1
vote
1answer
27 views

What do the error messages and codes mean when creating and installing Managed Service Accounts?

When using the PowerShell Cmdlets for creating and installing Managed Service Accounts, certain errors can be thrown. What does each error mean?
-1
votes
1answer
72 views

Deploying software on active directory [closed]

I am not sure if this is the right place to post this question but I figured since some users here are familiar with Windows Servers and Active Directories, that I might to get some information about ...
4
votes
3answers
438 views

In Active Directory, what is the relation between IP, MAC, and OS?

I have one machine on which I want to run 2 different OSs, dual boot between Windows Server 2008R2 and 2012R2 (or others). I want to keep the same computer name, the same IP address, and the same MAC ...
3
votes
2answers
398 views

What is the origin and / or standardness of the term “bang account”?

I keep hearing "bang account" at my company and, through context, figured it out to mean an account with elevated privileges. I believe this is particularly the case with Active Directory accounts, ...
-1
votes
1answer
61 views

What can a domain controller do? [duplicate]

In short: I do not know where to start reading so that I can understand how to configure a DC. The long question: In the environment I work, we use an outdated domain controller and I have to create ...
2
votes
1answer
113 views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
2
votes
0answers
123 views

Branch office & DNS

We've got a branch office with no on-site services at the moment and we'd like to change that. The biggest goal is to setup some file servers but faster log ons and DNS resolutions will be welcome as ...
2
votes
2answers
110 views

Removing DHCP role, cleaning up AD data

Back story. So we had a development engineer (who just happened to have access to a domain admin account) who set up a handful of DHCP servers on our domain. This caused headaches, as the new DHCP ...
-2
votes
1answer
41 views

How to inspect traffic from PC on domain? [closed]

Is there a tool (on Microsoft domain server, or 3rd party) that can allow me to log if some domain user is generating specific traffic at chosen time (in my case, I want to know if he is using Team ...
0
votes
1answer
68 views

Should I have multiple active directories for my local and remote sites?

I'm setting up a new network, now I need a remote (in our DC) and local active directory for various things. I want the email server to be on the remote server (for redundancy) then route through our ...
1
vote
1answer
92 views

Windows Server 2012 Sharepoint 2013 Active Directory - what are the user limitations?

I was wondering if you guys know if there is any limitation as far as how many users I can have on my sharepoint 2013 site if I'm running server 2012 foundation, I think I saw somewhere that there was ...
0
votes
1answer
24 views

how to do authentication of xp clients on lion server with shared printers but windows server as a domain controller

i have a LAN with windows xp clients and Windows Server 2008 R2 with server performing the domain authentication . I also have a lion server with network shared printers attached to it . The ...
0
votes
0answers
25 views

Create a folder on a share each time a workstation joins the server 2012 domain

I'm trying to automate the creation and deletion of a folder each time a computer is added or removed from the domain. When a computer joins a domain, I'd like folder w/ %computername% to be ...
0
votes
1answer
150 views

Moving domain controller from Samba to Windows Server 2008

I need to migrate an existing Active Directory from Samba to Windows Server 2008. It's easy as add a new Windows Domain Controller, wait for AD replication and turn off the linux machine?
1
vote
1answer
453 views

Why can't I change passwords using the ldifde tool?

I'm trying to change user passwords using ldifde tool with the following commmand: ldifde -i -h -f .\password.ldf -J ./ Here is one of the entries that are in the password.ldf file: dn: ...
0
votes
0answers
206 views

Remote desktop error on domain machine: An authentication error has occurred 0x8007ffff

I believe this happened after installing the last round of updates on both a server and a VM, though I'm not positive. Happened on a Windows Server Essentials 2012 box and a Win8 Pro VM. I can still ...
0
votes
0answers
138 views

HyperV Host time issues - PeerPoll Interval out of valid range

I noticed a large time difference on my Hyper-V host so i set the time to sync from the PDC as follows: w32tm /config /syncfromflags:domhier /update net stop w32time net start w32time From the ...
0
votes
1answer
1k views

