Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

1
vote
0answers
8 views

Some Windows services not visible remotely

I'm struggling to figure out what is going on, but it has a pretty widespread effect on a system I'm working with. I originally asked this on stack overflow and It was recommended I check here. OP ...
-1
votes
0answers
19 views

User and password management for a small-size company [on hold]

We would like to implement the following scenario and we need your input for brain storming ;) This whole question is for a small-size company of 60 employees, which are only working in a browser. ...
0
votes
0answers
21 views

No longer able to remote into server

Let me preface with I am not an IT professional but an engineer assisting family with their business server (Windows Server Essentials 2012 R2). With that said, previously I could remote into the ...
0
votes
1answer
18 views

Unable to configure Web Application Proxy in Windows Server 2012 R2

While configuring WAP in the server I am getting the below error. Both WAP server and ADFS server are in the same Azure region and network. Powershell error
0
votes
0answers
17 views

Active Directory LDAPS client certificate authentication

I've a customer whose Linux server fails to connect to a remote AD server on port 636 and it appears to be due to the fact that it does not have a client certificate. Both the remote AD server and ...
0
votes
0answers
16 views

Samba ADS: Cannot contact any KDC for requested realm

I followed this Setting up Samba as an Active Directory Domain Controller - wiki and all seems fine (kinit,klist,net ads user,net ads group work). Adding users without password also works, but if I ...
1
vote
2answers
52 views

How to prohibit users from installing specific software in windows system in an AD

I've different OUs for different Departments. For Example Mechanical OU and Programmers OU. I don't want to block the users entirely from installing and Uninstalling software. For example users of ...
0
votes
0answers
17 views

How to implement redundancy with VM Ware + connecting remote office?

We have a company with 20 workstations in NY and 6 in a remote location in Europe. The server in NY is the domain controller, NVR for the security cameras, file server and stores profiles and user ...
-1
votes
1answer
26 views

Active Directory Domain same as web domain

I am setting up a new Active Directory Forest per Microsoft's best practices here by creating a forest root domain the same as my public web site and then creating a subdomain sub.example.com. The ...
0
votes
0answers
24 views

Multiple different LM hashes per NT hash

i was charged with testing the security of our domain, and i opened the NTDS in order to check if LM hashes are in use, i used two methods 1. dcsync 2. WPR (a windows software) in both cases i see ...
0
votes
0answers
18 views

Server 2008 R2 - Migrating SYSVOL to DFSR stuck at Migration has not yet reached

Scenario: DC01 - Windows 2008 R2 - DC DC02 - Windows 2003 - DC I wanted to migrate active directory to 2016 server. First I removed the 2003 base DC successfully without any error messages, then ...
1
vote
1answer
9 views

Debian: Problems authenticating to ad

Our Debian server somehow got disconnected from AD, and I am trying to get it back. I have tried different methods. The one that seems to have worked best is realm. Atleast it says that it has ...
0
votes
0answers
27 views

How to query LDAP via port 636 from powershell?

I use adsi to connect to AD and measure the latency of the connection. For same query when i replace server with server:636 , it fails. What is the easiest way to do a ldap "find" through 636 port?
0
votes
1answer
37 views

pfSense unable to LDAP bind to Active Directory Server

I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something. I've tested the ...
0
votes
0answers
20 views

LDAP Search Filter failing to retrieve objects?

I am performing an LDAP Customer Query. I have a Vormetric Cloud Encryption Gateway configured and I want to authenticate a select group of users to authenticate with the VCEG application. My domain ...
-2
votes
0answers
18 views

How to extract MSI files from EXE for GPO deployment (Adobe Reader and Java JDK)? [closed]

I can find Adobe Reader and Java JDK MSI's anywhere for download and need to deploy them via GPO. Before I used MSI wrapper but extracted files don't seem to work properly any more? What is the best ...
0
votes
0answers
12 views

AD doesn't return baseSessionKey when authentificate via NTLM

I have a question about NTLM authentication in a Active Directory. So, I try to retranslate NTLM messages from client to AD to be aware, that AD can authenticate this client. All steps work fine, 1)...
1
vote
0answers
38 views

