Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

1
vote
0answers
22 views

Managing cached windows 10 domain credentials for remote users

I support a network with several remote locations where the users can only connect in via VPN (Windows 10 built-in SSTP). Is there any way to manage / update what domain user credentials are cached on ...
0
votes
0answers
19 views

How to set up System Security Services Daemon(SSSD) to authenticate users against Azure Active Directory

I have set Azure Active Directory(AD) up and running along with Azure AD Domain Services in which a single domain with secure LDAP is configured. On a Linux server, I have tested whether it can ...
0
votes
0answers
22 views

2 Domains with different subnetworks in one Active Directory Server ( Windows 2012 R2 ) [on hold]

the situation is as follows, I need one server to manage two domains in different sub-networks each with own users and stuff, the problem is that I have no idea how to do it on one server. The server ...
-1
votes
0answers
21 views

Is using domain controllers on server networks a good practice? [on hold]

I am planning the authentication of the servers in a data center. I'm thinking of using samba as a domain controller. At first, the samba will facilitate the management. However, I have seen an ...
0
votes
1answer
22 views

Some users seeing unformatted emails with winmail.dat files while others aren't

We have a hosted BitBucket instance that is sending emails via SMTP through Exchange 365 to external users. Some of those users are seeing the properly formatted emails when looking at them in Gmail. ...
0
votes
1answer
16 views

AAD Connect and Domain Admin accounts - is it safe to sync them?

I've just installed Active Directory and want to sync the users with already existing Azure AD we have. From technical point of view it looks pretty easy. I've created domain ad.company.com and added ...
-1
votes
0answers
44 views

Field to add employee ID in Azure AD/Office365

Couple of weeks back we moved from GApps to office 365. I noticed that Azure AD does not have field to enter the Employee ID. Can anyone advise is there anyway to get it. We do not use AD Sync and we ...
0
votes
1answer
25 views

Odd AD workstation access issue

After working with Windows Server since NT 3.51, this was kind of a first for me. Here's the scenario: After no issues accessing a Windows Server 2012 R2 network share for 2 years, a Win 7 Pro ...
0
votes
0answers
18 views

Change WMI Security Descriptor programatically not working

I'm trying to change the Wmi Security Descriptor of a about 100 hundred Computers with Windows 10 Pro/DC 2012 R2. I found that the following approach can be used in my case : msdn Executing the steps ...
0
votes
1answer
18 views

What are the rules regarding casing of values for environment variable USERNAME in Windows?

One of my customers says that in his AD usernames have mixed case sometimes and besides that, that people are able to successfully login using another casing of usernames. So there might be an ...
1
vote
0answers
9 views

FSP influence over kerberos token size

We have a 2 way trust between our 2 forest. There are some users from forest A that are in group in forest B - they are listed by sid in foreign security principals OU. I checked membership of one of ...
1
vote
1answer
19 views

Syncronize Exchange Online account with local exchange

We have an Exchange Online server and the suggesting hybrid environment to synchronize our AD structure with the O365 accounts - so far, so good. When I´m creating a new user, I´ll do it on the local ...
0
votes
0answers
18 views

Squid as transparent proxy to tunnel all connections under Windows

There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy. The problem is that you ...
0
votes
0answers
28 views

Restrict user login to Linux via group membership querying Active Directory

I need to restrict access to linux servers according to AD group membership. I already have Centos 7 servers joined to AD realm using sssd and have already configured sssd.conf in order to use ...
0
votes
0answers
10 views

Exchange 2010 “Resource In-Policy Request” not working for user

We have a user who was rehired who needs to be able to request time off using a calendar we set up. This user is set up with the same AD Groups/ permissions as other users and is added to the resource ...
-1
votes
0answers
15 views

Unable to edit audit policies on domain level

I have set up audit policy on the domain level, enabled success and failure options, on the directory service access, but no logs are being generated. However, if I set it up on the domain controller ...
0
votes
1answer
22 views

How to notify mail group owners when a new member added to mail group?

Is there a way to inform mail group owners when a new user added to their business unit's mail group? For example in Active Directory there is an Finance distribution list owned by CFO's assistant. I'...
0
votes
0answers
20 views

How ntds.dit domain partition is replicated in Win 2003 server if FRS can replicate only Sysvol folder?

