Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

3
votes
1answer
25 views

Powershell commands applicable to Exchange Online in O365 Hybrid Environment

I have been happily using Powershell to automate a lot of admin task in an Exchange 2010 On-premises environment. Recently, I found a new job which uses O365 in a hybrid environment. Just to ...
3
votes
0answers
40 views

Install Service Account remotely to lots of servers

We have a new process I'm trying to implement, part one of my task basically is change the local administrator password every month and update the password vault with the new password for the ...
0
votes
2answers
40 views

Set-ADUser attribute changes apply to wrong attribute

When running a script to update the addresses of users from a csv file. I found that when trying to apply the City value (listed as lower case L in the attribute editor) instead it would update the ...
0
votes
1answer
17 views

Redundant Azure federated services

During the recent outage of Azure, a company I am aware of lost it's federated services farm as the underlying VMs lost access to their storage. I've been asked to suggest ways of adding High ...
0
votes
2answers
188 views

How can I see in Windows Server 2012 AD what users were logged in to certain computers

Is it possible with Windows Server 2012 AD what users were logged in to certain computers? I would like to see list of all users that were using some computer. i.e. logged to certain computers ever or ...
7
votes
1answer
218 views

Managing Security Groups for NTFS Permissions

To start off with, I work for a company that a long time ago when they implemented file shares for each division, they also broke the cardinal rule of NTFS permissions and used explicit permissions ...
0
votes
0answers
29 views

Windows server 2012 R2 Redeploying application group policy

I have an Active Directory environment with almost 750 client, i have deployed application xyz-v1.msi through group policy now we have xyz-v2.msi which requires previous version to be uninstalled ...
0
votes
0answers
16 views

How to configure password synchronization between two Active Directory Domains with Microsoft Identity Manager PCNS?

I have two domains with a two-ways trust relationship (selective authentication). Microsoft Identity Manager is installed, configured and "Password Change Notification Service" is configured and ...
0
votes
0answers
66 views

Duplicate SPN for File Server Alias

I have two Samba4 AD domain members that serve a couple of replicated shares to users at two sites (same domain, different subnets). Bandwidth and latency don't allow for a clustered solution, so ...
0
votes
0answers
15 views

Access Runtime 2010 Disappeared from Domain Computers - Deleted GPO

My organization runs a domain with an Access front end based upon and SQL Express Database. 99% of our users are using the 2010 Runtime version of access. The installed DB literally disappeared from ...
2
votes
1answer
10 views

Unable to rename domain controller: Account already exists

I successfully demoted an old domain controller (Windows Server 2016) in a clean manner, cleanly removed the server from the domain, deleted the associated object in 'Computers' on Active Directory ...
1
vote
1answer
36 views

Renaming an account in AD makes it working in a hidden way

I'm using windows server 2016 with a single domain and a windows 10 client machine as a test lab. I've started clean and fresh so I decided to renamed my AD administrator account from (administrator) ...
0
votes
0answers
25 views

Windows Server in the DMZ Zone with users own passwords and special [closed]

Currently we have MS-Windows servers in standalone setup in DMZ. I would like to know of having to implement a separate AD in DMZ. Can we make it so that the users access and group policies applied ...
0
votes
1answer
57 views

How to enable NTLM authentication in windows 2016 server?

I have a windows 2016 server with active directory that is also domain controller and apparently NTLM authentication is disabled. How I can enable NTLM authentication?
0
votes
1answer
75 views

Cannot access local server via IP address but it can via its computer name

I have a server in my local network that is part of a Windows Server 2012 domain. I can access the server's shared folder via its name but I can't via its IP address.
1
vote
2answers
32 views

Renaming of domain in Active Directory with Certificate authority

i have domain, washington.example.com on Windows Server 2012 R2. For intergations with office 365, my organization, decided to rename domain name from washington.example.com to example.com. My ...
0
votes
0answers
24 views

AD Integration With LINUX (RHEL) using SSSD

I've integrated the AD with linux using sssd. And now i'm able to login to the linux machines using AD accounts. But, i've the following questions for which i'm unable to find the answers. Apart from ...
1
vote
1answer
53 views

Why task “promote this server to a domain controller” shows despite the server being already added to a domain?

