Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
-1
votes
0answers
17 views

Windows AD OU Block (Read/List) Objects from other OU

I have a Root OU that has an OU called "Clients" and under I have multiple OU's and the client's PC's/User Accounts in sub-OU's. The issue is, my clients can see other groups' user accounts/...
-1
votes
0answers
28 views

Non-Admin - how to change DNS & Default Gateway

I have a small company where I'm hosting Windows VM servers from an ESXI host. And a PDC where I had set up Active Directory etc. Everything was good, but randomly the user's DNS changed to 8.8.8.8 ...
1
vote
1answer
19 views

How to remove AdmPwd Permission from BUILTIN\Users (MS LAPS)

I've deployed MS LAPS to manage local admin passwords and all is working fine, except that non-privileged users are able to access the local admin password, in both Powershell and LAPS UI. Running the ...
0
votes
0answers
37 views

How easily and quickly access workstations that are two or three servers away from mine

I work for a small IT firm whose main client has dozens of Windows Servers (2012 R2) catering to thousands of workstations in several dozen cities. We routinely and remotely assist end-users, and to ...
0
votes
0answers
23 views

Moving existing local profile to an AD roaming profile

Looking into moving existing local profile (Windows 8.1) to an AD roaming profile (WS 2019). The goal is: One user has 2 machines at once. One is win8.1 (existing one), another is win10 (fresh). ...
0
votes
0answers
9 views

Wrong printer names when pushed by AD to clients

I have a Windows Server 2019 configured to be AD, some Windows 10 clients and the server pushes multiple printers using GPO/GPP to the clients. This in itself seems to work, but there's a problem with ...
1
vote
1answer
25 views

Adding domain user to local group when access to active directory no longer exists

We used to have a domain (foo) but the domain controller machine has been dead for a long time. I am logged into my Windows 10 workstation as foo\mike and would like to add foo\mike to a local group ...
-2
votes
0answers
17 views

Point a Server Using Domain From Windows Server 2016

we have a server machine with Debian 9 installed. It has an internal knowledge base website which the domain is kb.domain.com with the local IP of 192.168.1.95. Currently we have a new installed ...
0
votes
0answers
14 views

Kerberos status says masked for the kdc server

Failed to restart krb5-admin-server.service: Unit krb5-admin-server.service is masked.``` ```sudo systemctl status krb5-kdc.service ● krb5-kdc.service Loaded: masked (Reason: Unit krb5-kdc....
-2
votes
0answers
10 views

Hyper-V Server deployment system requirements. AD, Fileserver, SQL Server [duplicate]

We are looking to deploy a new system to meet new conformance requirements. Instead of setting up 6 different servers I decided it would probably be better to setup 2 Hyper-V servers with 3 VMs each ...
-3
votes
0answers
21 views

Bitlocker on 2 AD

I have BitLocker activated on users PCs and I can see BitLocker section with recovery key on PC's Properties on primary AD but on secondary AD there is not that section.
-1
votes
1answer
29 views

Update exchanges user's alias without changing others field

If I update my exchanges user's alias under the general tab in my exchange admin center. I found out it will automatically updated the email address as well under the general tab and the SMTP address ...
2
votes
1answer
17 views

Upon running repadmin /replsummary more than 15 servers are showing “8606” error

We are having an issue with Error ID "8606" ( Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected)...
0
votes
0answers
10 views

Authenticate users from domain A to domain B (non trusted) with NPS / Radius

Simple question please. I have an domain A with users/computers working. I have an domain B with only one file server and a DC for this domain behind an firewall appliance. Domain are not trusted and ...
0
votes
1answer
27 views

GPO desktop wallpaper “sometimes” black

I've setup client desktop background via GPO Administrative Template, in user configuration. It works fine but sometimes users randomly reports they get a black wallpaper instead of the designated one....
0
votes
0answers
18 views

Get list of AD groups a user is a primary owner of

i would like to get list of AD groups a user is a primary owner of. i have gone through this question already. But its not giving me the attribute/property whether the user is a primary owner of ...
0
votes
1answer
16 views

Connect Server Manager to a new independent domain controller

I'm currently testing a new domain controller on Server 2019 Core. Bit late to this but it's my first time actually trying to achieve anything on Core so every single step is a hurdle. Just setting ...
0
votes
0answers
23 views

