Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

0
votes
0answers
6 views

dsget the users in a group, or member groups

I am using the chain of commands to get a report of the members of group AD_GROUP_NAME. dsquery group domainroot -name AD_GROUP_NAME | dsget group -members | dsget user -display -email And it ...
0
votes
0answers
11 views

OU Name with 'slash' in title “suddenly(?)” rejected by Exchange 2013/0365 Hybrid

We recently migrated from Exchange 2007 to 0365 Hybrid with a 2013 server on-prem. I'm reasonably sure I've made changes to users in the 'Web/IT' OU since the migration and not run into this error, ...
-1
votes
0answers
6 views

ADFS client for SCIM 2 [on hold]

I have developed a SCIM2 api for our product and want to test it with ADFS. I've already tested it with Azure AD which was super easy but have no clue how to do it for ADFS. I can see from the ...
0
votes
1answer
34 views

Enterprise Admins don't have admin permissions in child domain

I've built a forest for testing consisting of a forest root domain and two child domains. Enterprise admins in the root domain don't seem to have admin privileges on member servers in the child ...
0
votes
0answers
31 views

“Conversion” of the script from bash to powershell

Unsure if it is appropriate community, but the question is diffuse between Linux and Windows... Using WSL and native Linux with installed adtool I love to perform routine tasks at Windows ADDS. One ...
0
votes
0answers
17 views

Active directory domain name and Netbios naming best practises [duplicate]

Microsoft recommends to use a subdomain if we have a public facing website lets say contoso.com is our public website and i use ad.contoso.com for domain name is there any harm changing the NetBIOS ...
-5
votes
1answer
19 views

AD PDC and SDC domain [on hold]

We have PDC and SDC on our network. I need clarification if our PDC server fail due to server fault, how to make SDC as acting PDC. What is the purpose of two DC's on same network. If PDC fail SDC ...
0
votes
1answer
34 views

Macs on Active Directory. Password policies not being enforced

Okay. Fundamentally, I've just started a new job where all of their IT support is outsourced. I've come in and realised password policies just aren't being enforced on any OS X machine in the building ...
0
votes
0answers
13 views

SSSD authenticate against parent domain

Ubuntu 18.04 LTS, sssd 1.16.1 I have a Linux server that is joined to a AD child domain via 'realm': realm join dev.example.com I am able to authenticate with users in the dev.example.com domain (i....
0
votes
1answer
53 views

Problems with clients for secondary dns server

Good evening! Im trying to make a high availability environment on my work, in order to do that I setup a little lab installing 2 servers; one with WS 2008 R2 and the other with WS 2012 R2 (same as ...
0
votes
0answers
27 views

Assigning third-party client certificates/keys to Active Directory users

In our organization, we have a number of third-party vendors that we must interact with using client certificates. We'd like to be able to assign certificates/keys to a particular Active Directory ...
0
votes
1answer
18 views

Windows 2012 AD user failover to AWS Windows AD

We're having a bit of an issue with our local Windows AD not failing over to our AWS hosted AD. We have web portals for our support staff to log into with AD credentials. When our on-premise AD "...
-2
votes
0answers
9 views

Where to find cds information on phone need to see how to locate through callpad [closed]

Can't find call pad or connectivity settings on phone in order to locate cds settings for radio
1
vote
1answer
63 views

Setting 'Run-Protect-Admin-Groups-Task' Extended Right

I modified the security settings on the AdminSDHolder object in my domain and takes a very long time to propagate the settings to my admin users. I tried run runProtectAdminGroupsTask manually, but ...
0
votes
0answers
25 views

Active Directory Web Services has resumed checking if the computer is a GC error

I have two Domain Controller server 2016 that the second one is an additional DC. I'm getting the following error in additional dc : Active Directory Web Services has resumed checking if the computer ...
0
votes
1answer
26 views

Deny RDP access to specific server from a particular user via GPO

I have a security issue. How can I deny RDP access to a specific server(critical server) for a particular Active Directory user using a Group Policy Object (GPO) ?
0
votes
1answer
26 views

LastLogonDate AD property for computer object - how often is it refreshed?

