2022 Developer Survey is open! Take survey.

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
0 votes
0 answers
5 views

Cross realm constrained delegation

I have Red Hat IdM on RHEL8 with a two-way trust to AD on Windows 2019. What currently works: Constrained delegation for NFS clients. NFS clients can impersonate users from the IdM realm (gssproxy). ...
user avatar
0 votes
1 answer
16 views

use external webserver in local Active Directory

i have a local active directory domain (for example : sample.net ) and i have a website hosted with same domain name in a shared server . i can't access my website in local network. i have added a www ...
user avatar
  • 1
0 votes
1 answer
16 views

How can I remove a no longer existent child domain from my forest?

In a virtual environment, I lost the virtualized DCs of a child domain of my forest. I don't need the child domain, but as the DCs are gone now, I cannot remove the domain in the intended way by ...
user avatar
0 votes
0 answers
19 views

Faveo helpdesk login [closed]

So we would like to use faveo so that we only have to login once and it maintains the logins for a set period of time rather than forcing us to login each time we use the site. We have the server ...
user avatar
0 votes
0 answers
15 views

FSMO Roles Conflict between Domain Controllers

One site has two domain controllers DC01 and DC02, replication is not good , DC01 is claiming PDC and Infra while other one [DC02] is claiming all 5 roles, this is sort of strange scenario, the other ...
user avatar
-1 votes
1 answer
23 views

Active Directory Web based Self Service [closed]

I am a service provider and have installed an active directory infrastructure as the backend to a number of applications. The issue is that the end users will never login to a domain bound machine, ...
user avatar
0 votes
0 answers
15 views

Best approach for specific local server permissions?

We are trying to set up a three step permission-structure (Firstline, secondline, thirdline support). Firstline can only RDP with user-rights to all our domain-servers, no problem there with ...
user avatar
  • 11
0 votes
1 answer
25 views

SMTP not available for installation in Windows Server vnext [closed]

I am trying to setup a SMTP service server in my virtual machine, a Windows Server preview, build number of 10.0.2511x. I am not able to find the service for download even in the "Add roles and ...
user avatar
0 votes
2 answers
27 views

How can I set the ACL of a CA programmatically?

When launching the CA console (certsrv.msc), I can right-click on my CA, select Properties and then I can modify the ACL of my CA in the Security tab. When I modify it, the changes are applied to the ...
user avatar
0 votes
1 answer
15 views

Can I map multiple AD groups to multiple roles on ESXi?

I have an AD joined ESXi server (v7.0) without a vCenter server. I can map an AD group to the "Administrator" role by configuring the advanced setting Config.HostAgent.Plugins.Hostsvc....
user avatar
0 votes
0 answers
31 views

Apache - Active Directory LDAP authorization

I'm running Apache 2.4 on Fedora 34. I've configured user authorization based on Active Directory usernames and passwords with "ldap_module" and "authnz_ldap_module" and this entry ...
user avatar
  • 21
-1 votes
0 answers
28 views

NTFS Permissions

I've created a folder called test1, a group called test_grp, I've created a test user called Jane Doe. I want the user to be able to create the file in the test1 folder but not delete. They're unable ...
user avatar
1 vote
0 answers
14 views

Extending Managed Microsoft AD to on-premises Servers

I'm researching the possibility of extending Managed Microsoft AD to a secondary Active Directory creating a basic replication structure between primary AD (GCP) and secondary AD (on-prem). Apparently ...
user avatar
0 votes
0 answers
14 views

Printing on hardened windows clients

I have inherited hardened clients with a lot of policies applied to them. There is an application running on this clients, that should show the windows printing dialog, but it does not pop up. There ...
user avatar
0 votes
2 answers
32 views

Changing an AD account password - what services will it break?

we have a bunch of AD accounts that are used for various purposes (allows scanners to save a file on a network folder, or it runs a service or scheduled task). Is there a quick way of seeing where the ...
user avatar
-1 votes
1 answer
31 views

GPO policy to give write permissions to java applications in C drive

I wish to run the following instruction in a Windows cmd: java -jar app.jar. App.jar is an application in charge of creating a file in the Temp folder of the Windows user folder but it fails because ...
user avatar
-1 votes
0 answers
34 views

Is it ok for a webserver to be a member of a domain?