Exchange 2013 Error - MapiExceptionUnknownUser: Unable to open message store

I am trying to install Exchange Server 2013 for days. On every try I am getting the error "MapiExceptionUnknownUser: Unable to open message store." while connecting to either ECP or OWA. In my ...
2
votes
1answer
5k views

Missing SYSVOL and NETLOGON after upgrade from Windows 2003 SBS to 2012 Standard

Today we went from Windows 2003 SBS to Windows Server 2012 Standard. I did the following: Joined 2012 server to the SBS 2003 domain Installed Active Directory Domain Services (aka dcpromo) on the ...
1
vote
1answer
70 views

Add attribute through commandline in Active Directory

I am migrating from OpenLDAP to Active Directory (Samba4). I was wondering if there is a commandline command (in windows commandprompt or powershell) to add Attributes to the Active Directory Schema. ...
1
vote
2answers
161 views

Can two servers map to the same domain name?

I think the answer to this question is "no", but I thought I'd ask here to be sure. I am writing a web application and I need to access JavaScript code from a subdomain on another domain. This isn't ...
0
votes
1answer
128 views

Windows DNS server deletes its own A record on reload

Okay so I have never seen anything like this. Here's the story. We have four DNS servers. Let's call them server01-04. server03 is set to be the primary one by DHCP. Scavenging is disabled ...
4
votes
2answers
1k views

Copying OU permissions from an existing security group to a new security group

Currently we have a security group named: Limited_IT_Admins that has special permissions (restricted to only certain tasks they can do) on ~7 City OUs within a Country OU. [Country] <- top level ...
2
votes
1answer
297 views

Constantly having to net stop start dnscache after adding new entries in dns

Occasionally I must add new DNS entries in AD DNS. The zone is the domain's zone, and the server which I use to add it is in the same subnet as the clients affected by this issue. After adding the ...
2
votes
2answers
73 views

Why is a computer on my network not resolving correctly?

I am running Windows 2003 Server with Active Directory and DHCP enabled. the machine: laptop1 receives the IP: 10.2.6.134 from the Windows 2003 DHCP Server. the machine name and IP does not show up ...
1
vote
3answers
667 views

Read access to Active Directory property (uSNChanged)

I have an issue with read access to the uSNChanged property when doing LDAP searches. If I do an LDAP search with a user that is a member of the Domain Admins group (UserA), I can see the uSNChanged ...
2
votes
2answers
981 views

Is there today any reason to have multiple domains in one forest

I've been reading a lot trying to figure out why I would set-up a "multi-domain - one forest" architecture but I haven't found any good reason to do so. I came to the conclusion that you better use ...
-5
votes
2answers
665 views

Store user My Documents folder on server [closed]

EDIT: Rephrased this question to convey the message precisely. A user, (user1) use to login into multiple computers on the domain using his password, say (user1/password1) He needs My Documents, ...
2
votes
2answers
928 views

How should I integrate Active Directory with Windows clients and Linux clients and servers

I have Windows and Linux clients and I want to provide Active Directory authentication for both but keeping DHCP and DNS on Linux servers. Is this possible ? I have very little experience in ...
1
vote
1answer
1k views

How do I use Group Policy on a domain to delete Temporary Internet Files?

I have a domain controller running on Windows 2008 Server R2 and users login to application servers on which Windows 2003 Server SP2 is installed. I have applied a Group Policy to clean temporary ...
-5
votes
1answer
252 views

Changing user passwords in Windows Domain Controller [closed]

Suppose that users in a domain aunthenticate using windows domain controller. How can the administrator of the windows domain controller change the passwords of users? Does this require user's ...
2
votes
1answer
6k views

How to list all Active Directory Users and their group membership

I'd like a single scripted line to export to CSV all the users in my AD with all the groups they are members of. I'd prefer it to be done in powershell, but dsquery/dsget is a fine alternative ...
3
votes
1answer
4k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
2
votes
1answer
118 views

I am trying to automate an install with Active Directory to a server core box?