Using openldap to connect to Active Directory SSL by trusting primary domain controller's CA cert

A lot has been written on this subject, but not quite my problem. The problem is that whatever I do, I can't get openldap tools (or PHP, which uses openldap), to accept a certificate signed by the ...
1
vote
0answers
19 views

Active Directory OU Access Control Entry ACE Issue .Net PowerShell and dsa.msc Discrepancy

I’m attempting to automate delegated permissions of an Active Directory (AD) Organizational Unit (OU) using Access Control Entries (ACE). However, I don’t fully understand Active Directory schema and ...
1
vote
0answers
27 views

Grant database access through GPO

I have a domain in which I have couple servers with dedicated SQL Server databases. I also have couple external companies that need access to this servers and databases on different permission level (...
2
votes
0answers
34 views

Why is programmatically joining to Windows domain failing?

We are facing an issue for a particular customer where programmatically joining a machine to a domain is failing. The machine is cloned from a parent VM and attempted to be joined to the domain using ...
-1
votes
0answers
28 views

Check permissions assigned to “Domain Users” BUILTIN group

I can see in the Internet that Domain Users can perform the same actions as Users Users can perform tasks such as running applications, using local and network printers, shutting down the computer, ...
-3
votes
0answers
10 views

Another AAD Domain Service instance already exists for this tenant [closed]

I can cerate new AAD Domain Service, I was deleted all old record, also have his error massage: Another AAD Domain Service instance already exists for this tenant
0
votes
1answer
55 views

Trying to programmatically create new Windows user's profile

Trying the low-impact solution as mentioned in the post: how can I programmatically cause a new windows users profile to be created Suggestion was to run a command as that user using psexec.exe for ...
0
votes
1answer
52 views

Drive Mapping through GPO on few Servers

I have a requirement to fulfill related to Drive mapping through GPO. We have a domain (let's call it contoso.com). Under contoso, we have an OU "InfraComputers" where there are 1000s of ...
0
votes
0answers
368 views

SSSD - Server does not see subdomains

Good morning, I have four servers in the same subnet, all running RHEL 7 and using SSSD to authenticate against an Active Directory domain controller. With one (and only one) of them I have an issue ...
0
votes
1answer
35 views

Restrict access to PC via ADUC tool

I have almost zero experience with Active Directory, so my questions may sound silly and obvious for more experienced people. Anyhow, I have been assigned with the partial admin right to manage our ...
0
votes
1answer
42 views

RDP and GPO setting Server Authentication certificate template (Microsoft Windows Server 2016)

We want to force Remote Desktop to use a certificate based on a particular named template rather than using a self-signed certificate. This works in forests with a Certificate Authority server, but ...
0
votes
2answers
57 views

Automatically add AD users to local Administratores Group

I am trying to setup an AD domain and I have certain users that need some "power" privileges for installing software on their own machine (and on their own machine only). I am thinking about ...
1
vote
1answer
22 views

DNS Scavenging on Enterprise Environment

About DNS Scavenging in Microsoft Active Directory internal DNS server, why does by default it is not enabled? how do you usually implement this scavenging system on your enterprise? (what to look out ...
-1
votes
0answers
23 views

Is it possible to change the CLID of a server after restore?

My client had a server crash. We restored from Datto, spun the server instance up on the Datto device, and things worked for a few days. We took a snapshot, shut down the Datto instance, and created a ...
-1
votes
0answers
35 views

Too many 16 bit applications running - Windows7 computers in AD

I have a strange problem with Windows7 x86 computers joined to Active Directory. When I try to run certain program like Java Runtime, which requires elevation to install, I enter Domain Admin ...
1
vote
2answers
70 views

Generate aAMAccountName from CSV with PowerShell (Substring)

I have a question you might help me with my query, I did a script that imports all users from Excel files. The question is how can I generate sAMAccountName which starts a specific string, for example,...
2
votes
1answer
48 views

What does the “same as parent folder” mean in DNS?

