8
votes
2answers
250 views

How do I block inheritance/application of a single GPO?

Due to the workload generated by recent ransomware outbreaks (Cryptolocker/Cryptowall/etc.), I was recently tasked with implementing Software Restriction policies to block program execution from ...
0
votes
0answers
12 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
3
votes
1answer
63 views

Remotely determine how long a user has been idle

How do I determine how long it's been since a user with files opened on my server has been actively using their workstation in a Windows Active Directory environment (XP, 7, 8 clients and Server 2008, ...
6
votes
1answer
152 views

How can I generate a list of the security groups a set of users belong to?

I have been asked to generate a list of the security groups (so specifically not the distribution groups) that a list of approximately 50 users belong to. I have a list of users, users.txt that ...
0
votes
1answer
12 views

Drive Maps via Group Policy - Overlapping Policies

((NOTE: We are on Windows 8.1 with a 2008R2 domain)) We have decided to move away from mapping drives via a log in script and attempting to do it via Group Policy. I have personally been doing this ...
7
votes
1answer
162 views

How do I remotely issue a CLI command to thousands of Windows domain computers at once?

I need to issue a CLI command (cmd.exe or PowerShell) to all of the thousands of computers on my domain. For obvious reasons, this is not going to involve doing the task manually, or physically ...
-2
votes
1answer
49 views

Server 2012 active directory first login [closed]

I'm beginner with Windows Server 2012 and Active Directory I've got installed Active Directory remotely on my server and after the installation is finished and system restarted now I can't login into ...
1
vote
0answers
27 views

WMI request (Wbemtest), access is denied to domain computer

let me explain our setup first! We have 2 site location with Cyberoam CR50ING Firewall, IPSec between the 2 Subnet. Cyberoam firewall has an AD authentication with their software linked to the ...
10
votes
2answers
122 views

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
0
votes
0answers
36 views

Configure the Routing and Remote Access Server for DirectAccess

I have 2 Windows Serer 2012 R2 DC machines. I am currently on my main which runs AD and has GUI. Number 2 is just server core and I want to setup Direct Access. However, I get this error when trying ...
2
votes
1answer
470 views

New 2012 Domain Controller and error “The security database on the server does not have a computer account for this workstation trust relationship”

I have a Windows Server 2012 domain controller on a domain DOM1 running at a Windows Server 2008 R2 domain and functional level. All other domain controllers in DOM1 are 2008 R2. DOM1 has a two-way ...
1
vote
1answer
26 views

Restict Internet Connection Except using Proxy

Given (as-is) A router with DHCP enabled An Active Directory Server Two Windows 7 clients joined the domain Planning (to-be) A proxy server Two clients are set to restrict internet connection ...
0
votes
0answers
43 views

Windows computers refusing to connect to WPA2 Enterprise Network

We have all our computers set up on a WPA2 Enterprise network authenticating with a PEAP Certificate. The certificate is valid until 2017, and the network is functioning correctly on all the Macs we ...
3
votes
2answers
158 views

Azure print server - running everything in Azure?

I might have get dragged into a Project involving moving the whole IT shop into Azure. Now that means they have on-site AD, LOB Applications, SQL, Sharepoint etc, plus of course moving to Office 365, ...
1
vote
2answers
186 views

Windows Server 2012 R2 in a Windows Server 2008 R2 domain

Can a server running Windows Server 2012 R2 (file server, app server, etc.) exist on a network with Windows Server 2008 R2 domain controllers, or do the DC's need to be upgraded first?
4
votes
3answers
296 views

Can a user see the Active Directory computer description in the Windows network browser?

This may qualify as another Stupid Question from someone fairly inexperienced in Active Directory, but I've noticed a handy "Description" field for computers in the Active Directory Users and ...
0
votes
1answer
45 views

Roaming Profile Control [closed]

I noticed that with Roaming Profiles enabled that even applications have been roaming. Is this normal? Is there a way to keep applications from roaming? I like how Firefox bookmarks move from machine ...
1
vote
1answer
252 views

How to determine the values for an LDAP bind to a Windows Server 2012 DC? [ldap_bind: Invalid Credentials (49)]

Sigh. I have been trying for nearly 6 hours to get my Gitlab deployment to authenticate via Windows Server 2012 Essentials Active Directory LDAP. I am running Ubuntu 14.04 for my Gitlab server. ...
1
vote
1answer
310 views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
0
votes
1answer
45 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
1
vote
2answers
73 views

Windows Server 2012 - one user logging on many computers [closed]

I am a newby to Windows Server World. I want to setup company's network (around 7 computers and 15 employees) like this: - all computers joined to my domain - every employee having his own user ...
0
votes
0answers
89 views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
1
vote
2answers
147 views

Giving AD user accounts admin access on specific machines

Is there a way to give domain based accounts administrative access on specific machines and not others? I can control access and rights to which machines a user can log in to and what their ...
0
votes
0answers
131 views

Ubuntu Client, connect to windows SMB share on domain joined server using local credentials

I'm having some trouble connecting to the C$ share on one of my servers. I can do so using an account from the domain administrators group, however can't access most files on the server. I instead get ...
1
vote
1answer
79 views

Using AD/GPO to add machines to WSUS in Windows Server 2012

I was following this guide: http://knowledge.quickstart.com/configure-wsus-to-deploy-updates-using-group-policy/ I've rebooted the machines after the policy updates to ensure they took them. I ran ...
0
votes
1answer
139 views

how to hide folder on root samba folder with include for each group

Currently my samba server integrated with Windows Active Directory 2012, almost configuration is just fine. I'm just curious Here are my smb.conf, [global] workgroup = "Domain Name" server ...
6
votes
0answers
110 views

“The zone can be scavenged after” keeps incrementing

What are you trying to do? I'm trying to enable DNS scavenging on a DNS zone that has about a hundred stale DNS records. What have you tried in order to make it happen? I setup DNS Scavenging per ...
0
votes
0answers
116 views

Event ID 4013 DNS-Server-Service on Network with Only One Domain Controller/DNS/etc

I'm consulting for a small business that has a single server that handles DC, DNS, DHCP, etc. roles. It is giving the following error with some regularity: 4013 DNS-Server-Service The DNS server ...
1
vote
1answer
106 views

Rules for Active directory user name string

I have googled but not able to find a proper set of restriction in user name in active directory setting. Please help me in telling what are the special char which are not allowed in Active directory ...
0
votes
0answers
65 views

Why is my samba domain user created by a bash script behave differently from one created manually?

