Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

How “automatically detect settings” in IE affects Sharepoint SSO

Our network infrastructure is built on software from MS. I noticed that unchecking "Automatically detect settings" in IE disables SSO from IE and Chrome for our intranet sites based on Sharepoint. The ...
0
votes
1answer
18 views

Debian Samba AD DC: domain connected Win 10 can't connect to LDAPS

I've installed Samba 4.9.5-Debian with Active Directory role on Debian 10. The installation is configured with SAMBA_INTERNAL DNS backend. When I try to connect with LDAPS with domain connected ...
0
votes
0answers
19 views

Change administrator passwords

suddenly our IT leave out our office and now we would like to change all password and do not want wait to change till arrive the new IT so i would like to ask you some information to try to change it.....
0
votes
0answers
12 views

Configure FreeRADIUS with Active Driectory allow specific group of users to authenticate with specific wifi network

There are two group of users needed to manage WiFi network access. 1) Users from Group VIP_staff can connect to Wifi SSID WLAN_VIP(with subnet 10.11.10.0/24) only. 2) Users from Group Office_users ...
0
votes
0answers
10 views

Data collection failures

I have some issues on my domain controller. I saw that i have missing data for "Data Collection Failures For Domain Controller Objects" these two "AdvancedAudit, AdvancedAuditCollectionVisualizer" ...
0
votes
1answer
25 views

Loop do until fails after exception

do { Try{ if (New-Object System.Net.Sockets.TCPClient -ArgumentList $server,3389 ) { Write-Host $server 'Ready for RDP connection'-ForegroundColor Green } } catch { write-warning $error[0] } }...
0
votes
0answers
17 views

Join home macOS laptop to Active Directory domain in AWS

We have a test Active Directory domain in AWS that uses its own internal CA and non-public DNS records. We also have macOS laptops (that we use for testing) that are at home with each of the ...
0
votes
2answers
34 views

Migrating Mailstore from Exchange 2010 to Exchange 2013

I have to domains, A.de and B.de. They trust each other since some years. A and B both use Exchange 2010. Now, A.de started to use Exchange2013. Now the two domains should get merged, i.e., A.de ...
-2
votes
0answers
10 views

ATA Lightweight Gateway and IPSec

I have an AD setup with IPSec firewall policies for encrypted traffic. I wanted to install ATA to analyse the network and installed lightweight gateways on every DC. But ATA doesnt seem to find any ...
3
votes
4answers
80 views

in-addr.arpa zone delegation in Bind 9 and Samba 4 as an AD DC with DDNS

Environment and goals In my testing KVM lab I have a virtual network 172.16.50/24, in this network I have got 2 Centos 7 VMs running Bind 9 and ISC DHCP servers: Мастер DNS : controller.wsvirt.home (...
0
votes
2answers
44 views

Powershell script : Set-ADUser -clear with multiple attributes in variable

I want to clear multiple attributes by using variable in Powershell script (version 5.1.17763.1007) It's work : Set-ADUser -Identity $($user.SID) -Clear Initials,info It's work also: $emptyParams='...
0
votes
1answer
27 views

Allowing an active directory group to ssh into server

I'm trying to get my AD group SSH_Users to be able to SSH into our server. I added a line to the config file in /etc/sshd: AllowGroups ssh_Users and tried ssh_Users?domain.com. This does not work. I ...
0
votes
1answer
44 views

Check Active Directory GPO audit settings via Powershell

I am trying to automate checking the audit settings on GPOs. In the GUI, to check one GPO, I'd open Group Policy Management Console, expand domains, the domain name, Group Policy Objects, select a GPO ...
0
votes
0answers
20 views

Step by Step KB on migrating On-Prem AD to Azure [closed]

Everything is currently on-prem, plan is to migrate the following to Cloud 1. Windows 2012 Active Directory 2. Exchange 2016 3. Office 2016 to O365 Looking for step by step and best practice KB on ...
1
vote
1answer
24 views

Active Directory as uid/gid provider within a cluster

I have a CentOS 8 HPC cluster setup with a login node that is connected to an active directory via sssd/kerberos. Only the login node is accessible from the user network. Users use their normal domain ...
0
votes
0answers
17 views

Why do I have acces to a folder that looks like I have no permissions (Windows) [closed]