For security reasons, I'm moving my webserver to its own VLAN. Is it safe to keep it as a domain member (with all the right firewall rules) or should it be a standalone server?
user avatar
  • 507
0 votes
0 answers
20 views

Creating an AD User that can only access the Network and C Drive

I am trying to create a User that can only acccess the Internet and using the installed Office. The User should have no access to printers, network drives or other productive resources. Does anyone ...
user avatar
0 votes
0 answers
34 views

How to get AD site name with winbind/samba-tool

I have several Ubuntu desktops in a Samba AD domain, I need a way to know which site a member is in with the member's shell. The members use samba/winbind to communicate with the domain. I have read ...
user avatar
  • 1
0 votes
0 answers
47 views

Multiple email addresses (send and receive) per user with a single Active Directory account?

The company I work for has multiple brand names e.g. Contoso and Acme The users need to be able to send and receive emails from both john.doe@contoso.com and john.doe@acme.com Now if John replies to ...
user avatar
0 votes
2 answers
35 views

How do I create an AD username with a dot in it via Powershell?

I'm trying to change an existing script so that my username is firstname intial dot last name for example: John Doe's username will be j.doe Current script works (without the .) as: $firstname....
user avatar
0 votes
1 answer
69 views

Why is a windows domain user required and is there an alternative?

I have a script that executes JAVA program. The script runs fine under my own user. However, the script fails to run when using a scheduler service, which runs on the same (EC2) machine, under a ...
user avatar
0 votes
1 answer
36 views

Setting up a trust to an AD environment with DCs on premise and in Azure, how can I limit AD traffic to only the on-premise DCs?

We are setting up a trust between a stand-alone on-premise domain (DMZ from now on) and a corporate domain which is AD/AAD (synched) (CORP from now on) so that users from CORP can log into servers ...
user avatar
  • 3
0 votes
0 answers
40 views

Validating credentials in PowerShell wont use Kerberos

In reality I'm debugging a C# app but since the same command is possible in PowerShell I'm trying there. I am trying to validate user accounts using the following in PowerShell: > Add-Type -...
user avatar
0 votes
1 answer
26 views

How can push AzureAD identities to on prem ActiveDirectory

Situation is that we have multiple sites (AWS VPCs), each with their own self-managed ADDS domains with no network connectivity between them (by design). We need to provision each sites ADDS users ...
user avatar
0 votes
1 answer
16 views

Can't bind Macs to Active Directory, it's not time synchronization, what else could be wrong?

Mac computers are unable to bind to our Windows Active Directory server. The error is the unhelpful Node name wasn't found (2000). Windows and Samba clients have no problem. All the systems on our LAN ...
user avatar
  • 209
0 votes
0 answers
38 views

WinServer2016 - Access Denied when adding or changing a GPO

I have inherited a network whose GPOs are damaged, the SYSVOL folder shows signs of tampering with the NTFS permissions and folder structure manually, and I am unable to add/edit any GPOs, I receive ...
user avatar
0 votes
1 answer
242 views

winbind Could not connect to dssetup pipe: NT_STATUS_RPC_INTERFACE_NOT_FOUND

I am trying to add a new member server running Ubuntu to a Samba Active Directory domain. On first glance everything seems to work, but when querying the status of the winbind service with service ...
user avatar
  • 597
0 votes
0 answers
25 views

When is mapUser required -

I'm not sure I understand when & why mapUser is needed. When you generate a keytab with ktpass you can map the Service Principal to a user wit mapUser. You can then kinit to the Service from an ...
user avatar
1 vote
1 answer
34 views

how to migrate existing profiles to new domain

We had our Server 2019 RAID fail and we had to rebuild it from scratch. This has now been completed and we're finding another issue - we now have to migrate users to this new domain w/o having them ...
user avatar
1 vote
0 answers
113 views

Block or Disable USB tethering using Windows AD GroupPolicy

For Windows based PCs connected with Windows AD with Group policy, we want to block USB phone tethering options. And we have tried following things which seems to be working for some people but not us....
user avatar
  • 251
2 votes
0 answers
22 views

If I set a policy to deny log on locally for a particular AD user, will it affect existing logged on sessions belonging to that user in any way?