In Windows Server 2019 / server manager, a warning shows: post-deployment configuration / configuration required for ADDS at server_name / promote this server to a domain controller I already ...
1
vote
1answer
34 views

Active Directory & Group Policy - Standard User Permissions

As I'm experimenting with a vanilla Active Directory domain, I notice that a standard user can go into Active Directory Users and Computers (dsa.msc) and Group Policy Management Console (gpmc.msc) and ...
0
votes
0answers
8 views

CentOS NAS mount stopped working

I have a NAS that uses Active Directory users as authentication and 2 VMs that mount a share on there on boot via /etc/fstab like so: //10.0.0.100/docs /mnt/cifs/apps cifs username=domainuser,...
0
votes
2answers
26 views

Exchange server in the cloud on a (test) private network

We are looking to setup a test e-mail environment in the cloud using Windows Servers (Active Directory servers and Exchange Servers) and some Windows Clients (Windows 10 computers with Outlook ...
0
votes
1answer
28 views

SSSD : id don't display groups name subdomain (Child trust)

In dev environnement, with SSSD 1.16.2 (release 13.el7_6.5) on RHEL 7.6 SSSD is configured to request on mch.dev domain. trusted subdomain sub.mch.dev exist (Win2k16) On mch.dev, I have an user '...
0
votes
1answer
36 views

Squid Proxy AD Authentication

I've done a lot of searching but i cannot seem to find a free solution. I need a web proxy to monitor the websites visited by each active directory user. I used NXFilter but HTTPS is not working for ...
2
votes
0answers
31 views

Stop Google forcing a password change on newly created accounts

I'm in the process of implementing Google's GSuite Password Synch on a Windows Server 2016 AD system. I've installed the Cloud Directory Sync software which successfully creates new users in GSuite ...
0
votes
0answers
21 views

Debian 9 Joined to Active Directory

I'm trying to configure a few Linux servers (Debian 9.5) to authenticate against our Active Directory server. I have the basics completed, following this video: https://www.youtube.com/watch?v=...
0
votes
1answer
15 views

How to fix Branch Office - Root Forest Domain with the same name as HQ's

We have two offices of similar size, with a single server at each. Currently users at office #2 manually VPN directly to Office #1 to access resources. I want to replace the individual VPNs with a ...
3
votes
3answers
84 views

Do we need to update Active Directory, When we upgrade windows 7 to windows 10

There are 500 Computers on my network We have planned to upgrade all Computers to windows 10. Currently we are using windows 7. Our Microsoft Partner suggest to upgrade our active directory OS to ...
0
votes
0answers
14 views

Real Time User Authentication Auditing

I am wondering if there are any tools that I can use to see what devices a user has authenticated with within X amount of time. What I'm wanting to know is if an account was compromised or if users ...
1
vote
2answers
54 views

Should I upgrade a Windows Server 2012 to be a Domain Controller to run console apps as admin at startup?

I would like to upgrade a single Windows Server 2012 instance to be a Domain Controller. The exact context is that I have some console apps that need to be run as administrator at startup. And from ...
1
vote
1answer
38 views

How to use member of trusted domain in GPO?

I have two test domains and one trusts another. On trusting domain GPO I need to add a group from trusted domain to remote desktop users group which will apply to all computer objects in trusting ...
0
votes
0answers
7 views

OpenLDAP: Translucent proxy with paging

So, I've managed to set-up openldap to proxy to my company AD, but, I want to additionally add some custom data! Luckily for me, OpenLDAP supports this use case and has the ability to create what's ...
0
votes
4answers
122 views

How to setup an alias for a server in Active Directory

I have configured a TFS server so that the IIS site binding is for tfs.oursite.com. Unfortunately, for now anyone who wants to access it would need to add tfs.oursite.com to their hosts file. How ...
-2
votes
2answers
34 views

AD domain name migration to a new AD domain

Just want to ask if there is a best way in migrating Active Directory Domain name. Also what is the best first to migrate is it users, workstations, groups or servers? Really need your help guys. ...
4
votes
3answers
530 views

