why does second domain controller not display [closed]

We have 2 domain controllers DC1 and DC2, both sharing the same AD database The "Active directory users and computer" console of both DC1 and DC2 display DC1 only, under "Domain Controllers". what ...
1
vote
1answer
84 views

Losing trust to domain after restart

Moving my post from stackoverflow : Hello I have a domain environment in which I have a domain controller named dc1.example.com and the domain network name is ms1.example.com . In this domain I have ...
3
votes
1answer
52 views

Increasing lockout duration on active directory

Sun has a concept called Lockout Duration Multiplier; the more a user has been locked out during a certain period, the longer his lockout duration will be. This helps foil automated attempts to log in ...
5
votes
2answers
134 views

Will GPO Software Installation re-install already installed applications from a different policy?

I'm looking to install our latest AV suite through a GPO Software Installation policy. (As in the below screenclip.) Unfortunately my request to use DFS has been denied and I'll need to create a ...
3
votes
1answer
33 views

How can I deny access to a securable item from a specific computer?

Let's say that I have a folder, file, or share that I would like for almost all of my domain's users to be able to access (the domain being within a private network.) I also have some web servers ...
2
votes
2answers
26 views

windows active directory profile regional

we are an organization with 40k users. This organization is composed of multiples structures. We have one single forest Active Directory with flat DIT. We want to keep this AD in order to ...
3
votes
1answer
59 views

How can a set a Security Group's email address using PowerShell?

I need to create many groups with email addresses. I would prefer to use Security Groups to reduce the number of groups we have to maintain, otherwise we'd have an identical Distribution Group for ...
1
vote
0answers
122 views

adamsync.exe /sync is failing with “Naming Violation”

I am trying to synchronize my AD LDS instance (localhost:50006) with AD DS entries (basically trying to get user and computer accounts from AD DS so that I can use windows security principals in my ...
0
votes
0answers
48 views

scurity tab is missing in ADSI Edit for AD Lightweigh Service instancess. (authorizing users in AD LDS)

I am new to AD LDS. I have installed AD LDS instance in my Windows Server 2008 R2 and 2012 servers as I want to you use AD LDS instance for directory services for my app. I am able to install the ...
1
vote
1answer
158 views

Can a windows service running with network service or local system account, updated active directory container?

I have two windows services (one running as network service and the other as local system) - because of some architecture reasons these cannot run under domain user account. And there will be a store ...
2
votes
1answer
57 views

Windows 7 / 2008 connect to VPN at login with Group Policy

I am trying to find a way to have windows 7 VPN clients connect to the VPN server automatically via Group Policy. I tried using a login script but it looks like the scripts are shared from sysvol and ...
-3
votes
1answer
73 views

Removing local from group

How I can restrict access to the client! It's seems like everyone in the root domain and trusted domain can access the client, I would like to restrict access for specific AD groups.
0
votes
3answers
99 views

Time synchronization in Active directory

I've got issues with time synchronization in a domain. I have DCs that spans time zones, however the PDC is located in a time zone where daylight savings is active, this caused all the additional DCs ...
2
votes
1answer
48 views

How to issue a cert for web hosting using ad cert authority

I need to issue a certificate for SSL binding in IIS using Active Directory Certificate Authority. As far as I understand it should have Purpose=Auth Server and contain private key/be exportable. ...
0
votes
2answers
331 views

How can I change dns name on domain controller?

I am in the process of trying to clean up after a domain rename gone bad. The rename was from xxx.com to hq.xxx.com My current problem is that I cannot login to the DC (only DC on network) Logging ...
1
vote
1answer
76 views

Pre-Staging Computer Accounts

I hear that you can create the computer account in AD before you join the computer to the domain so that the computer immediately gets the right groups and such. I created the account by running ...
-1
votes
1answer
64 views

Local drive access using $ share in windows flaw [closed]

It seems that I can access every drive on each computer in my work network by utilizing the $ share? Example: \\computer_name\C$ would give me access to the C drive and each file Is the AD ...
1
vote
1answer
26 views

Setting up DNS for Remote Access

I have Windows 2012 with the DNS/DHCP features installed. Do I need to install Active Directory and then add all my machines to the domain of local.FQDN.com for example? I can do this and still use ...
2
votes
3answers
270 views

Disable Windows login script per network location

Scoured the internet for at least 10 minutes. Have a bunch of laptops that are logging in when outside the "work" network. I have been getting the question: I have an SSD and tons of ram why does ...
2
votes
1answer
202 views

Make a user from one domain a member of Domain Admins of another domain

on an Active Directory domain D1, I'm creating specific groups to delegate some tasks. One of this specific groups is just member of "Domain Administrators" to give people all management powers. IT ...
0
votes
0answers
39 views

Shared resource permission management (minimum required permission)

I want to grant a "tech" group access for managing the shared resources. Problem: The sharing tab is not shown to them. Moreover they can not even access the shared folder list via management ...
2
votes
2answers
44 views

How do I add all users with a certain attribute to a group?

Hello friends and neighbors. Active Directory question here. I've been trying unsuccessfully to use dsquery and dsmod to add all users with a certain attribute to a certain group. No luck so far, as ...
0
votes
1answer
35 views

Joining windows xp users on windows 2008 domain

I was wondering is it posible to join windows xp clients on an windows 2008 domain. If yes what are the benefites or negative sides of this. The problem is that i have about 100 users. 80 of them ...
5
votes
1answer
71 views

Preventing a Domain Computer from Logging off Causes loss of Authentication

I have a set a domain computer to not require a password on wakeup. This is a strange situation I know but we want the user to never have to login to the computer unless he specifically logs out or ...
1
vote
1answer
484 views

How to delete unknown user profiles remotely?

When user is deleted from Active Directory, it shows as an unknown user. System properties -> Advanced -> User Profile -> Settings... I have to delete it manually all the time. There are more than ...