I have a samba server which is using LDAP as its backend. The PDC is working as expected as long as I create the users manually. This means that if I use the following command to create a new user, I ...
3
votes
2answers
724 views

Why should I not run setspn.exe on the domain controller?

I found several references (see below) on blogs that the setspn.exe utility should be run from either a client or server machine in the domain, but not from the domain controller itself. ...
1
vote
0answers
89 views

Windows 2012 Master & Ubuntu Bind 9 Slave & SOA

I'm kinda like the maid... I don't do Windows. But thanks to new things we're implementing, I'm now attempting replicating a single zone from our AD cluster. We had this working just fine but ...
18
votes
3answers
1k views

How do I delete this orphaned Active Directory computer object (preferably with PowerShell)?

I'm working from a Windows 7 workstation, with PowerShell v2.0, and trying to delete a particular (orphaned?) object from the LostAndFound container in a 2008 R2 FL forest and domain with the Active ...
13
votes
3answers
928 views

Why can I login to a box even if the AD Domain controller is down?

Scenario: While my DC is running, I log into an arbitrary machine. I stop the DC I log off the arbitrary machine. Let's bounce it for good measure, too. When the machine comes back up, I can still ...
1
vote
2answers
1k views

How to remove orphaned Domain Controller's DNS records?

It looks like in the past there were some two improperly decommissioned Domain Controllers (DC1 and DC2) that belonged to this domain. I am concluding this based on some remaining records in the ...
3
votes
1answer
3k views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
3
votes
3answers
751 views

Adding remote machine to AD via Powershell

So I have a powershell script, Add-Computer -ComputerName $computername -LocalCredential $computername\admin -DomainName $domain -Credential domain\$username -Force -Restart So if I have a machine ...
-1
votes
1answer
139 views

Some computers in my subnet do not recognize names of other pc's

I have two subnets: 192.168.0.1-255 192.168.50.1-255 Ewerything works via VPN (because physically computer from both subnets are in different locations). We also have active directory. Now, the ...
-1
votes
1answer
82 views

Unable to determine forest/domain functional level

I already have a domain controller setup on Wind2k8 R2 Standard and am trying to get another system running on Win2k8 R2 Enterprise to also become another domain controller for the same domain. For ...
3
votes
3answers
216 views

Update a network driver through GPO/AD

Our organization has just deployed new computers with Windows 8.1. Roughly 50 of them. We've run into an issue with the driver on the new computers which is flooding the network with ipv6/multicast ...
2
votes
1answer
130 views

Migrate samba domain to Active directory

i have a Samba3 domain and i want to migrate to Active Directory (W2k8 or 2012 server). How can i achieve that? I read that ADMT tool can do that, but didn't find any feedback. I also read that we ...
4
votes
4answers
203 views

Windows Password Sync without using Active Directory

I have a number of Windows servers running in AWS. As the number of servers grows, managing Windows logins across all the servers has become a headache. I need some sort of password synchronizer ...
0
votes
0answers
33 views

Server 2012 SysPrepped Image Prompts to Approve Eula after Domain Join

I am trying to upgrade our base web server image from Server 2008 R2 to Server 2012. Our cloud vendor allows us to SysPrep an IAAS instance, image it and then restore it. I have this part all ...
1
vote
1answer
123 views

Backup Active Directory users' files, deploy via GPO? [closed]

Am looking for a solution which can be configured to be deployed via group policies. I've looked into Windows Backup, but it doesn't fulfill our requirements. We need something like this: Runs ...
4
votes
1answer
448 views

Third Party Wildcard Certificate on DCs for LDAPS

I am trying to provide Authentication as a Service to my customers. LDAP authentication is perfect for this however I am not a fan of clear text sessions.... enter LDAPS. Active Directory of course ...
3
votes
1answer
184 views

Does anyone know how to get cross-forest printers in the ADDS “printer directory?”

I'm in the midst of an active-directory forest migration at the moment, and in addition to that, the powers that be have decided to start on an upgrade from Windows XP to Windows 7 for our client PCs. ...
-1
votes
1answer
38 views

User right to only be able to add machines to an Active Directory domain

I know that to be able to add a machine to AD a user need domain rights. I would like to know if is it possible to give a user only the right to add a machine to AD but without the rest of the rights ...
1
vote
1answer
187 views

Windows domain grant desktop access only to some users

I must grant only domain admin members to open a server desktop session. How to limit desktop access to some computers (typically servers) for some groups only?
-1
votes
1answer
53 views

How to check if a AD group is being denied access to a file or a folder

How to check if a particular AD group is being denied access to a particular file or a folder, using bat /powershell 2.0
1
vote
1answer
128 views

Fake Recycle Bin via Group Policy

Is it possible to create a fake recycle bin where the files aren't actually deleted using MS AD/ Group Policy? The goal is to be able to recover 'deleted' files after, let's say, a dirty resignation. ...