When I use windows explorer to check my effective access on a network shared folder on my employer's network (right click -> properties -> security -> advanced -> effective access) it says that I don'...
0
votes
0answers
17 views

Authenticating Windows user via Active Directory NPS to remotely access Cisco router (MS-CHAPv2 and/or PEAP)

I have Googled for hours and have not found my answer. I have found information on PEAP and MS-CHAPv2 of course, but nothing for my specific situation (which to me seems like something that should be ...
0
votes
0answers
19 views

Issue with windows logon script asking for UAC

Currently have a logon script running on multiple user accounts. Whenever a standard user logs onto their computers they are prompted with Windows 10 users account control. The script will not run ...
0
votes
0answers
11 views

Docker Registering IPs with AD DNS

How do I stop docker from registering the container IPs with DNS? They aren't valid IPs on the network beyond the internal networking of the host to docker obviously and then cause issues
3
votes
1answer
33 views

Powershell script to set AD permissions fails with “Access Denied” despite running account having the correct permissions

I'm using the following Powershell cmdlet as part of a script: # Posted by TobyU at www.pwsh.ch on 13.09.2018 # https://www.pwsh.ch/active-directory-powershell-delegate-permission-to-reset-user-...
1
vote
0answers
33 views

Error while checking IPv6 address using Get-NetIpAddress

Get-NetIPAddress -AddressFamily IPv6 -AddressState Preferred -SuffixOrigin DHCP | Select IPAddress I am facing the error below while executing above script. It shows the correct IPv6 configurations ...
0
votes
0answers
12 views

How can I integrate users from two different Office 365 accounts into one Teams instance?

Our company has about half our users on one Office 365 account and all on the (say) example1.com domain, and the other half on a totally separate Office 365 account example2.com. We want to start ...
0
votes
0answers
18 views

ADFS not receiveing role information for some users

Our ADFS is no longer able to retrieve role information from Active Directory for some of our users. Two things happened around the time this issue started. The first was that the ADFS anchor claim ...
0
votes
1answer
13 views

Setup Active Directory to Ignore Login Attempts from all but a few Servers

We have a few critical service accounts at my company. Occasionally someone attempts to login to one of these who should not. (Not nefarious, just trying to get a job done the wrong way.) After a ...
0
votes
2answers
33 views

delete unnecessary settings from GPO

I want to delete some unnecessary settings from one GPO. I use windows server 2016, and i have unnecessary registry settings which i don't want to appear in my GPO. It is possible to perform this ...
0
votes
0answers
94 views

Active Directory: how to modify GPO link order?

I have an Active Directory domain. I want to modify GPOs link order. When I use gpmc.msc I don't have the arrows shown on the picture below. The corresponding margin is non existent. I'm logged in as ...
-1
votes
1answer
26 views

RDS login take long time for AD users [closed]

Windows server RDS login take a long time for AD users, but when I restart DC02, it's login faster. After one or two days, the slowness problem comes back again. What should I do?
0
votes
1answer
29 views

Dynamic DNS with Bind9 and BIND_DLZ cannot start?

I have a device running Samba as an Active Directory Domain Controller using BIND_DLZ as a backend. On top of that I am running a secondary device also configured as an Active Directory Domain ...
0
votes
0answers
49 views

Azure registration fails after successful authentication

When attempting an Azure registration, authentication succeeds as shown in the sign-in logs: However, after successful authentication the message "Just a moment" spins for a long while, and then "...
1
vote
1answer
22 views

Group Policy to deploy a file to a computer (yeah, that again…)

Environment: all Windows 10 stations, AD on Windows Server 2012 R2. I am aware of File Extensions GPP. But in this particular network I am not being able to deploy a simple file to the computers (I'm ...
0
votes
0answers
12 views

Domain users login to domain member computers take time [closed]

So, the entire environment is in AWS. I have 2 VPC's A and B - A has AD in it, and B has multiple domain joined servers. The domain joining and other AD connections work across VPC peering. I can ...
1
vote
1answer
33 views

AD group policy update throwing error

So, the entire environment is in AWS. I have 2 VPC's A and B - A has AD in it, and B has multiple domain joined servers. The domain joining and other AD connections work across VPC peering. I can ...
1
vote
0answers
37 views

Why can I not connect to VPN? Domain Joined and mentions “device compliance”

I have the wonderful challenge of setting up our Unifi USG to accept connections from individual domain-joined laptops. I got the supported L2TP server working (as I have used this already for months ...
-1
votes
1answer
18 views

