1
vote
1answer
46 views

How to perform an assessment of an existing network?

I work as an IT guy for a small company with 2 offices. Currently we are in the process of moving our entire network infrastructure to a different host because we are running everything on extremely ...
0
votes
1answer
38 views

Can I use an RODC for Active Directory athentication if the writeable DC is not available for several months?

We are running an Read-Write DC at our home office which we are using for authentication when were are working there. It works fine as long as we are at the office, but we are going to be on the road ...
0
votes
3answers
62 views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
0
votes
1answer
38 views

Authentication options for staging sites

We're currently authenticating our clients who wants to view their staging environments using windows authentication. That means we have to create their accounts in our local AD and assign them to ...
3
votes
1answer
116 views

How to get Active Directory domain objectGUID anonymously

As an authenticated Active Directory user, I can run this to get the domain GUID (objectGUID): dsquery * "DC=lab,DC=local" -scope base -attr objectguid I can use this command in Linux to get the ...
1
vote
3answers
209 views

Active Directory - Dynamically set user attribute based on group membership?

Is it possible to dynamically set a user attribute based on membership in a group or does one really have to manually change all existing users and have a template with the attribute set to account ...
0
votes
0answers
68 views

Event ID 4013 DNS-Server-Service on Network with Only One Domain Controller/DNS/etc

I'm consulting for a small business that has a single server that handles DC, DNS, DHCP, etc. roles. It is giving the following error with some regularity: 4013 DNS-Server-Service The DNS server ...
4
votes
2answers
248 views

Remove Windows Server from Domain While it is Airgapped?

I am working on a scheme to clone a production, domain-joined virtual machine, bring that machine up off the network in order to prepare it to be converted to a template. One issue that comes to my ...
2
votes
2answers
106 views

How to have your DNS servers forward queries for internet names

I have 2 Domain Controllers / DNS servers on Windows 2012, their IPs are 10.0.1.10 and 10.0.1.11 Another server acts as the DHCP server for clients, and sets their primary and secondary DNS to the IP ...
4
votes
1answer
246 views

How to remotely generate Windows AD Kerberos keytab from a Unix machine?

I would like to know if it’s possible to create a keytab file direct from a client machine without using the ktpass utility in the Windows Server side. The main reason I would want this, is to ...
1
vote
1answer
98 views

How do you prevent an Active Directory 2012 R2 Domain Controller from advertising the domain on a specific interface?

Short version: How do you prevent an Active Directory 2012 R2 Domain Controller from advertising the domain on a specific interface? I want that network to not be flagged as a domain network, and no ...
4
votes
2answers
181 views

Can I set up conditional forwarding for a parent DNS zone?

If my domain is ds.usepowershell.com, can I set up a conditional forwarder for usepowershell.com and not redirect my internal queries (since technically, ds.usepowershell.com is a subdomain of ...
1
vote
1answer
120 views

What do the error messages and codes mean when creating and installing Managed Service Accounts?

When using the PowerShell Cmdlets for creating and installing Managed Service Accounts, certain errors can be thrown. What does each error mean?
-1
votes
1answer
76 views

Deploying software on active directory [closed]

I am not sure if this is the right place to post this question but I figured since some users here are familiar with Windows Servers and Active Directories, that I might to get some information about ...
4
votes
3answers
476 views

In Active Directory, what is the relation between IP, MAC, and OS?

I have one machine on which I want to run 2 different OSs, dual boot between Windows Server 2008R2 and 2012R2 (or others). I want to keep the same computer name, the same IP address, and the same MAC ...
3
votes
2answers
510 views

What is the origin and / or standardness of the term “bang account”?