Step-by-Step/Best way to migrate a NT4 Samba domain to Microsoft AD

Recently we start having multiple issues with our SAMBA NT4 domain, that is because Microsoft is forcing to stop using it. One of my projects in my current company is to migrate the old SAMBA NT4 ...
0
votes
0answers
14 views

Unable to log in due to 0xc00002e1 “Directory Services cannot start” error

I found other similar questions but thought it prudent to ask as this scenario is different. Environment: HP ProLiant ML 150 G3 w/ SBS 2003 R2 Currently a stand-alone server at a doctors office that ...
0
votes
1answer
30 views

In which direction to open AD Connect ports?

Practising setting up SSPR in my Azure lab and struggling with which ports to open on the AD Connect server. I've found the list of firewall ports to open on Microsoft docs but as a beginner I'm not ...
4
votes
1answer
382 views

Apply New Password Policy via GPO Gradually

I want to make changes to the password policy in our domain (for example, include password complexity) but I want to apply it gradually, to some OU's or users group first. As far as I know the ...
0
votes
0answers
20 views

SSSD with Netatalk - pam_sss(netatalk:account): Access denied

I have a problem with getting my Netatalk authentication to work with SSSD. The Ubuntu 18.04 box is configured to use an Active Directory to authenticate. Regular logons (terminal and ssh) work well. ...
0
votes
0answers
33 views

Checking the Status of AD users

I have been trying to get the Enabled Status of all users in our AD tree. I have tried several different things without much success. Here is what I've tried so far: Get-ADUser -Filter * | select ...
0
votes
0answers
24 views

Windows Server 2016 DFS Replication Setup Duration

I have recently setup a distributed file system replication group in a dfs namespace. My questions are: How Long does it usually take for a replication Group to start replicating? And is it Bad to use ...
1
vote
1answer
25 views

Execute a scheduled task on one (and only one) domain controller

I am setting up an Active Directory domain. It includes some Linux servers that use sssd to access the users and groups of the domain. Because the users and groups need a UID and GID for that (I don'...
0
votes
1answer
37 views

Sync of SYSVOL content between Windows 2016 Domain Controllers

I have the following setup: Two Domain Controllers in different sites (both Windows Server 2016) -The sites are permanently connected via a VPN (so the servers can directly reach each other) The ...
0
votes
2answers
60 views

Custom AdminSDHolder protected objects

I have a task to remove adminCount and restore permisions inheritance for all users that are no longer member of protected groups. However there are few groups that were created by our organization ...
0
votes
1answer
31 views

Can i check when the domain admin last looked at my desktop folder, or a specific file on my desktop? [closed]

I have left a sensitive file on my windows 10 desktop folder. The windows 10 instance is connected to a domain. I understand that the domain admin has full access to my desktop. Is their a way for a ...
0
votes
1answer
65 views

Cross forest Office 365 Migration

I have a client who are a member of a larger parent company with an Active Directory forest. They have Exchange 2010/2013 (I'm not sure which yet) emails in this same forest. They would like to move ...
1
vote
1answer
12 views

Is SID Filtering Enabled?

I ran nltest /domain_trusts and received the following output: List of domain trusts: ... 1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 ) I don't understand the attribute field....
0
votes
0answers
16 views

Updating Active directory from Microsoft cloud to server

I'm working with cleaning up in our Active driectory after we have moved over to use Microsoft cloud in our company. My job is to go through all the groups in our ou's on the Active directory server ...
-4
votes
0answers
24 views

Windows server 2012 R2 user accounts [closed]

I work at a small private school and I am just installing an old server with Windows Server 2012 R2 on it. It's all we can afford at the moment. The last server I worked on was a Windows 2000 Server ...
0
votes
0answers
13 views

Which user samba4-AD account for service on windows server

I am a linux sysadmin by trade - please forgive this 'basic' question. In an ad-controlled environment (using samba 4), I want to setup a server with windows on it, to run two windows specific ...
0
votes
0answers
49 views

GPO: allow hardware configuration (VLAN)

I have created an AD group and added it to the group of network operators so that the members of the group have permission to change IP addresses, etc. However, for some cases, there is a situation ...
0
votes
0answers
26 views

Active Directory Web Service Keeps Crashing

ADWS was working fine yesterday, however this morning I logged in and it kept crashing. After crashing, it throws the 1067 error for around 2 hours. I checked the warnings in event viewer, and it ...
0
votes
0answers
24 views

How to get Linux commands history in Splunk without Splunk Forwarder?