Slow domain user logon after promotion of ADC to DC

I had DC and ADC server of Windows 2016 R2 in a domain environment. The DC crashed and I promoted ADC to DC and shifted all five FSMO roles to new DC. After the crashed DC was removed from the ...
0
votes
1answer
44 views

Active Directory vs Active Directory Trust

We have 2 forests/domains : ad.local (not managed by us) and ad2.local (managed by us) We setup a two way trust between them. Now let's say I have an app on a server joined to ad2.local : app.ad2....
0
votes
0answers
19 views

AWS Windows EC2 unable to join to AWS Managed AD using SSM

I have a windows server that sits in a VPC with no internet access. But it has VPC endpoints to SSM,ec2messages,ssmmessages and ec2 api. When I try to join this to a domain by using the ssm api, ...
1
vote
1answer
15 views

can't find DFS with other user in RDP session

I connect with RDP to Windows 10 with a user than not have privileges over te DFS. For this reason, Windows request other credentials. I put the credentials of a user with privileges but Windows don't ...
0
votes
0answers
26 views

Multiple ACEs (Same group name) in ACL have different SIDs, Why?

so I came across this today and was wondering why this occurs. DOM\Group1 S-1-5-21-19228943-1347772516-176895030-41916 DOM\Group1 S-1-5-21-693241485-1621911664-1232828436-6437 DOM\Group1 S-1-5-21-...
0
votes
1answer
19 views

AD query - get bitlocker active computers

I have query in Active Directory which should return all computers with bitlocker not active based on this script: https://community.spiceworks.com/topic/1083065-bitlocker-status-on-all-computers ...
0
votes
1answer
14 views

AD Query for non expiring password but filter only active users

I need to do query which filters users with non expiring password setup. I have something like this: (&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=65536))...
0
votes
0answers
46 views

The imported certificate does not match the chosen ca type and will not be used

I am migrating from Windows Server 2012 to Windows Server 2019. This is a subordinate CA and I encounter the following error when trying to import the certificate. The imported certificate does not ...
0
votes
1answer
24 views

Active Directory: How to delegate OU creation without allowing taking Full Control?

I am trying to delegate permission for users to create an OU in active directory, strictly as an option to organize and sort objects under the delegated OU. However, once I give the permission, the ...
0
votes
1answer
40 views

Active Directory Azure - Password WriteBack

I have a small and maybe silly question in regards to Azure AD, when the password is changed in Azure using for example SSPR, how long does it takes to writeBack the password to AD, considering that ...
0
votes
1answer
21 views

Unable to log into main Administrator account in Windows Server 2012 R2 after removing AD DS

I'm kinda stumped about how this happened. As you guessed, I removed the AD DS role (involved demoting the Server from Domain Controller), but now when I log into the Administrator account, it doesn't ...
0
votes
1answer
726 views

Azure Windows VM restore to new copy from backup when PC joined to domain

I have a VM that is running in Azure, and joined to our domain (also in Azure). I need to restore a copy of this VM to a new machine, however because the computer is joined to domain I have issues ...
2
votes
0answers
17 views

Why is a AD Domain controller object set to “unconstrained delegation”? Can this be altered?

As part of identifying accounts with "unconstrained Delegation" , it came to our notice that all domain controllers are configured that way. Can i change "unconstrained delegation" setting on all ...
0
votes
0answers
18 views

Disable IPv6 on all tunnel interface

Microsoft recommends to disable ipv6 on all tunnel interface. To implement this settings i have to set value 1 or less in registry under this path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\...
1
vote
1answer
28 views

Active Directory Certificate Services autorenew

I have an LDAP application which needs to talk to Active Directory via LDAPS (LDAP over SSL). I installed Active Directory Certificate Services on a test Domain Controller (I know this is not best ...
0
votes
0answers
19 views

vmware SRM test recovery including domain controller

i need to have Domain services including DNS in an isolated network for use with SRM test recovery plans. I am fairly sure that i dont need to do anything specific to achieve this other than clone a ...
0
votes
1answer
24 views

Deny log on specific domain user to computer

Hi there I am having a bit of a simple task problems. We have pretty simple configured MS server 2012 in our school. The thing is we want to deny access few PCs from ONE user so our students can only ...

1
2 3 4 5
182