How ntds.dit domain partition is replicated in Win 2003 server if FRS can replicate only Sysvol folder? What replication service takes care of that? Not asking about the protocol (I believe it's RPC/...
1
vote
1answer
61 views

Cross-Realm-Trust between Active Directory and MIT Kerberos

I am currently in the process of extending my development environment, which used to only run Linux servers so far, by adding machines running Windows Server 2016. The authentication process is ...
0
votes
0answers
14 views

java ldap query across domain

My active directory have structur as below: AD server URL = ldap://ldap.abc.com:389 having domain controller as below: dc=xyz,dc=abc,dc=com dc=pqr,dc=abc,dc=com Now, dc=xyz,dc=abc,dc=com has a group ...
0
votes
0answers
15 views

getent passwd dosen't show users of LDAP server but getent shadow works

This is an Ubuntu with LDAP + NSCD installed and validating against an AD server. I can run ldapsearch without any problem and getent shadow shows all the ldap users but getent passwd and getent ...
-3
votes
1answer
48 views

Active Directory - Nearly all DNS zones and entries are not created

This problem seems exactly the same as question 73875 albeit for a different version of windows and I've tried the accepted answer to no avail, it seems that in my case the problem is not transient ...
0
votes
1answer
22 views

SSSD AD Integration - Clarification on Computer to join AD

Objective Clarify Computer, Not User, when integrating a Linux box with a Windows Domain. Background Having confusion because most SSSD AD information focuses on User Authentication, however ...
0
votes
2answers
39 views

How to get Windows Core Server back on domain?

I've got a Windows Core Server which was shut off for awhile. Unfortunately it appears to have lost the domain connection while off. Normally on a GUI Server or Workstation it's not a big deal, I ...
3
votes
1answer
42 views

All DCs fail VerifyEnterpriseReferences and DNS RReg Test - Everything else works including replication to a brand new DC

So, we recently added a new DC to our domain (Win 2008 R2 Enterprise) with the idea to replace our Win 2008 R2 Standard DC with a second Enterprise one - which will give us the 2 DCs on 2008 R2 ...
0
votes
1answer
24 views

Leveraging Local AD Groups with Azure AD Connect for Sharepoint in Office 365

We have an on-premise Active Directory that is using Azure Active Directory Connect to synchronize User and Group objects to Azure AD/Office 365. Our organization is interested in beginning to use ...
0
votes
1answer
20 views

When running ldifde, I'm missing the objectSid values. How do I get those to be returned?

I'm able to generate an LDIF export of my active directory like this ldifde -f test-data.ldif ldifde -f test-data2.ldif -d "CN=Configuration,DC=domain,DC=com" I then combine these two files together ...
-2
votes
1answer
41 views

Locked out of Active directory After Joining Domain Through VPN

Usually , if I join a domain locally in the office , then it will cache credentials and allow a remote user to log into their machine when away from the local doman. I have joined a domain through ...
0
votes
0answers
17 views

ADFS 3.0 Force SSO Token Expiration URL

I am creating an in-house web application for IT Admins that must be authenticated via Active Directory. I need to be able to support cases where the user is not logged into a workstation as ...
2
votes
2answers
98 views

How to Get IP Addresses of User In Active Directory Domain

I am trying to find IP address(es) of active directory user. If a user is logged in into multiple computers then I need to find all IP address(es) of those machines. I have tried to get the computer ...
0
votes
0answers
70 views

Mapping Network Drive w/Credentials using Logon Script - Asks for Password

G'day - due to some changes in our network architecture, I've been having issues mapping our users to a network drive/folder located outside of our AD Domain - eg, it is still within our network but ...
-2
votes
1answer
33 views

Change reset password window [closed]

How can I change the Reset Password window in login side to different window? If someone will click to Reset Password then my window would appear where users can change their password after they ...
-1
votes
1answer
52 views

Is a windows user really needed for IIS client certificate authorization, if so how to set this user's privileges?