I keep hearing "bang account" at my company and, through context, figured it out to mean an account with elevated privileges. I believe this is particularly the case with Active Directory accounts, ...
-1
votes
1answer
92 views

What can a domain controller do? [duplicate]

In short: I do not know where to start reading so that I can understand how to configure a DC. The long question: In the environment I work, we use an outdated domain controller and I have to create ...
2
votes
1answer
790 views

New Domain Controller Cannot Enroll for KerberosAuthentication Certificate

I have an AD domain. 2003 FFL/DFL. The schema was upgraded to version 56 for Server 2012. The domain contains a mix of domain controllers from Server 2003, Server 2008, Server 2008 R2, and now Server ...
3
votes
0answers
254 views

Branch office & DNS

We've got a branch office with no on-site services at the moment and we'd like to change that. The biggest goal is to setup some file servers but faster log ons and DNS resolutions will be welcome as ...
2
votes
2answers
210 views

Removing DHCP role, cleaning up AD data

Back story. So we had a development engineer (who just happened to have access to a domain admin account) who set up a handful of DHCP servers on our domain. This caused headaches, as the new DHCP ...
-2
votes
1answer
45 views

How to inspect traffic from PC on domain? [closed]

Is there a tool (on Microsoft domain server, or 3rd party) that can allow me to log if some domain user is generating specific traffic at chosen time (in my case, I want to know if he is using Team ...
0
votes
1answer
82 views

Should I have multiple active directories for my local and remote sites?

I'm setting up a new network, now I need a remote (in our DC) and local active directory for various things. I want the email server to be on the remote server (for redundancy) then route through our ...
1
vote
1answer
127 views

Windows Server 2012 Sharepoint 2013 Active Directory - what are the user limitations?

I was wondering if you guys know if there is any limitation as far as how many users I can have on my sharepoint 2013 site if I'm running server 2012 foundation, I think I saw somewhere that there was ...
0
votes
1answer
26 views

how to do authentication of xp clients on lion server with shared printers but windows server as a domain controller

i have a LAN with windows xp clients and Windows Server 2008 R2 with server performing the domain authentication . I also have a lion server with network shared printers attached to it . The ...
0
votes
0answers
31 views

Create a folder on a share each time a workstation joins the server 2012 domain

I'm trying to automate the creation and deletion of a folder each time a computer is added or removed from the domain. When a computer joins a domain, I'd like folder w/ %computername% to be ...
0
votes
1answer
294 views

Moving domain controller from Samba to Windows Server 2008

I need to migrate an existing Active Directory from Samba to Windows Server 2008. It's easy as add a new Windows Domain Controller, wait for AD replication and turn off the linux machine?
1
vote
1answer
708 views

Why can't I change passwords using the ldifde tool?

I'm trying to change user passwords using ldifde tool with the following commmand: ldifde -i -h -f .\password.ldf -J ./ Here is one of the entries that are in the password.ldf file: dn: ...
0
votes
2answers
2k views

Exchange 2013 Error - MapiExceptionUnknownUser: Unable to open message store

I am trying to install Exchange Server 2013 for days. On every try I am getting the error "MapiExceptionUnknownUser: Unable to open message store." while connecting to either ECP or OWA. In my ...
2
votes
1answer
8k views

Missing SYSVOL and NETLOGON after upgrade from Windows 2003 SBS to 2012 Standard

Today we went from Windows 2003 SBS to Windows Server 2012 Standard. I did the following: Joined 2012 server to the SBS 2003 domain Installed Active Directory Domain Services (aka dcpromo) on the ...
1
vote
1answer
85 views

Add attribute through commandline in Active Directory

I am migrating from OpenLDAP to Active Directory (Samba4). I was wondering if there is a commandline command (in windows commandprompt or powershell) to add Attributes to the Active Directory Schema. ...
1
vote
2answers
175 views

Can two servers map to the same domain name?

I think the answer to this question is "no", but I thought I'd ask here to be sure. I am writing a web application and I need to access JavaScript code from a subdomain on another domain. This isn't ...
0
votes
1answer
147 views

Windows DNS server deletes its own A record on reload

Okay so I have never seen anything like this. Here's the story. We have four DNS servers. Let's call them server01-04. server03 is set to be the primary one by DHCP. Scavenging is disabled ...
4
votes
2answers
2k views

Copying OU permissions from an existing security group to a new security group

Currently we have a security group named: Limited_IT_Admins that has special permissions (restricted to only certain tasks they can do) on ~7 City OUs within a Country OU. [Country] <- top level ...
2
votes
1answer
417 views

Constantly having to net stop start dnscache after adding new entries in dns

Occasionally I must add new DNS entries in AD DNS. The zone is the domain's zone, and the server which I use to add it is in the same subnet as the clients affected by this issue. After adding the ...
2
votes
2answers
76 views

Why is a computer on my network not resolving correctly?