I am trying to automate an install with Active Directory to a server core box? I assume I need to set up a script. Any ideas on how to go about this.
0
votes
4answers
1k views

What happens if I restore System State that is over 60 days old?

If I do a system state restore, but the backup is over 60 days old, what will happen to my domain? This is the system state for the forest root. Will my domain simply cease to exist? I have other ...
0
votes
0answers
1k views

Resolve event ID 5807 (Netlogon) when servers from a trusted forest authenticate on a domain controller

I have a multi-forest Active Directory environment with a 1-way trust between them. (Forest B trusts Forest A.) Domain controllers in Forest A report event ID 5807 from source NETLOGON, which ...
2
votes
3answers
236 views

Can my Active Directory domain name prevent a forest functional level from being upgraded to Windows Server 2008 R2?

I have inherited an Active Directory environment that is at the Windows Server 2003 forest and domain functional level. The DNS domain name has no special characters--it looks like sampledomain.org. ...
2
votes
1answer
888 views

Domain Controller Safe Mode user account?

What account can I use to log onto a domain controller when booting into safe mode (without networking) there are no local users accounts on domain controllers and it doesn't see the domain.
1
vote
2answers
609 views

Is it possible to create a Windows domain administrator with only the ability to reset passwords?

No other permissions, just the ability to reset AD passwords? Thanks!
7
votes
3answers
1k views

Need for another Domain Controller

I have two domain controllers (Windows 2003) in one site where most of the department I support resides. There is another building (at another site) where my department resides as well, but they have ...
0
votes
1answer
790 views

Is it possible to switch to Kerberos only Windows domain

Is it possible to configure both Windows servers and workstations (Windows 7) to use only Kerberos for authentication and not use NTLM for authentication within the Domain? I was told that Kerberos ...
1
vote
2answers
642 views

Log on to a remote Windows AD server via VPN

This is just a random thought. For small business companies, in case they don't want to host a Windows Server for computers in the office to work in a domain environment, can they rent a server in ...
0
votes
2answers
2k views

Best practice for two site Active Directory through VPN

Currently we have a site-to-site VPN setup between our two locations A and B. Location A has the domain controller; all hosts in location B connect via the site to site VPN to the DC in A. I was ...
2
votes
3answers
612 views

How do you replace a Windows server with minimal problems for admins and users?

This weekend we replaced a Windows server of a few years old, with a new one. Despite having imported computers and users from Active Directory on the old, to the new server (with loss of password, ...
0
votes
1answer
171 views

Offline AD logins

How can I keep track of offline AD logins in my server? This solution should work all windows server versions since 2000. Users will log in with windows machines.
1
vote
1answer
158 views

Migrate Active Directory Groups to Local Windows Server Groups

This may seem like an odd scenario, but for reasons that I have no control over I need to migrate a large list of user groups from an Active Directory server, to the local group policy of a server ...
3
votes
2answers
263 views

Should I phase out our Windows Domain entirely?

Over the last year we have migrated almost all services that used to run on our Windows server (SBS 2003 Premium) to another server running Linux. The last few services will shortly be moving to a new ...
4
votes
3answers
7k views

Removing old DC from AD, remove “subtree”?

A month ago I migrated to SBS 2011 from 2003. When I decommissioned the old 2003 DC, I had it leave the domain. However, it still has a computer account in the AD. When I try to delete it I get this ...
0
votes
0answers
183 views

Wildcard retrieval of operational LDAP attributes

Then OpenLDAP 2.4 server supports being queried for operational attributes by using "+": ldapsearch -x -b o=test -s base '+' this would return something like dn: o=test structuralObjectClass: ...
1
vote
3answers
479 views

Copying over NTFS ACL's from one offline server to another server

We have two machines on the same domain: Machine A (Windows 2003) and Machine B (Windows 2003). Both have a set of files that are identical and have been kept identical by a scheduled process. ...