Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

0
votes
0answers
5 views

LDAP/TLS authentication off of the network

My client has their own network. My network hosts their web app. They want to be able to authenticate using their AD. I have a website in house that authenticates via ldap locally. Would ldap over ...
1
vote
0answers
14 views

How to allow AD group to access and manage IIS sites and pools?

i manage actually a domain with around 34 IIS servers running webapplications. I would like to get a better user right management in my domain. For the moment, my users allowed to manage IIS ...
0
votes
1answer
27 views

Can a active directory group be administered by itself?

I was wondering if an active directory group can be administered by itself. Unfortunately I have no access to an active directory setup -as administrator- to do the test by myself.
0
votes
0answers
13 views

Audit resources in Windows Server 2008 [on hold]

I am trying to audit the different resources of my server with Windows Server 2008 but no related option appears, only to audit the server locally. I know that to audit the server is worth the ...
-1
votes
0answers
12 views

Defunct Windows Domain and Linux (NAS4Free)

Ok nerds, I have a good one for you. I'll preface by saying that I already know the CORRECT way to handle this, but I'm looking for an answer to the incorrect way to do this (aka the easy way). I ...
0
votes
1answer
34 views

Backup and Restore Active Directory Users and Computers Without Full AD Restore

Before I begin, I will be the first to admit that much of you this problem stemmed from failing to follow best practices pertaining to deployment and disaster recovery of AD servers. Much has been ...
2
votes
1answer
94 views

AD: Unable to perform remote desktop logon

For my users in Active Directory, I did setup a GPO in order to allow the remote desktop connections. For a specific user in particular, I did also manually setup the group membership for Remote ...
0
votes
0answers
17 views

Active Directory full forest recovery - Doubts about obscure sentence in MS documentation

I am trying to apply and test best practices about Active Directory full forest recovery as warmly advised in “Best Practices for Implementing Schema Updates or : How I Learned to Stop Worrying and ...
1
vote
0answers
14 views

syncronization from active directory to azure

I have created an user but with some errors, error on smtp: SMTP SIP etc... I changed it on Active Directory OU sync to azure but the values set after creation on office 365 and exchange is still the ...
0
votes
0answers
53 views

Domain Controller dropped from domain

While in the process of making some changes in my environment I set up a new Domain Controller (2019) and promoted it, did some testing and verified it was working properly. I demoted my old DC (2016) ...
0
votes
0answers
12 views

When does WinNT:// provider query Active Directory? Or how to get SID of local group member if it is domain account

Okay so I am using the WinNT provider with a .Net DirectoryEntry class to enumerate the members of a local group, through the Members property. If the member is a local account, the DirectoryEntry ...
0
votes
1answer
25 views

Nesting Email Distribution Groups into job code Groups

My company wants to create job code groups. A single group for a single job code. For example, if Bob is a courier, the only groups he will have is the "Domain User" and Courier. Couriers are part of ...
0
votes
0answers
7 views

SCOM - report on failed logons on workstations

I have been asked to create a report that gives us the following data in a SCOM report and export to .csv: Timestamp Workstation Account Name Status and Sub Status Codes I know I'll have to work ...
0
votes
0answers
15 views

dirsync query shows changes to an AD object that doesn't appear to exist

AdamSync is crashing periodically. In troubleshooting we found that it's throwing an exception when it encounters what it thinks is an empty DN. I replayed the query using the dirsync cookie stored in ...
1
vote
1answer
48 views

Do AD GPO's affect workstations if nobody is logged in?

I have a few computers on the domain that misbehave. (don't appear to follow GPO despite RSOP readout) One issue in particular is a computer that seems to hang/sleep/comatose when nobody is logged ...
0
votes
2answers
36 views

AD CS - OID for root and issuing CAs

I am willing to install a Root CA and an Issuing CA with AD CS for my private environment (test purpose). Do I need to obtain public OIDs (i.e. from IANA) or can I skip this requirement since my CAs ...
1
vote
1answer
62 views

How to issue a windows machine cert for a non-domain joined computer?