I was not able to find any good enough information about this. How often should this value be refreshed for windows servers which are online all the time? Seems like it's many days?? example to get ...
-1
votes
0answers
11 views

User is facing lockout issue after opening any word file [closed]

I have a user who is facing lockout issue after opening word file. Can someone help me in resolving this issue?
1
vote
2answers
35 views

Windows Server Domain Controller without real domain

I'm setting up a local logon server, simply to handle user logons and enforce some group policies. Ideally we could do with not pointing a genuine domain to the server. Is there any way of setting up ...
-2
votes
2answers
18 views

How to identify that the protocol is using by AD DC is Kerberous?

I have created a local environment as follows:- DC:- Windows server 2008<br> Client:- Windows 7<br> Domain:- januapp.local Now I read on somewhere that, the DC uses two types of Protocol ...
0
votes
0answers
37 views

promote server to domain controller over internet

I have been facing this issue well over couple of weeks now. I can use some guidance and help. Current Setup: Aws ec2 instance (windows 2012 r2 server) hosting "abcd.com" domain. It is also a DNS ...
0
votes
0answers
27 views

Correct role for different people on AD environment [closed]

I'm new to AD, and my company just bought AD server 2016 and start to use AD. Now I need to define some role for below users and really need some expertise suggestion. CEO – What role should assign ...
0
votes
1answer
31 views

AD new user account: create from scratch or copy existing user?

I can't seem to find a consensus for this online. My colleague who is writing our documentation has put that it is "best practice" to create our AD accounts new and from scratch....I have never heard ...
-1
votes
0answers
35 views

Apply GPO immediately

I am testing a software install gpo on a windows 2016 domain controller. I have the gpo set up to only be applied to 1 specific user. I have run gpupdate /force from the domain controller and rebooted ...
0
votes
0answers
16 views

How Kerberous works when using an AD with three domains, one is root and others are Child?

Assuming an AD has one root domain 'ROOT' and two Child domains 'CHILD1, CHILD2' then How a user in the CHILD1 domain can access the resource in the CHILD2 domain? ROOT is the root domain with the ...
0
votes
2answers
32 views

Generate/Sign certificates with the AD trusted root certificate?

I know that when an Active Directory domain is created: it creates it's own root certificate and that root certificate is automatically pushed into machines when they are joined to the domain You ...
0
votes
0answers
22 views

DNS client refuses to update Windows DNS server

Server 2016- DC and client Windows Integrated DNS Not sure why this is happening. I join a computer to AD and it updates DNS with its record. The IP changes on the client but the record never ...
1
vote
1answer
40 views

Creating a new AD LDS instance without the Setup Wizard?

Is the installation of a new unique instance of AD LDS (using either cmd or PowerShell) possible? All resources I can find online just use the Active Directory Lightweight Directory Services Setup ...
0
votes
0answers
19 views

LDAP SSl Certificate [closed]

I am trying to establish a secure connection between a client (C# implementation) on Windows 10 and Active directory server installed on Windows server 2012 r2 using SSL port 636. The connection with ...
1
vote
1answer
28 views

How to distribute RDP certificates from ADCS to non-domain members?

I have a few hundred systems that are not AD-joined, for which I'd like to issue RDP certificates from an internal hierarchy (built with ADCS). I can do it manually, by generating CSRs, then signing ...
1
vote
1answer
37 views

Active Directory Domain name(s)

I've successfully created a test AD domain and joined several machines to it, for the purposes of this post I'll call the domain "TEST.COM". Everything seems to be working perfectly, except for one ...
4
votes
0answers
44 views

AD migration 2008 r2 to 2012 r2 - must've missed something

I finally went through with this the other day. Got DNS/AD setup, seized FSMO roles on the 2012 server, migrated DHCP etc. I thought I was ready to go so I turned off the 2008 server yesterday. ...
0
votes
1answer
29 views

Ansible & Terraform DNS creation on Active Directory with nsupdate

I'm trying to create a new DNS record on active directory with the nsupdate module. Both, Terraform and ansible works with key_name & key_secret. If I disable the secure only option on active ...
1
vote
1answer
41 views

How to fix broken secondary AD server?