We have tons of Linux machines which are all connected to Active Directory (AD). AD logs are being pulled in Splunk. Is there a way to get the command history of all Linux machines in Splunk from AD ...
0
votes
1answer
32 views

Setting a Windows Non-Interactive User Account

Does anybody know how I can, or if it's possible, to set a Windows domain account as a "non-interactive" user. I would like to set specific Windows domain service accounts as "non-interactive" so ...
0
votes
0answers
17 views

GPO block USB write access to all users with exceptions

I would Like to block write access to removable drives for all users but allow some users to have access to write on the USB. This is what I have done. Created new security Group "Enable_USB_Access" ...
1
vote
4answers
53 views

I need to restore AD Default Domain Controllers Policy to default but cannot log in

Okay, long story. I only have two domain controllers, I know, bad choice, but that's just what I did. Microsoft just released the RD Web Client, so I wanted to install it. I created a new VM and ...
0
votes
1answer
37 views

Problems with DNS and IPv6 on Server 2012 and 2016

I manage hundreds of servers for many customers. Most are SMB segment, having 1 to 3 servers per customer max. In past few weeks I get more and more frequent DNS errors on random domain controllers, ...
1
vote
2answers
64 views

Can I “allow logon locally” for ALL local accounts and some domain accounts?

I have used a "Allow logon locally" GPO on a few machines to restrict who can use them. It is annoying that I have to create/link a separate GPO for each set of machines/users (Where is item-level ...
-2
votes
0answers
25 views

Windows 7 Stuck At Login Screen

We have medium size network and Genuine windows 7 has been installed. From Last week we detected some computers stuck at login screen after password validation. There no way to access any user profile ...
1
vote
3answers
71 views

Reboot Removes any Local User and Domain Changes

Last Saturday I had one of the Citrix servers in my cluster start complaining about losing the trust relationship with the domain. While this is not really common, it's not unheard of. Usually, the ...
-6
votes
0answers
57 views

How to scan every hard disk in Active Directory [closed]

Can I do something to scan by McAfee every hard disk in domain by Active Directory as script? There are something around 200 computers, and I do not want to check every computer manually. Is there any ...
0
votes
1answer
31 views

Migrate openldap to AzureAD

I come from pure AWS world and exploring Azure to migrate resources. I have an openldap server on a linux VM in AWS serving our web application. I'm planning to migrate it to Azure AD to utilize the ...
0
votes
1answer
28 views

Cannot change domain password after Forest Functional Level Upgrade

After upgrading a domain with Server 2003 domain controllers to Server 2016, the forest functional level stays at 2003 by default. When upgrading the forest functional level to 2016, one can get ...
0
votes
0answers
25 views

Connecting CentOS DS-389 to a Windows 2012 ADDS

Not having much luck with finding out how to connect my DS-389 server to my Primary Domain Controller (Windows 2012 ADDS) and have it operate as a secondary controller. What I have managed to look ...
0
votes
0answers
45 views

List all users in a group who has access to a shared drive

I'm trying to know who has access to a shared drive on windows. I have admin rights but not managing the domain. I tried net group "group name" /domain but I don't get the full list! some users have ...
0
votes
0answers
26 views

How to change user display name in Windows 10 for Active Directory users

I have 2 Active Directory user accounts. These 2 user accounts have different login ID, but same display name. It makes difficult to differentiate when I wanted to login to my PC, as they are ...
0
votes
0answers
53 views

winbindd - getent passwd show groups from AD

this is my first post. I have setup winbindd to cooperate with my AD. This is my /etc/samba/smb.conf: [global] security = ADS workgroup = MYDOMAIN realm = MYDOMAIN.LOCAL log file = /...