Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

0
votes
0answers
15 views

Active Directory full forest recovery - Doubts about obscure sentence in MS documentation

I am trying to apply and test best practices about Active Directory full forest recovery as warmly advised in “Best Practices for Implementing Schema Updates or : How I Learned to Stop Worrying and ...
1
vote
0answers
7 views

syncronization from active directory to azure

I have created an user but with some errors, error on smtp: SMTP SIP etc... I changed it on Active Directory OU sync to azure but the values set after creation on office 365 and exchange is still the ...
-1
votes
0answers
43 views

Domain Controller dropped from domain

While in the process of making some changes in my environment I set up a new Domain Controller (2019) and promoted it, did some testing and verified it was working properly. I demoted my old DC (2016) ...
0
votes
0answers
12 views

When does WinNT:// provider query Active Directory? Or how to get SID of local group member if it is domain account

Okay so I am using the WinNT provider with a .Net DirectoryEntry class to enumerate the members of a local group, through the Members property. If the member is a local account, the DirectoryEntry ...
0
votes
1answer
24 views

Nesting Email Distribution Groups into job code Groups

My company wants to create job code groups. A single group for a single job code. For example, if Bob is a courier, the only groups he will have is the "Domain User" and Courier. Couriers are part of ...
0
votes
0answers
6 views

SCOM - report on failed logons on workstations

I have been asked to create a report that gives us the following data in a SCOM report and export to .csv: Timestamp Workstation Account Name Status and Sub Status Codes I know I'll have to work ...
0
votes
0answers
14 views

dirsync query shows changes to an AD object that doesn't appear to exist

AdamSync is crashing periodically. In troubleshooting we found that it's throwing an exception when it encounters what it thinks is an empty DN. I replayed the query using the dirsync cookie stored in ...
1
vote
1answer
46 views

Do AD GPO's affect workstations if nobody is logged in?

I have a few computers on the domain that misbehave. (don't appear to follow GPO despite RSOP readout) One issue in particular is a computer that seems to hang/sleep/comatose when nobody is logged ...
0
votes
2answers
24 views

AD CS - OID for root and issuing CAs

I am willing to install a Root CA and an Issuing CA with AD CS for my private environment (test purpose). Do I need to obtain public OIDs (i.e. from IANA) or can I skip this requirement since my CAs ...
1
vote
1answer
56 views

How to issue a windows machine cert for a non-domain joined computer?

I have a Windows Server 2012 AD/CA and domain joined computers automatically receive the CA public cert and also get a computer certificate generated and pushed using GPO auto-enrollment. All of this ...
3
votes
4answers
239 views

AD: OU for system administrator accounts

Just a simple question: Does it make sense create a dedicated OU in Active Directory for system administrators (including domain controller admins)? Are there drawbacks following this approach? Is ...
0
votes
0answers
28 views

How to audit what are the anonymous binds made from my server?

After an audit, I am trying to identify the applications generating anonymous binds on the Domain Controllers before the remediation happens. So far, we only have the DCs logs, and that doesn't ...
0
votes
2answers
28 views

Change requirements for resetting user password via AD Users&Computers

I know we can set password policy for how users can define their passwords. But is it possible to define the required complexity when an admin resets the password via 'AD users and computers' reset ...
-1
votes
0answers
17 views

Adding SLES 12 (Linux) Server to Windows Domain Creating DNS Entries [closed]

Can anyone suggest how can I avoid Situation that when we add linux server (with multiple IPs on it) to domain creating dns entries with all IPs
2
votes
0answers
26 views

Domain-joined computer doesn't have Domain network profile

One computer in our domain suddenly shows only Private network and Public network profile. It's probably connected to some update, when also network adapter name changed from "Intel Ethernet ...
1
vote
0answers
26 views

Azure Directory Migration [on hold]

I need some guidance and assistance on the following issue: My Actual Scenario Azure Subscription: my_sub Azure Directory: dir_a Active Directory: ad_a Middle Step Scenario Azure Subscription: ...
1
vote
1answer
27 views
+50

Is it possible to choose which objects get synchronized in AWS Managed AD?

