Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

0
votes
0answers
15 views

ADFS authentication with an app between SP and IDP

I have to set up an ADFS server for SSO in an existing architecture. I've already done it for some apps but I have to plan it for another. The application that requires SSO doesn't communicate ...
0
votes
1answer
32 views

Use AD to Control App Access

As of now, I'm looking at using RemoteApps to allow RDP oriented access to applications. I would like the applications presented to users to be based on the users Group membership. Right now, the ...
0
votes
0answers
14 views

Ubuntu samba restore idmap database

so i ran into a disaster and have to get the server up and running on monday morning :D my ubuntu server setup with samba / winbind and joined to active directory domain controller holds the shared ...
-1
votes
0answers
14 views

Delegate DNS A Record (internal and external domain is the Same)

I am the owner of an external domain, lets say "example.com". There is a little Website "www.example.com". Problem is that this is not a very professional hosting (for some other reasons) and so the ...
1
vote
0answers
11 views

can i create domain local groups in active directory with adcli

Is it possible to create domain local security groups in active directory with adcli? adcli create-group --domain-ou=$ou --domain=$ad_domain_lc --login-user=$join_user --description=\"$...
1
vote
2answers
43 views

Migrating application servers to new domain

I work in a corporate environment which has recently been merged with another like business. There is an ongoing project to take our legacy Windows Servers and migrate them to an entirely new Windows ...
0
votes
0answers
9 views

Using SID+ACL with NFS and Winbind (NOT SSSD) from a Linux file server

I've inherited a domain using a Samba 4 active directory on Ubuntu 14.04 and having a heterogeneous client environment of Windows/Ubuntu 18 clients. I have tried setting up clients using sssd, ...
0
votes
2answers
29 views

Error promoting secondary Windows server 2016 DNS with a Primary Windows Server 2003

I have an OLD Intel server socket 478 DDR running Windows Server 2003 EE SP2 as Primary DC and DNS. In order to migrate to server 2016 and discard this old hardware and server version I did: 1- ...
0
votes
0answers
16 views

RADIUS Server won't authenticate user with MAC in “Verify Caller ID”

I have a domain Controller with RADIUS server installed in. The problem I face is, Users can be authenticated if their "Dial-In" Verify Caller-ID is disabled but as soon it is provided with MAC ...
1
vote
1answer
37 views

Startup Powershell script in GPO not executing - Windows Server 2016

I'm trying to get a simple Powershell script to run as a GPO Startup script on my school's workstations. So far I've not had much luck. The script started life as a more involved set of commands ...
0
votes
0answers
16 views

Convert Samba Active Directory to sssd instead of winbind

I've inherited a Samba 4 Active Directory (AD) server. It works fine with winbind, however for security reasons we'd like to change to sssd. The domain has two domain controllers (primary and ...
0
votes
0answers
11 views

basic authentication over domaintrust

my testlab has the following topology: Webserver -> AD1 <- AD2 ^ | PC While AD[1,2] are active directories based on windows ...
0
votes
0answers
50 views

How to check if an Active Directory server is reachable from an Ubuntu/Apache/PHP web server?

How can I check if my Windows Azure webserver which has Ubuntu/Apache/PHP is inside a windows active directory ? I have php-ldap and openssl php extensions enabled, but I still can't login using ldap....
0
votes
0answers
26 views

Azure work account blocked when created home account with same email address

The initial situation was where I had an Azure Portal account and I still have this account (name: tojas-work, email: tojas@something.com). This account appears as a Work/School account on Azure. This ...
0
votes
0answers
12 views

Permissions for Entire Directory in dsquery

For experimentation purposes, on my test directory, I have denied Read permissions for my AD DS domain (root domain in the forest) to the Domain Users group, preventing users from querying for domain ...
0
votes
0answers
21 views

AD Share Drives Read Only

I recently re organized my users into new OUs. Now the share drives will not let security groups save, and all files open in read only. All security groups have modify permissions to the share and ...
0
votes
3answers
77 views

how to update Group policy for the whole domain?