I am running Windows 2003 Server with Active Directory and DHCP enabled. the machine: laptop1 receives the IP: 10.2.6.134 from the Windows 2003 DHCP Server. the machine name and IP does not show up ...
1
vote
3answers
984 views

Read access to Active Directory property (uSNChanged)

I have an issue with read access to the uSNChanged property when doing LDAP searches. If I do an LDAP search with a user that is a member of the Domain Admins group (UserA), I can see the uSNChanged ...
2
votes
2answers
1k views

Is there today any reason to have multiple domains in one forest

I've been reading a lot trying to figure out why I would set-up a "multi-domain - one forest" architecture but I haven't found any good reason to do so. I came to the conclusion that you better use ...
-5
votes
2answers
891 views

Store user My Documents folder on server [closed]

EDIT: Rephrased this question to convey the message precisely. A user, (user1) use to login into multiple computers on the domain using his password, say (user1/password1) He needs My Documents, ...
2
votes
2answers
1k views

How should I integrate Active Directory with Windows clients and Linux clients and servers

I have Windows and Linux clients and I want to provide Active Directory authentication for both but keeping DHCP and DNS on Linux servers. Is this possible ? I have very little experience in ...
1
vote
1answer
1k views

How do I use Group Policy on a domain to delete Temporary Internet Files?

I have a domain controller running on Windows 2008 Server R2 and users login to application servers on which Windows 2003 Server SP2 is installed. I have applied a Group Policy to clean temporary ...
-5
votes
1answer
453 views

Changing user passwords in Windows Domain Controller [closed]

Suppose that users in a domain aunthenticate using windows domain controller. How can the administrator of the windows domain controller change the passwords of users? Does this require user's ...
2
votes
1answer
7k views

How to list all Active Directory Users and their group membership

I'd like a single scripted line to export to CSV all the users in my AD with all the groups they are members of. I'd prefer it to be done in powershell, but dsquery/dsget is a fine alternative ...
4
votes
1answer
4k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
2
votes
1answer
124 views

I am trying to automate an install with Active Directory to a server core box?

I am trying to automate an install with Active Directory to a server core box? I assume I need to set up a script. Any ideas on how to go about this.
0
votes
4answers
1k views

What happens if I restore System State that is over 60 days old?

If I do a system state restore, but the backup is over 60 days old, what will happen to my domain? This is the system state for the forest root. Will my domain simply cease to exist? I have other ...
0
votes
0answers
1k views

Resolve event ID 5807 (Netlogon) when servers from a trusted forest authenticate on a domain controller

I have a multi-forest Active Directory environment with a 1-way trust between them. (Forest B trusts Forest A.) Domain controllers in Forest A report event ID 5807 from source NETLOGON, which ...
2
votes
3answers
277 views

Can my Active Directory domain name prevent a forest functional level from being upgraded to Windows Server 2008 R2?

I have inherited an Active Directory environment that is at the Windows Server 2003 forest and domain functional level. The DNS domain name has no special characters--it looks like sampledomain.org. ...
2
votes
1answer
1k views

Domain Controller Safe Mode user account?

What account can I use to log onto a domain controller when booting into safe mode (without networking) there are no local users accounts on domain controllers and it doesn't see the domain.
1
vote
2answers
804 views

Is it possible to create a Windows domain administrator with only the ability to reset passwords?

No other permissions, just the ability to reset AD passwords? Thanks!
7
votes
3answers
1k views

Need for another Domain Controller

I have two domain controllers (Windows 2003) in one site where most of the department I support resides. There is another building (at another site) where my department resides as well, but they have ...