I have a Windows Server 2012 AD/CA and domain joined computers automatically receive the CA public cert and also get a computer certificate generated and pushed using GPO auto-enrollment. All of this ...
3
votes
4answers
246 views

AD: OU for system administrator accounts

Just a simple question: Does it make sense create a dedicated OU in Active Directory for system administrators (including domain controller admins)? Are there drawbacks following this approach? Is ...
0
votes
0answers
28 views

How to audit what are the anonymous binds made from my server?

After an audit, I am trying to identify the applications generating anonymous binds on the Domain Controllers before the remediation happens. So far, we only have the DCs logs, and that doesn't ...
0
votes
2answers
30 views

Change requirements for resetting user password via AD Users&Computers

I know we can set password policy for how users can define their passwords. But is it possible to define the required complexity when an admin resets the password via 'AD users and computers' reset ...
-1
votes
0answers
17 views

Adding SLES 12 (Linux) Server to Windows Domain Creating DNS Entries [closed]

Can anyone suggest how can I avoid Situation that when we add linux server (with multiple IPs on it) to domain creating dns entries with all IPs
2
votes
0answers
26 views

Domain-joined computer doesn't have Domain network profile

One computer in our domain suddenly shows only Private network and Public network profile. It's probably connected to some update, when also network adapter name changed from "Intel Ethernet ...
1
vote
0answers
27 views

Azure Directory Migration [closed]

I need some guidance and assistance on the following issue: My Actual Scenario Azure Subscription: my_sub Azure Directory: dir_a Active Directory: ad_a Middle Step Scenario Azure Subscription: ...
1
vote
1answer
34 views

Is it possible to choose which objects get synchronized in AWS Managed AD?

In Azure AD Connect Sync, it is possible to configure filtering. This is described as: By using filtering, you can control which objects appear in Azure Active Directory (Azure AD) from your on-...
0
votes
1answer
23 views

How to use Veeam to recover locally-hosted Exchange mailbox alias to implement on Exchange Online

I've inherited an IT department after just 1 year in it, during which the 30-year sole-IT person retired, and his replacement, who hired me, left for a remote position. Shortly before he left, Veeam ...
1
vote
0answers
42 views

failed attempts by guest user

im a part security monitoring team Many guest failed login attempts are triggered in our environment while in my investigation, Eventcode 4625 with a subject AccountName=John account name for ...
0
votes
0answers
31 views

ActiveDirectory and DNS Practice Setup for Beginner [closed]

Not sure if this is the correct site in the network for this question, but here goes! I have a very strong software background (root cause analysis, troubleshooting, deployment and config). I’ve ...
4
votes
0answers
44 views

Microsoft RemoteApp via TS Gateway initial connection load very long (over 2 minutes)

The Enviroment We do have a RemoteApp Terminalserver, based on a Windows Server 2016. Latest Updates are installed. We have provisioned multiple apps through this server. There is one Session ...
1
vote
1answer
25 views

Is it possible that AD forest have different versions of AD on different sites?

As I plan upcoming AD upgrade (from 2008R2 to 2019) I face another problem: we're actually have AD Forest that consists of several sites, each of them on 2008R2 AD version. As we upgrade one site AD ...
2
votes
0answers
14 views

Ubuntu 18 inserting leading space to username

We have an Ubuntu 18.04 client authenticating against a Samba 4 Active Directory. On this client (and this client only) when a specific user (and this user only) logs in via ssh, tty, or the GUI (at ...
1
vote
1answer
22 views

AD: Windows 2008R2 to 2019 migration, one leap or step by step

In our company we are planning to do Windows 2008 R2 migration due to End of Support it reached. We're not that fans of living on edge but this time it appear to be wiser target to Windows Server 2019,...
1
vote
1answer
34 views

Guacamole Apache LDAP Assignment

I have managed to setup ldap authentication with my active directory server running server 2016. I can authenticate to guacamole perfectly with AD accounts. Now comes assigning the AD users desktops. ...
5
votes
2answers
62 views

Can't delete OU from AD, IsCriticalSystemObject attribute TRUE - cannot change

I recently took over a contract for a customer where the previous IT apparently did a half-ass job of migrating from SBS Server to Server 2016. In AD there's an OU called MyBusiness which has two ...
1
vote
1answer
110 views

GP and AD group memberships are different

I'm running into an odd situation: domain group membership as reported by Group Policy differs from that of Active Directory. DOMAIN\user.name was already a member of DOMAIN\some_group_1. I added it ...
-1
votes
0answers
18 views