I was viewing the DNS management console and I noticed some records having the name "same as parent folder" , so what does it mean and why it is called like this ? Regards
0
votes
0answers
53 views

Proxmox Active Directory AcceptSecurityContext Error

Overview I'm trying to get Proxmox to perform user authentication via LDAP with a Windows Server 2016 ADDS server. Proxmox is convinced that my credentials are incorrect. Environment Proxmox 6.3-1, ...
-1
votes
1answer
42 views

Member of adminstrator group stays as admin even though I removed it. Domain [closed]

Can't remove admin rights for 1 account that was member of domain admins, and restricted group (built-in admins), it is not a member of aforementioned groups anymore but this account can install and ...
-1
votes
2answers
71 views

Win 10 PRO users don't get access to RDP

On the user PC (in domain) in settings they can see that RDP is turned off but the possibility to turn it on is disabled with the message: "Some settings are managed by your organization". ...
-2
votes
1answer
50 views

How to view AD event logs?

Seeing if anyone can point me in the right direction. Seeing where to obtain Active directory logs with in the GCP console. We have a one way trust setup but not seeing ability to get event logs, ...
0
votes
1answer
55 views

PowerShell - Remove User/Group from Security Permissions

I have an AD group called "Admins" and it has specific members but under the Security Tab, how can I use Powershell to remove certain users/groups from the Security list and/or modify the ...
0
votes
0answers
22 views

<ask> replication user active directory between sub domain windows 2008 to windows 2019

I have one forest with name xyz.co.id and in this forest I have created sub domain with name fa.xyz.co.id (Windows Server 2008 R2), dc.xyz.co.id (Windows Server 2019) user object active directory ...
1
vote
0answers
15 views

Domain Controller DNS alias

I recently updated an old Win2008R2-based domain to a new Win2019-based one (with the common promote / demote / decommission dance). This was for a very small office (3 peoples), so this is a single-...
0
votes
2answers
35 views

Need to deploy Laps via GPO cant use computer configuration or user configuration

I am trying to deploy Laps to all my users via GPO but issue i am having is nobody has local admin rights on their machines so obviously the install wont work with user config and i cant really use ...
0
votes
0answers
21 views

rendom fails on /execute with error 8333

I am trying to rename a 2-DC 2012 R2 single domain with rendom. I do the /list, edit xml and /prepare which work OK. But when I do /execute it fails on both DCs. There is a suspicious entry near the ...
0
votes
0answers
18 views

Missing group policies (Account, Local, Event) for “Default domain policy” and “Default Domain Controllers Policy”

When I shutdown my first AD server I noticed some services can't start on second AD due to logon. I wanted check users in policy "Log as service" on second AD but I don't have access to &...
2
votes
1answer
38 views

Cannot RDP into Servers on Child Domain (from Parent)

I have a domain, 'domain.local' and I have set up a child domain named 'development.domain.local'. The Domain Controller for 'domain.loacl' is running Windows Server 2012R2, and the Domain Controller ...
1
vote
0answers
20 views

Python Flask App on IIS - Updating Active Directory Attributes on Behalf of User

I've posted this on stackoverflow, but posting it here as I want some help from folks that are familiar with kerberos delegation and IIS. I am currently trying to figure out how to get my flask app to ...
1
vote
1answer
48 views

Detecting Windows Physical Console Logon

I'm trying to find a way to detect a logon where someone is physically at the machine. I know you can do it with Type 2 but the issue is that events get logged when services make a logon request such ...
0
votes
1answer
51 views

Domain controller not allowed to register its roles in DNS

I'm adding a physical server (and some virtual hosts running on it) on a company network in the domain "comp.net". I'm not allowed to modify the DNS- or DHCP servers and cannot create any ...
0
votes
0answers
28 views

Active Directory central store not showing new policies?

Our Domain has never had a central store. So I created C:\Windows\SYSVOL\sysvol\Domain\Policies\PolicyDefinitions and added the new ADMX files for the current Win 10 build. Now when I go to edit a GPO ...
0
votes
1answer
26 views

Windows AD not updating Linux DDNS in hybrid integration

I am setting up a Windows AD server, with a Linux DDNS setup. The Linux DDNS runs perfectly fine as expected. However, when I try to add the AD role to the Windows Enterprise 2019 server, the role ...

1
2 3 4 5
191