I recently found the Group policy of our domain (windows server 2012) is not updated enough to support our Win10 end-user machine. which are the correct ways to update the Group policy definition ...
0
votes
0answers
16 views

How to join SUSE Linux to Active Directory Behind NAT

We have few servers from where we cannot access domain controller directly. So, we have one NAT (IPTABLE Linux) Server, through which we are able to interact with domain controller Domain Controller ...
0
votes
1answer
34 views

Establishing security trust between two domains without VPN

We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
0
votes
1answer
38 views

Lost in the upload bandwidth in Windows Server 2016

I have problems with the performance of my network connector, the upload speed exceeds the bandwidth. I look at the resource monitor and I realize that the Lsass.exe process with PID 844 is the cause ...
0
votes
0answers
26 views

Active Directory Trusted Relation

If we have a trusted relationship between two domains, an administrator user of the domains (1) have the administration privileges in the other domain (2)? Or this only occurs if someone in the ...
1
vote
0answers
11 views

Can different accounts start Business Objects / Crystal Reports Server 2008 report instances?

I've been tasked with finding domain accounts that need to be removed when the domain goes away. One of the servers I need to check out is a Crystal Reports Server 2008 R2. I was wondering if ...
1
vote
0answers
13 views

Storing and passing credentials to a remote system securely for service install during software deployment with COTS

Some background: There is an array of Windows Server PCs being managed with Manage Engine Desktop Central There are software installers and scripts that require account credentials to install some ...
2
votes
0answers
23 views

Universal Groups not working across domain trusts

I have a problem with Universal groups across a trust - membership of the universal group gives rights from one domain in a forest but not from another domain in the same forest - I've set up a test ...
0
votes
0answers
23 views

Best practice for adding additional fields to AD Schema?

We have a few services that are connected to our domain through SAML and some other sync tools. We are looking at adding custom fields to the AD Schema to hold the data for these services (fields for ...
4
votes
1answer
55 views

Moving domain controller to private AWS subnet. It'll have a new IP address. How will member servers find it?

I have five AWS servers on a public subnet of a single VPC, each with its own elastic IP address. The subnet is 10.0.0.0/24. One server is a Win2016 domain controller. The remaining four are Win2016 ...
-1
votes
1answer
41 views

How to set Starting program section and Remote control section by powershell for AD user

I have used the "New-ADUser" command to create a batch of new user. However, I need to set the "Program file name" in "Starting program" to "c:\windows\system32\logoff.exe" and "Start in" to "c:\...
0
votes
1answer
39 views

Unable to select fields on Get-ADGroupMember query

I am trying to grab a list of users and their descriptions/departments, who are in a certain AD Security Group using the following command: Get-ADGroupMember -Identity "SecurityGroup" | select ...
0
votes
1answer
37 views

User/Group Auto Add when joining Domain

I've been in the process of joining our ESXi hosts to the AD domain and have noticed that the group "ESX_Admin" is automatically being added to Permissions on the ESXi hosts. I have found the ...
1
vote
0answers
17 views

Nesting gMSA in security group for use in ACLs

I'm trying to solve a conundrum for my DBAs and developers. We have an application that is running under a gMSA (group managed service account) identity. This application needs to access a SQL ...
0
votes
1answer
12 views

remove DNS A record from internal samba PDC DNS with samba-tool

I would like to remove one interface (eno0s3, 10.10.37.166) from samba PDC (samba 4.10) I added to my smb.conf: bind interfaces only = yes interfaces = lo enp0s8 enp0s8 is 10.21.0.2. This ...
1
vote
0answers
41 views

hide domain user on windows logon screen

At the moment, I'm preventing our admin account from showing on the logon screen using this registry. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\...
0
votes
0answers
38 views

AWS Managed Microsoft AD LDAP

I have AWS managed MS AD standup and running. Created a jump node and joined the domain. I was able to execute ldp.exe and establish connection to one of my AD controller whose address is like (port ...
-1
votes
1answer
49 views

Install a .reg file via GPO

I have downloaded a .reg file with some registry keys I'd like to apply on a Windows machine. Since the same key need to be applied, I'd like to do it directly with GPO policies. I found several ...
0
votes
0answers
14 views