Samba4 unable to login after joining domain (DC)

I joined a domain as a secondary domain controller with samba-tool domain join domain.com DC -U"admin" Then I can see it successfully join the domain with the query: realm list --all domain.com ...
-2
votes
0answers
19 views

The advanced page cannot be opened when we want to add Active Directory user

When we want to replace a local service account for a domain service account. Systematical we have this error (The advanced page cannot be opened) : https://image.noelshack.com/fichiers/2019/18/5/...
-1
votes
1answer
25 views

Able to find Active Directory group using directory search but group does not exist in left window panel domain tree

We have a single 2008 R2 DC. We're trying to locate Builtin groups that no longer visually appear in the Builtin group folder in the domain tree in the left panel of the active directory users and ...
0
votes
1answer
33 views

How to remove AD transitive two way trust (ffl and dfl 2016)

How to remove AD transitive two way trust (ffl and dfl 2016) What problems should we anticipate after removing the trust?
0
votes
1answer
35 views

CentOS 7 SSSD LDAP against Windows Server DC fails to authenticate

I'm having an issue for authenticating via LDAP from a CentOS 7 machine to a Windows Server 2012 R2 DC via SSSD. Linux WS100 3.10.0-957.10.1.el7.x86_64 #1 SMP Mon Mar 18 15:06:45 UTC 2019 x86_64 ...
3
votes
1answer
176 views

Applying a GPO to local users except local administrators on Workgroup computers

I have a set of configurations which I need to replicate from my domain joined computers to non-domain (Workgroup) joined computers. I created a GPO, enabled Loopback processing and imported them via ...
1
vote
0answers
19 views

External Azure Active Directory

In Azure, I have invited some external users via their corporate email addresses and they are now visible in our AAD, the source being listed as External Azure Active Directory. I do not know if they ...
0
votes
0answers
29 views

Issue accessing network share via smartcard from different domain

I am currently using Yubikey smartcards to authenticate users within a Domain (Domain B). Login and network shares are working perfectly. However, when accessing Domain B's network share from another ...
0
votes
1answer
38 views

SSH Gateway for accessing remote ssh servers

I am currently have multiple users accessing multiple customer servers with ssh access (which all only allow access from our public office IP). This kind of gets annoying if a new employee enters the ...
0
votes
0answers
35 views

AAD Ldap Sync Times Set-AZ-xxxx?

When when I change a password in Azure AD , this password is reflected in AAD Ldap after 20 minutes, users query Ldap all day and they SSH , I need to lower sync times to 1 minute , something like "...
1
vote
0answers
24 views

map drive automatically using user credentials for server in separate forest

We have two completely separate forests with no trusts between them. I can map a drive on my computer to a server in the other forest by using the 'Connect using different credentials' option in 'Map ...
1
vote
1answer
68 views

Ubuntu 18 ignoring Samba AD user's `loginShell` attribute (set to ZSH, but user receives BASH after login)

We have a samba AD (4.3.11-Ubuntu) attaching to both Windows and Linux clients (Ubuntu 14, and Ubuntu 18) If I examine the LDAP for a user, his loginShell parameter is /bin/zsh. This was working for ...
-1
votes
1answer
93 views

Resolving external address when Active Directory Domain ends in .com

Prior IT support named a customer's Windows 2016 AD domain example.com instead of example.local, as I've always done it. The customer has an external Apache web server hosting www.example.com. When a ...
1
vote
0answers
43 views

OTRS 6 - AD integration - Domain Admin users mapped as Agents, not as OTRS Admins

I am testing OTRS 6 with the ITSM module. Right now I'm only testing it on our DEV environment, so it would not be a problem to ditch everything and start from scratch if it's the easiest way. I ...
1
vote
0answers
24 views

What should I take into consideration when creating AD users in PowerShell?

The current way AD users are created is: The employee determines which department the new hire is assigned A current user from that same OU is copied to create the new user The problem with this ...
0
votes
0answers
54 views

Active Directory Certificate Services ERROR_LOGON_FAILURE

I have found in event log following entries (event id 66): Active Directory Certificate Services could not publish a Base CRL for key 1 to the following location: file://\pki.my.lan/pki/Root CA(1)....