In Azure AD Connect Sync, it is possible to configure filtering. This is described as: By using filtering, you can control which objects appear in Azure Active Directory (Azure AD) from your on-...
0
votes
1answer
23 views

How to use Veeam to recover locally-hosted Exchange mailbox alias to implement on Exchange Online

I've inherited an IT department after just 1 year in it, during which the 30-year sole-IT person retired, and his replacement, who hired me, left for a remote position. Shortly before he left, Veeam ...
1
vote
0answers
40 views

failed attempts by guest user

im a part security monitoring team Many guest failed login attempts are triggered in our environment while in my investigation, Eventcode 4625 with a subject AccountName=John account name for ...
0
votes
0answers
30 views

ActiveDirectory and DNS Practice Setup for Beginner [closed]

Not sure if this is the correct site in the network for this question, but here goes! I have a very strong software background (root cause analysis, troubleshooting, deployment and config). I’ve ...
4
votes
0answers
44 views

Microsoft RemoteApp via TS Gateway initial connection load very long (over 2 minutes)

The Enviroment We do have a RemoteApp Terminalserver, based on a Windows Server 2016. Latest Updates are installed. We have provisioned multiple apps through this server. There is one Session ...
1
vote
1answer
25 views

Is it possible that AD forest have different versions of AD on different sites?

As I plan upcoming AD upgrade (from 2008R2 to 2019) I face another problem: we're actually have AD Forest that consists of several sites, each of them on 2008R2 AD version. As we upgrade one site AD ...
2
votes
0answers
14 views

Ubuntu 18 inserting leading space to username

We have an Ubuntu 18.04 client authenticating against a Samba 4 Active Directory. On this client (and this client only) when a specific user (and this user only) logs in via ssh, tty, or the GUI (at ...
1
vote
1answer
21 views

AD: Windows 2008R2 to 2019 migration, one leap or step by step

In our company we are planning to do Windows 2008 R2 migration due to End of Support it reached. We're not that fans of living on edge but this time it appear to be wiser target to Windows Server 2019,...
1
vote
1answer
32 views

Guacamole Apache LDAP Assignment

I have managed to setup ldap authentication with my active directory server running server 2016. I can authenticate to guacamole perfectly with AD accounts. Now comes assigning the AD users desktops. ...
5
votes
2answers
56 views

Can't delete OU from AD, IsCriticalSystemObject attribute TRUE - cannot change

I recently took over a contract for a customer where the previous IT apparently did a half-ass job of migrating from SBS Server to Server 2016. In AD there's an OU called MyBusiness which has two ...
1
vote
1answer
110 views

GP and AD group memberships are different

I'm running into an odd situation: domain group membership as reported by Group Policy differs from that of Active Directory. DOMAIN\user.name was already a member of DOMAIN\some_group_1. I added it ...
-1
votes
0answers
17 views

Samba4 unable to login after joining domain (DC)

I joined a domain as a secondary domain controller with samba-tool domain join domain.com DC -U"admin" Then I can see it successfully join the domain with the query: realm list --all domain.com ...
-2
votes
0answers
19 views

The advanced page cannot be opened when we want to add Active Directory user

When we want to replace a local service account for a domain service account. Systematical we have this error (The advanced page cannot be opened) : https://image.noelshack.com/fichiers/2019/18/5/...
-1
votes
1answer
25 views

Able to find Active Directory group using directory search but group does not exist in left window panel domain tree

We have a single 2008 R2 DC. We're trying to locate Builtin groups that no longer visually appear in the Builtin group folder in the domain tree in the left panel of the active directory users and ...
0
votes
1answer
32 views

How to remove AD transitive two way trust (ffl and dfl 2016)

How to remove AD transitive two way trust (ffl and dfl 2016) What problems should we anticipate after removing the trust?
0
votes
1answer
33 views

CentOS 7 SSSD LDAP against Windows Server DC fails to authenticate

I'm having an issue for authenticating via LDAP from a CentOS 7 machine to a Windows Server 2012 R2 DC via SSSD. Linux WS100 3.10.0-957.10.1.el7.x86_64 #1 SMP Mon Mar 18 15:06:45 UTC 2019 x86_64 ...
3
votes
1answer
175 views

Applying a GPO to local users except local administrators on Workgroup computers

I have a set of configurations which I need to replicate from my domain joined computers to non-domain (Workgroup) joined computers. I created a GPO, enabled Loopback processing and imported them via ...
1
vote
0answers
19 views