Single User Domain Profile Can't Access Network Shares - Can't Recreate Profile

Server 2016 - PCs Win10 TL;DR; User can Login, but not access shares with out entering Admin/Other user Creds. Changed the Password to her User Profile, didn't change the outcome. Renamed her ...
0
votes
1answer
93 views

aad authentication for azure file share

I have on-premise AD and it syncs with Azure AD. I have setup ADDS on the Azure for AAD authentication for Azure files. I have setup the storage account and enabled the Azure Active Directory ...
0
votes
0answers
14 views

Samba Active Directory fail over doesn't work when LV cloned with DRBD (But works with manual `dd`)

I have a XEN-4.4 server, running an Ubuntu 14 client with Samba 4.3.11-Ubuntu active directory. I manage it using a Windows 10 client running Active Directory User and Computers. I have a backup ...
0
votes
1answer
12 views

Does raising domain functional level DFL have any impact on application using AD DS?

Does raising domain functional level DFL have any impact on application using AD DS? Current DFL is Windows 2003 and we are planning to raise it to Windows 2008. Does this have any impact on sites ...
0
votes
1answer
16 views

Empty Lastlogon and lastlogontimestamp

Even though a user connects via VPN and creates 4776, 4648, 4624 and 4634 event ID's on domain controller, in active directory users attributes lastlogon and lastlogontimestamp still remains null or ...
1
vote
1answer
33 views

Change Windows Activation Key as part of OBE (*before* setup is done)

Is there a way to change the activation key in Windows before you start the out of box experience (setup) on machines w/windows pre-installed? For example, say you purchase a laptop with Home ...
0
votes
0answers
31 views

Trouble Promoting Windows Server 2019 to Domain Controller

I am trying to add an additional domain controller using Windows 2019 Standard in a Windows 2012 R2 environment. As far as I can tell, this is supported by Microsoft. When trying to promote the new ...
0
votes
0answers
15 views

Can't connect to Linux machine from domain-based computers

I have a small office network (VMs on XEN hypervisor): Domain Controller, Windows Server, Centos 7 server - joined the domain (say, C1); and another Centos 7 server not on the domain (say, C2). Also, ...
0
votes
0answers
23 views

Azure - DFS replication

We've implemented a DC in the azure platform running windows 2016 connected to On-Prem using a site to site VPN connection. We've confirgured the DC to replicate a DFS share between this server and ...
2
votes
2answers
37 views

DNS doesn't seem to work for Domain Controller

I took over this small windows network from another admin who is no longer involved. It's a simple setup, one bare metal server with Windows 2016 as a DC and fileserver, all in one. With less than 10 ...
-1
votes
1answer
24 views

Linux machine is getting disconnected from windows domain controller frequently [on hold]

My Linux server is getting disconnected from windows DC for every 30 days. Not sure where I need to check either AD or Linux sever config files
0
votes
0answers
23 views

Administer user access to Windows based Server using Active Directory?

How do I configure Active Directory such that I can define which users can access a particular server? I know that I can configure properties of the users from Domain Controller: Active Directory ...
0
votes
0answers
16 views

Windows Server 2016 can not register server in active directory

I use windows server 2016 to create Active Directory(AD) server and Network Policy Service (NPS) server. I add certificate from AD server to NPS server. After that, I try to register NPS server to AD ...
1
vote
0answers
65 views

Windows Server 2016 “Failed to register the service principal name”

I have a Windows Server 2016 virtual host which is hosting a virtual domain controller, and a few additional servers. When the physical host needs to reboot for scheduled patching, upon startup the ...
0
votes
2answers
105 views

Re-sharing a Windows 2012r2 share as read-only

Looking for a Windows based solution. Background: A standalone WS 2012R2 located on NETWORK A is sharing a folder with R/W access through a local user. A segregated NETWORK B contains user PCs, some ...
1
vote
1answer
32 views

FreeRADIUS can not login with Active Directory user

I install freeradius 3 in debian 9. I can login with user from text file in radius but I want to login with user from Active Directory. First, I install this library. apt install samba winbind krb5-...