My Secondary Active Directory server has gone dead, and I am installing its replacement now. Everything will be the same, computer name, IP, everything. The new server is running now, and ADDS ...
1
vote
1answer
26 views

Initialize RDP user, only via FTP

I have a rather unique issue, and was wondering if there's a simple solution to this that I am failing to find. I have a Windows Server 2012 instance running remotely, that I have no physical access ...
0
votes
1answer
53 views

/var/log/cron.log returning CRON[PID]: Permission denied for domain joined account

I'm trying to get a cron job to run, but not as root. Within the context of the user (domainuser@contoso.com), here are the outputs of the crontab and cron.log: Output of crontab -l # Edit this ...
0
votes
0answers
25 views

Windows DC event 4769: why some users appear to connect to themselves

Windows domain controller event 4769: We noticed that most of the users are trying to connect to themselves, i.e. they appear both in the account name and service name fields for this event. This ...
0
votes
0answers
15 views

nslcd with domain.com and sub.domain.com

i'm trying to setup our linux server with nslcd within multiple AD Domains, example.com and sub.exmaple.com. The current setup with nslcd is pretty easy and works for the domain example.com: uid ...
2
votes
1answer
323 views

How DC authenticates when Client is not using any authentication?

I have a virtual environment with the following structure: DC: Windows Server 2008 Client: Windows 7 I installed Active Directory on the Windows Server 2008 and made it in domain januapp.local, then ...
0
votes
0answers
31 views

AD user not authorized for remote login despite being in built-in admins group

I have created an AD group called "Local Admins" which I've added to the built-in "Administrators" group of my servers through a GPO. I have verified that on the servers, "Local Admins" is now part of ...
-2
votes
1answer
31 views

Domain user cannot access to his shared folder after deleting that user

I've created an shared folder in domain and user was able to access that shared folder with his permission but after deleting that user he cannot access to that shared folder. I've created that user ...
1
vote
1answer
66 views

Switch Active Directory from Public IP to Private IP

I have an active directory and some servers running on public IPs Like ADS --> 62.xx.xx.210 Server joined ADS Team foundation server --> 62.xx.xx.211 SQL Server --> 62.xx.xx.212 Exchange ...
0
votes
0answers
31 views

office 365 enable AD sync after disabling

To me this is a rather weird issue, I've managed to complete exactly what I wanted to do, however, I'm now at the stage I want to enable AD sync again. The error I'm getting is as follows: PS C:\...
1
vote
1answer
55 views

Error when installing remote access role: There may be a version mismatch between this computer and the destination server

I am getting an error when I attempt to select the Remote Access role on a Windows 2016 Server. I have been unable to find this error mentioned anywhere. I am installing the role on the local ...
0
votes
0answers
30 views

OnPrem AD authentication over Azure AD?

We have hybrid environment, on-prem AD + Azure AD. Introduced windows 10 machines which are connected to azure ad. new site - windows 10 machines takes more than 5 minutes to login due the fact that ...
0
votes
1answer
44 views

Change password of new Windows domain user account without logging into the account?

I've got assigned an additional domain user account user2, with a password P@ssw0rd, that must be changed, before I can start using the account. I don't want to log into user2 from the Windows logon ...
0
votes
1answer
37 views

Ubuntu map CIFS / SMB share using active domain credentials without password file

Is there a way in Ubuntu 18.04 to map an SMB share when the users login without using a password file? The boxes I have are members of a Windows Active Directory domain and the users will use their ...
0
votes
0answers
16 views

Nginx reverse proxy with AD selfservice loop on password change

I have a AD self service webserver going that works internally and from the root domain but not from a subdirectory. The use I want to make of it demands it be usable from a subdirectory, so I really ...
0
votes
1answer
117 views

Azure Connect “soft match” issues

Before I get into the details: my problem is clearly different than the one described in this question. I'm running a single Azure Connect instance, so the problem clearly isn't due to multiple sync. ...
2
votes
1answer
26 views

What considerations should be made when determining the format of the CN (common name)

We're looking to improve the standardization & quality of data in our active directory. In doing this we've found inconsistencies in the format of the distinguishedName; specifically the format ...