External Azure Active Directory

In Azure, I have invited some external users via their corporate email addresses and they are now visible in our AAD, the source being listed as External Azure Active Directory. I do not know if they ...
0
votes
0answers
28 views

Issue accessing network share via smartcard from different domain

I am currently using Yubikey smartcards to authenticate users within a Domain (Domain B). Login and network shares are working perfectly. However, when accessing Domain B's network share from another ...
0
votes
1answer
38 views

SSH Gateway for accessing remote ssh servers

I am currently have multiple users accessing multiple customer servers with ssh access (which all only allow access from our public office IP). This kind of gets annoying if a new employee enters the ...
0
votes
0answers
35 views

AAD Ldap Sync Times Set-AZ-xxxx?

When when I change a password in Azure AD , this password is reflected in AAD Ldap after 20 minutes, users query Ldap all day and they SSH , I need to lower sync times to 1 minute , something like "...
1
vote
0answers
24 views

map drive automatically using user credentials for server in separate forest

We have two completely separate forests with no trusts between them. I can map a drive on my computer to a server in the other forest by using the 'Connect using different credentials' option in 'Map ...
1
vote
1answer
65 views

Ubuntu 18 ignoring Samba AD user's `loginShell` attribute (set to ZSH, but user receives BASH after login)

We have a samba AD (4.3.11-Ubuntu) attaching to both Windows and Linux clients (Ubuntu 14, and Ubuntu 18) If I examine the LDAP for a user, his loginShell parameter is /bin/zsh. This was working for ...
-1
votes
1answer
92 views

Resolving external address when Active Directory Domain ends in .com

Prior IT support named a customer's Windows 2016 AD domain example.com instead of example.local, as I've always done it. The customer has an external Apache web server hosting www.example.com. When a ...
1
vote
0answers
40 views

OTRS 6 - AD integration - Domain Admin users mapped as Agents, not as OTRS Admins

I am testing OTRS 6 with the ITSM module. Right now I'm only testing it on our DEV environment, so it would not be a problem to ditch everything and start from scratch if it's the easiest way. I ...
1
vote
0answers
24 views

What should I take into consideration when creating AD users in PowerShell?

The current way AD users are created is: The employee determines which department the new hire is assigned A current user from that same OU is copied to create the new user The problem with this ...
0
votes
0answers
52 views

Active Directory Certificate Services ERROR_LOGON_FAILURE

I have found in event log following entries (event id 66): Active Directory Certificate Services could not publish a Base CRL for key 1 to the following location: file://\pki.my.lan/pki/Root CA(1)....
8
votes
1answer
90 views

Shutdown script doesn't run if workstation is not connected to the network

I have a requirement to run a batch script every time a system is shut down, no matter if the computer is connected to the network or not. (It shouldn't matter for the question, but the script in ...
0
votes
0answers
12 views

Autofs Windows Active Directory users home directory to rhel that only they can see it

I have a client that has two groups with different users on a Windows Active Directory, they also have a rhel machine with sssd authentication that the users will do the authentication on the AD ...
-1
votes
2answers
66 views

auto moving computer in respective OU, when joined machine in to domain

we want move Computer account automatically in respective Ou when it join Domain i have some Poworshell script but it is use for manual movement "redircmp ou=newcomputerou,dc=domainname,dc=com" so ...
1
vote
0answers
19 views

Is delegating a granular “Modify permission” on a group possible?

A certain user "x" has below permissions on a group "g"; -> Read/Write all the properties on group. -> Delete the group. Need to add "modify permissions" on the group "g" for user "x" ; but the only ...
0
votes
1answer
29 views

How to grant a Service Principal access to AKS API when RBAC and AAD integration are activated?

I need to grant a process (build pipeline) RBAC access to AKS API for deployment purposes. But the target AKS cluster has AAD integration active (as described here) I was expecting to be able to ...
0
votes
0answers
72 views

dcpromo of a windows server 2008 in existing samba based AD resulting in infinite configuration

We want to add a new DC using windows server 2008 in our AD that just have 2 zentyal 5 based DC to replace the second. DCPROMO is able to get all informations but when start to configure the DC , the ...
0
votes
0answers
37 views

CertSrv 401 Loop

Using domain admin credentials, I'm unable to authenticate into my PDC's CertSrv application: http://localhost/certsrv I'm caught in a 401 loop. I've tried this proposed solution: Open IIS Manager ...