I had originally posted this question in securitystackexchange, but I didn't get the answer I was expecting, and I see the topic can also fit here. I need to connect two servers in different ...
0
votes
0answers
28 views

Enroll OS X 10.13 in FreeIPA

I'm trying to enroll a Macbook in FreeIPA on my home network. I went to System Preferences > Users & Groups > Join Network Account Server and entered freeipa.example.com. It succeeded in ...
0
votes
0answers
24 views

What does the AD FS setting CertificateThresholdMultiplier really mean?

In trying to pinpoint problems for a certain user and AD FS setup, I'd like to speed up the certificate auto-rollover process. It appears that CertificateThresholdMultiplier would be ideal for this ...
1
vote
2answers
40 views

Attempting to reconfigured DC that was tombstoned and is offline - 'Delete Domain' in dcpromo?

We have a DC (BDC2) that a former SysAdmin was trying to set up so we could decommission an older DC. This DC was mostly set up, and then abandoned (IE, it was sitting shelved on a VM that was turned ...
-1
votes
0answers
16 views

Logs of the active directory domain services configuration wizard

Is the "active directory domain services configuration wizard" producing any logs? If so, what is the path to their location? I have run the prerequisites check a number of times, and I'd like to ...
1
vote
0answers
18 views

Google Chrome GPO/GPM (ADMX) allow themes only + whitelisted extensions installation

In Windows domain (AD -> GPM), I've been playing around with Google Chrome ADMX to achieve both the following: users can install any template (visual, look) users cannot install any extension except ...
1
vote
1answer
58 views

Different dns on sites of the same windows domain

We have a windows 2012 domain with 2 different sites connected via vpn. Site 1 has a dc with dns, Site 2 has two dc with dns Most dns zones are integrated into AD, so a change is reflected on all 3 ...
1
vote
1answer
61 views

Should I manage SRV records for my Windows Server DC manually?

I have Microsoft AD Domain with multiple geographical sites. All sites are interconnected by VPN. All sites have 2 Domain Controllers running Windows Server 2012 R2. I was reviewing the automated ...
1
vote
1answer
41 views

Authentication with SSSD

I'm currently working on a project in my internship at an organisation, and it is honestly a bit of challenge, so I hope you guys can help me out. Background: The organisation I'm working in has a ...
0
votes
0answers
14 views

Industrial PC and Active Directory

We have some industrial pc with windows xp and windows 7 that are in production line. This pc use only one application and that connect with a central server (MSSQL) and on a windows storage (NAS). ...
1
vote
1answer
16 views

Windows - Run As Different User (on different domain) - Error: “Domain isn't available”

Goal I have a Windows 10 PC. I want to run an application in the security context of a user on a different Windows domain from the one that my PC is connected to. Details My PC is connected to ...
0
votes
1answer
38 views

Restricting Child Domain Admins from installing software

I recently installed SCCM 1606 in my environment that contains a main forest/domain and has child domains. I got it all working, but what i'm looking for is restricting domain admins and users for all ...
0
votes
0answers
15 views

Share NIS login using Active Directory

I have a multi-node cluster setup with a master node configured with a NIS server to share authentication which is joined to my Active Directory domain. The nodes of the cluster itself are on their ...
0
votes
1answer
38 views

Sync local offline domain and Azure

our organization uses an old domain name for the intranet (let's call it corp.com), which differs from the website and email domain (let's call that company.com). Please note that corp.com is NOT ...
0
votes
1answer
49 views

IIS: Change Default Domain Controller For Windows Authentication

Please bear with me, I am a software developer and know little of Active Directory and Windows Server domains. I am running a .NET MVC intranet application on IIS (Windows Server 2016 Standard) that ...
0
votes
1answer
39 views

Global catalog server and primary domain controller

I have a domain, and a child domain. The child domains domain controller is a Global Catalog server. I know i can use queries to access the partial attribute set inside the global catalog server, and ...
4
votes
1answer
1k views

Strange group in AWS Simple AD Directory named “GorillaBoyAdministrator”

I recently setup a Simple AD Directory using the AWS Directory Service. When I browse the Directory using Active Directory Users and Computers from a Windows 2016 instance, I noticed a group named "...
0
votes
1answer
30 views

Restrict domain admins from joining servers to domain.

I work for a large company that has acquired multiple additional sites over the last 5 years. We're fully integrated these sites into our corporate site. The problem I'm running into now is, most of ...