Background Historically in my organisation we have used a particular shared domain admin account (let's call it SharedDA) for almost everything. It is currently logged on to several dozen servers. ...
user avatar
  • 129
0 votes
0 answers
12 views

Microsoft's ADMT not migrating updated AD ACLs

Can someone please help me with the following I set up a LAB consisting two single DC AD Forests (two separate AD forests) as I wanted to install and become familiar with Microsoft's ADMT (Active ...
user avatar
  • 1
0 votes
1 answer
70 views

GSSAPI Error: KDC has no support for encryption type on RHEL 8 joined to multi-domain AD forest

I have a simple MS ADDS multi-domain forest setup with a parent domain and one sub-domain. I joined a RHEL 8 server successfully to the sub-domain by using this official documentation. All OSs have ...
user avatar
0 votes
0 answers
45 views

Why Netlogon send dns query ipv6

I use https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-admx-netlogon#admx-netlogon-netlogon-addresslookuponpingbehavior set parametr addresslookuponpingbehavior to 2. When I ...
user avatar
1 vote
0 answers
20 views

ejabberd: ldap_filter in LDAP Active Directory

TL;DR: How to setup ejabberd to only allow some Active Directory group members? Hello, After having successfully set up an ejabberd service plugged in to our AD, I'd like to narrow the allowed users ...
user avatar
  • 11
0 votes
0 answers
29 views

rubuntu 20.04 ad join with dns erro

hi to all i need join an ubuntu on ad, but not create a dns record on domain and recive the error "No DNS domain configured for ubuntu2004. Unable to perform DNS Update. DNS update failed: ...
user avatar
0 votes
1 answer
42 views

How can I get a list of all disabled domain users with group membership, one user per line, but omit results for users that have no membership?

For example, when our users are terminated, we need to remove all groups. I want to check for groups still connected to user, but not show the users where the groups are removed. I have the following, ...
user avatar
1 vote
1 answer
113 views

Adding a machine to a domain fails with internal error

I've enabled winrm, disabled firewall, enable remoting, GPOs for winrm, enabled SMBv1 and completed updates first as troubleshooting but I still get the error. I can ping the DC as well. The error I ...
user avatar
0 votes
0 answers
227 views

target name is incorrect or the server has rejected the client credentials

I am trying to run a scheduled task with a user account that only has "domain users" group membership. I can also run the Powershell ISE as this alternate user to simulate this. I am getting ...
user avatar
  • 324
0 votes
1 answer
102 views

Nested AD group is not respected with SSSD

I have a domain joined server, configured with sssd. In sssd.conf I use ad_access_filter = (memberof=CN=CustomGroup,OU=Security Group,DC=company,DC=com) This works well for users in CustomGroup but ...
user avatar
2 votes
2 answers
32 views

GPO to add a purpose to root certificate

The root certificate of the DFN-PKI "T-TeleSec GlobalRoot Class 2" is not activated in the Windows certificate store for the certificate purpose "code signing". I can activate it ...
user avatar
  • 295
0 votes
0 answers
79 views

Windows authentication (AD) not working when IIS Application pool is running as custom user

I'm using: Windows 10 x64 Professional (in ad domain) IIS 10 Web site is running under local user EPM_USER, everything works except Windows authentication Configuration: When I try to from another ...
user avatar
  • 111
0 votes
0 answers
17 views

Difference between krb5-user and Pam method for LInux to authentificate on Active Directories

I'm trying to understand what the difference between both this guides is: http://ricktbaker.com/2017/11/08/ubuntu-16-with-active-directory-connectivity/ https://computingforgeeks.com/join-ubuntu-...
user avatar
-1 votes
1 answer
38 views

From an Active Directory Domain Controller, how to remove a Computer from the Domain with Powershell?

I need to remove the local computer I'm logged in to an AD domain joined beforehand, and this with powershell, non-interactively. I have not found any thread about it, so I wanted to create one to ...
user avatar
0 votes
0 answers
25 views

Active Directory forest level and NAS

I am in this situation. I have an Active Directory domain with forest level still at 2003. The servers are Windows Server 2012R2. I would like to raise the forest level to the same level as the ...
user avatar
-1 votes
2 answers
76 views

Can't logon to domain controllers

We have 2 domain controllers with 2019 server, system administrator made something with GPO which deny access for group "Domain Admins" to workstations, now it is distributed throughout the ...
user avatar
  • 9
0 votes
0 answers
9 views

domain controller B cannot use domain services once domain controller A is shut down (same domain)

So I have two different domain controllers on the same domain that reside on their own subnets. Domain controller A is the PDC with all the FSMO roles and Domain Controller B is on the other subnet (...
user avatar
0 votes
2 answers
25 views

Is it possible to run automated tasks when users are added to Active Directory?

we are looking to perform some automatic tasks when users are added and removed to active directory. When users are added, we would like to run a python file that would add that user to another ...
user avatar
0 votes
0 answers
8 views

Repeating errors on my domain controllers - "Network Connectivity Assistant" is rejecting some unknown request

Going through my system logs today I discovered that both my Server 2019 Virtual Domain Controllers seem to have this error firing off every 2 minutes or so: == The Network Connectivity Assistant ...
user avatar

1
2 3 4 5
197