Tag Info

Hot answers tagged

10

You should have your Small Business Server (Server Essentials) doing DHCP and DNS. SBS will automatically disable its DHCP service when it detects another DHCP server on the LAN. (You can verify this by checking the event logs, there will be DHCP errors, and the service will likely be stopped) Since your router is likely handing out the ISPs DNS, your ...


6

There isn't built-in functionality in the product to do what you're looking for. Security groups don't have an ACL mechanism to control which members are added, only who can modify the membership. What you've got is an interesting conundrum. In the filesystem world Dynamic Access Control (DAC) could solve the problem you've got handily, but DAC-like boolean ...


4

Q: Is there anyway I can move the active directory? A: No there isn't.


4

Do you have backups? (It sounds like the answer is no, but...) If so, restore the 2008 server (to a VM if necessary), add the 2012 machine as a second DC in the old domain, then demote and remove the 2008 server. Then raise the functional level of the domain on the 2012 DC. For more details on this process, see MSDN. This article might also help. I ...


3

Unfortunately, it doesn't work this way. The Exchange/Outlook/Lync ecosystem is an exception because it will download the thumbnailPhoto of other users from AD into the Outlook or Lync applications, but Windows doesn't. There exists no out-of-the-box mechanism that will download the pictures of all users in AD and store the images locally as profile images ...


2

That means the setting was Enabled at one time, then changed to Not Configured. You will need to change the setting to Disabled to revert back. You may also want to enable the setting: Administrative Templates > System > Group Policy Security Policy Processing: Process even if the group policy objects have not changed And do the same for ...


1

If the server is connected to a port on the router and you turn off the router, how would you expect the workstations to communicate with the server? You should connect the server to the same switch as the workstations.


1

Structure 1 isn't wrong as such if it works for the intended use case, but it limits the flexibility of the LDAP tree and might make some things impossible down the road, e.g. the thing you try to do now. Therefore, I would consider Structure 2 the better solution, as it is much more flexible. If you want to limit access to your new system e.g. to the IT ...


1

Remember that there are three parts to wireless security. The first is the network wants to know whether the device is allowed on the network. To do this, it needs to be able to accurately identify devices, and will therefore issue a unique certificate for every device. However, to be able to create new certificates for every device means the network must ...


1

On linux you can use kvno command to retreive it from KDC [root@XXXX XXX]# kvno host/XXXX host/XXXX@TEST.COM: kvno = 13


1

FYI: domainjoin-cli configure --enable pam will re-add these lines after an upgrade as well. PBIS Open 8.x and higher properly deliver a /usr/share/pam-configs/pbis configuration so that this shouldn't happen in the future. Additionally, PBIS logs more specific errors to the daemon facility of syslog, so you can view them in ubuntu in /var/log/syslog ...


1

NPS as Radius server uses the Active Directory to perform authentication. When using PEAP (MSCHAPv2), the client sends the radius server a hash of its password. This hash is eventually compared to the contents of the directory (no decryption here). You could consider NPS as some sort of passthrough here. I can't see why communication between both couldn't ...


1

No, having AD recycle bin enabled does not prevent LDP from showing you the tombstoned (deleted) object. I have verified this just a few minutes ago. I have AD recycle bin enabled and was able to find my deleted object in AD Admin center and via the LDP tool. The tool can be used only if the Deleted object is under tombstoned life. If the deleted ...


1

When working with a workgroup rather than a domain setup, you will have to make sure that each user is added on each machine in the workgroup, or alternatively create one general user, add it to each computer and use it, otherwise a user on a certain machine will not be recognized by another machine unless the user is also added there. I believe you are ...



Only top voted, non community-wiki answers of a minimum length are eligible