How to know if a Active Directory user can log in interactively

I would like to know if and how is it possible to know if an AD user can log in interactively (on a server) in a Windows domain. I need to know if I can find it out using an LDAP search.
1
vote
0answers
13 views

OpenLDAP rewrite attribute values when proxying

I seem to struggle with the concept of rewrite using the RWM module. The examples don't really seem to tell me a lot BUT I don't claim to be an LDAP expert as well What I want to achieve is "simple", ...
0
votes
1answer
28 views

Windows can't connect to the Samba Linux AD Tests also returns problems with Admin and Krb5

I am trying to create a Linux Domain Controller on my virtualbox using Samba although it's working but can't reach servers? Detail Information: Software: VirtualBox Distro for Server: Debian9 ...
0
votes
1answer
55 views

Azure/Office 365 Migration from third party to AD Connect

We currently have Office 365 and our Azure Directory sync is managed by a a third party service who do not use AD Connect but their own API. Once we configure ADFS our end and setup AD Connect will ...
0
votes
1answer
38 views

Public DNS conflicts with Networks internal DNS [duplicate]

we are focussed on building websites/webservices for quite a few years now and right now in discussions with the company which manages a companies network. I just can't believe what they are telling ...
1
vote
0answers
60 views

Active Directory Authentication Through a Trust and Querying For Users From Trusted Domain

Domain A (Forest Tree Root) (Primary Domain) Domain B (Direct Outbound) (Direct Inbound) There is a two way trust between the two Forests Domain A/B. This scenario is used to connect two companies ...
3
votes
1answer
45 views

Cannot connect to Remote Desktop with Windows Hello PIN

When I try to connect to an intranet machine, it only works if I specify domain credentials. When I use Windows Hello pin, it fails with this message: An authentication error has occurred (Code: ...
0
votes
1answer
18 views

VPN user account looked again and again

i have issue in my Active Directory involvement there is issue with VPN user user use network drive for document sharing in my Org i reset user password many time but account looked after 5-15 ...
0
votes
1answer
12 views

Do I need “Denied RODC Password Replication” on Master domain controller using Samba Active directory

We are using Samba Active Directory 2:4.7.6 on Ubuntu 14.04.5 LT We have only one domain controller, and it is not remote (it is inside the controlled, non-WAN-accessed subnet). However, as is the ...
0
votes
1answer
36 views

How to configure the DNS in AD to return local addresses for some names in a domain and use the external DNS for other names?

I am relatively new to Active Directory. In the LAN, we need to return some local addresses for some names but for some other names, we just want to get the IP as-is from the external DNS. Example:...
1
vote
1answer
33 views

Kerberos shared secret key creation

There are 3 things that I don't fully understand about kerberos. Let's say that we are adding new server to an AD Domain. KDC creates a shared secret for this server and how is this key send securly ...
4
votes
0answers
31 views

Moved AD Connect to a new server and now end-users are getting errors when replying to internal emails in Outlook

I moved my Microsoft AD Connect install from one server to another today. I installed AD Connect on the new server in staging mode, turned on staging mode on the old server, turned it off on the new ...
2
votes
1answer
66 views

MS Exchange 2013 Unified Messaging issue, or really an AD issue?

Where to begin... I'd like to first admit that I am not an seasoned Exchange tech. Second here is the environment: (2) 2008 R2 DCs and (1) 2012 R2 MS Exchange 2013 server - other Exchange servers were ...
2
votes
0answers
35 views

Windows domain username formats? NETBDOMAIN\USERNAME and DNSDOMAIN.COM\Username?

I'm running into issues with authentication and mapped network drives across a VPN tunnel. Namely error messages related to not being able to find a domain controller. I suspect this is somehow ...
1
vote
0answers
35 views

OpenLDAP Proxy to AD - userPrincipalName as BindDN

I've setup OpenLDAP as AD proxy according to: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
0
votes
1answer
52 views

OpenLDAP userPrincipalName as BindDN

I've setup OpenLDAP as AD proxy according to: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
0
votes
0answers
13 views

Using a Windows Authentication protocol on a remote site without local domain services

The scenario is domain-A is a Windows domain with hybrid AD services, including on prem AD, ADFS and Azure AD with the possibility of adding Azure AD domain services. Domain-B has no Windows domain ...