0
votes
2answers
31 views

Group Policy - Backup and Restore

I am currently automating the creation of our enterprise domain controller and its configuration in case of SAN failure etc. I can create the server, install the necessary roles, create complete ou ...
1
vote
0answers
50 views

Active Directory Mismatch

I have a Active Directory Mistmatch how do I fix this? I have 2 x 2008 R2 Domain Controllers and a 2008 Domain Controller and I was trying to add a 2012 R2 Domain Controller. The Schema Version of ...
1
vote
1answer
56 views

Why don't Active Directory user accounts automatically support Kerberos AES authentication?

I'm playing around with a test domain on Windows Server 2012 R2. I'm operating at the highest possible functional level and have no backwards-compatibility issues in my small test environment. ...
1
vote
2answers
74 views

Windows Server 2012 R2 in a Windows Server 2008 R2 domain

Can a server running Windows Server 2012 R2 (file server, app server, etc.) exist on a network with Windows Server 2008 R2 domain controllers, or do the DC's need to be upgraded first?
0
votes
1answer
26 views

Can a Win2012 R2 domain controller be used as the AD FS host in Single Sign-On integration to Azure AD?

I have upgraded our Active Directory from Win2008 R2 to Win2012 R2 in preparation for an integration with Azure Active Directory. I know the integration can be done with Win2008 R2, but I figured ...
3
votes
0answers
41 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
3
votes
1answer
59 views

Setting up DNS forward zone when AD domain name is a subdomain [closed]

I'm in high school and want to learn about system administration, so I set up a Windows Server 2012 R2 domain controller in a lab and created the domain ad.foo.com. I own foo.com and the domain ...
3
votes
2answers
162 views

Where is active directory snap-in for Server 2012 R2?

We are using a Server 2003 domain. I've found the instructions for installing the Active Directory snapin for Server 2012 and earlier: http://technet.microsoft.com/en-us/library/cc732110.aspx. However ...
0
votes
1answer
36 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
0
votes
1answer
192 views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
1
vote
0answers
145 views

2012 R2 services will not start after promotion to Domain Controller

Having a peculiar issue promoting a Windows 2012 R2 server in a domain at 2003 domain/forest functional level. Built a new 2012 R2 server, added the following software (labtech, appassure, eset ...
4
votes
1answer
155 views

AD migration from SBS2011 to 2012 R2 and new domain

We have an existing SBS2011 server, and would like to migrate to a new 2012 R2 server. Ideally, we'd like to do this in a new domain - 1. we'd like to reorganize the OUs to remove the "SBS" named ...
2
votes
2answers
103 views

How to have your DNS servers forward queries for internet names

I have 2 Domain Controllers / DNS servers on Windows 2012, their IPs are 10.0.1.10 and 10.0.1.11 Another server acts as the DHCP server for clients, and sets their primary and secondary DNS to the IP ...
7
votes
1answer
969 views

Reset users password in Active Directory by Domain Admin account or other service account

In Active Directory you can set and enforce rules where users have to use strong password, can't use last 5+ passwords they already had, enforce password complexity. Is there a way to enforce such ...
4
votes
1answer
701 views

How to integrate Active Directory with FreeBSD 10.0 using security/sssd?

What are the required steps to authenticate users from an Active Directory running on Windows Server 2012 R2 in FreeBSD 10.0 using sssd with the AD backend with Kerberos TGT working?
6
votes
2answers
327 views

Active Directory Integrated DNS Records Deletion by System

I have an issue where records are 'disappearing' from my primary DNS zone. The client records for these devices are static entries. The entries replicate correctly but get randomly removed. I have ...
1
vote
1answer
290 views

Cannot authenticate in Active Directory using security/sssd from FreeBSD ports

I'm trying to implement security/sssd port in a FreeBSD 10.0 system. My main goal is to authenticate users from Active Directory running on Windows Server 2012 R2. I would like to know if anyone had ...
0
votes
1answer
269 views

Adding a windows 2012 server in domain controller role to 2003 active directory domain with 2008 member servers and exchange 2007 present

Current configuration Windows 2003 server standard edition - domain controller role (nodeB) Windows 2008 server R2 standard edition - domain controller role (nodeV) Windows 2008 server ...
2
votes
1answer
96 views

DHCP Administrators Group: No Permissions Granted on DHCP Server

I have added 'Group1' as a member of the DHCP Administrators group in my domain. Problem is, Groups and/or Users added to that group are not given permissions to view/manage the DHCP servers. How do I ...
-4
votes
2answers
230 views

How to allow standard user access windows server locally

We've setup first Windows Server 2012 R2 Essentials edition. Our office is small & sometimes fellow users may use server as a workstation. By default, only Administrative accounts can login ...
0
votes
2answers
337 views

Win 2012 AD, can't login with some users: there are currently no logon servers available to service the logon request

I have a Windows Server 2012 R2 with a fresh AD created, I have the admin user and test1. I added to the domain another Windows Server 2012 R2 machine and I can't log with the admin user, I get that ...
0
votes
1answer
257 views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
3
votes
1answer
331 views

Active Directory Administrative Center over Active Directory Users and Computers

Is there any difference using Active Directory Administrative Center over Active Directory Users and Computers? In training videos I've seen people mostly use the older look Active Directory Users and ...
2
votes
0answers
586 views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
0
votes
1answer
867 views

What's the upgrade path for ADFS 2.1 to 3.0 (Server 2012 to 2012 R2)

I have several domain controllers running Windows Server 2012 with a domain and forest functional levels at Windows Server 2012. Two of the DCs are running ADFS (2.1) in a farm for users in my ...
3
votes
1answer
442 views

Hyper-V and AD --> recommendations for small site? [closed]

I have a dilemma about how to proceed with new AD / Hyper-V installation and would appreciate your views, experience and advice. Situation: we are a small company with single site (25 users) and few ...
2
votes
1answer
238 views

Use Active Directory Administrative Center outside domain

I'm setting up a Active Directory lab environment on a Windows 8.1 laptop. I now have a Windows Server Core 2012 domain controller running inside a VM. I installed Server Manager for Windows 8.1 and ...
1
vote
1answer
66 views

Can you switch the domain of a 2012 R2 server with RDS installed?

We installed RDS, all roles, on a machine in one domain, DomainA. We've decided to move the machine to a domain in a different forest, DomainB. Our admins simply joined the machine to the new domain, ...
13
votes
3answers
3k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
1
vote
0answers
233 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
-1
votes
2answers
821 views

Using WDS to Deploy Custom OEM Image

So we just purchased 75 new HP machines (which all come with Windows 7 Pro OEM licenses) and generally when we make an image for a machine we just use the OEM image because it's already activated and ...
3
votes
1answer
118 views

Backup Users from Server 2012 Essentials before upgrade to R2?

I have a Windows Server 2012 Essentials server at home I am about to update to 2012 R2. According to MS it is not possible to do an in-place upgrade and I am required to make a clean installation of ...
2
votes
2answers
216 views

Installation of Active Directory on separate VM from DNS does not entierly work - not sure why

Not sure what I am doing wrong here. I have a moderately midrange server (16 cores, 2Ghz, 32GB ECC REG RAM, 6TB storage, nothing too extreme) where I am running Hyper-V (Server 2012 R2 Enterprise) in ...