Questions tagged [active-directory]
A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.
10,222
questions
1
vote
1
answer
6k
views
How do I allow all members of a domain to login remotely to a Windows XP Machine?
I have a Samba server acting as a PDC. All of my users can login locally to any machine on the network with their Samba userID.
The problem is, when a user tries to use remote desktop to access a ...
- 38k
1
vote
1
answer
1k
views
How do I add a Windows 2003 Domain Controller to a Windows 2000 Forest?
I currently have a Windows 2000 Active Directory and Domain. I want to move to 2008 but I believe I have to go to 2003 first.
I thought the best way to start was to add the 2003 server as a domain ...
CommunityBot
- 1
2
votes
3
answers
4k
views
Group Policy not being applied because of mysteriously missing file
A single machine on my network won't apply ANY policies because it cannot retrieve \\my.domain.net\SysVol\my.domain.net\Policies\{hash}\gpt.ini . The file is visible under \\controller.my.domain.net\...
- 4,594
1
vote
1
answer
897
views
In which cases is ObjectSid-Attribute missing for persons in ActiveDirectory?
While trying to get users by ObjectSid, I discover that some person-Object does not have this Attribute. I'm wondering if this is a common case or an error in our directory.
The reason because I want ...
- 24.8k
5
votes
5
answers
3k
views
Read Only Domain Controller for standalone/off-site testing location
In a bit of a pinch: a client needs to test an Active Directory enabled CRM system that consists of a SQL 2008 Server and a Windows 2008 Standard Server (the application server). As far as I know, ...
12
votes
2
answers
28k
views
Upgrade software package installed with GPO
Since recently I have been using AD policies to deploy software packages through GPO on a small domain. This had been working well, but I am not sure what is the correct procedure for upgrading a ...
CommunityBot
- 1
2
votes
1
answer
6k
views
Squid Kerberos/LDAP Active Directory only works on IE not on Firefox and chrome
I've setup a proxy using squid, with kerberos/ldap as authentication.
I used this article as reference: http://www.howtoforge.com/debian-squeeze-squid-kerberos-ldap-authentication-active-directory-...
- 632
0
votes
1
answer
213
views
preferential active directory one-way trust targets
If you have two domains and forests, Domain + Forest A and Domain + Forest B, and you are making a one-way trust so that Domain + Forest B will implicitly trust A, is there a way to make sure all the ...
- 2,744
0
votes
2
answers
975
views
Access denied on some files on Win2008R2 DC share
I have a Win 2008 R2 Server set up as a Domain Controller. I have configured shared folders for each user (manual set up, as there are only 4 users). On each share, ownership of the folder has been ...
- 1,413
1
vote
1
answer
11k
views
Unable to Uninstall Exchange 2010 ("Internet Newsgroups" public folder)
I am trying to uninstall Exchange 2010, before installing a new instance of Exchange 2010 SP1 on a different server. (Our production Exchange server is 2003) We have met all of the Mailbox uninstall ...
CommunityBot
- 1
3
votes
1
answer
3k
views
Active Directory DNS, preferred IPs, and multiple NICs
I am a noob with Active Directory, and I know just enough to have gotten our current setup running fine.
We run a web farm with several web servers connecting to a file server for content storage. ...
- 142k
2
votes
3
answers
7k
views
Apache LDAP Authentication: Can I bind the user without searching for the DN first?
When doing AuthType Basic authentication against an LDAP server, Apache first binds to search for the DN of the user, then binds with that DN to test the user's password. The challenge is that with AD,...
- 378
4
votes
3
answers
1k
views
Can nss/pam ldap send password to ldap server already hashed?
I have nss & pam configured so that I can authenticate linux users via LDAP against my companies AD server. All works fine except password are sent in plain text. For reasons out of my control our ...
- 632
5
votes
1
answer
3k
views
Get a reliable mapping of users-to-computers in Active Directory environment
Need to assign users to their workstations for purpose of assigning computer access for Remote Web Workplace in Small Business Server 2011. To do this, I need a reliable list of users' workstations. ...
- 134k
0
votes
1
answer
835
views
Rename active directory account name
I have an existing user account within active directory. I'm using the naming convention "MyApp-dev" for dev, "MyApp-qa" for qa and so forth, up to prod.
Our IT services department wanted to rename ...
- 128
0
votes
1
answer
161
views
Active Directory Server for Windows Clustering
I understand that Windows clustering requires Active Directory.
If I were to setup a Windows Server 2008 R2 cluster, will there be any issues if the Active Directory server is running Windows Server ...
- 9,993
0
votes
1
answer
2k
views
IP Resolution of AD Domain, DFS and DNS/WINS lookup problem
Short story One day, on client computers, the remote DFS \\country1.company.com\company stopped working and \\country1.company.com keeps resolving to a local server IP. However, if the request is ...
- 2,744
0
votes
2
answers
2k
views
How to connect Web server to the local Active Directory?
In my office I have server with Active Directory and local network. I want to connect web server from another place to this Active Directory. All servers working on Windows server 2008. Office network ...
- 696
0
votes
1
answer
801
views
Conflict with Local and Domain Policy for Remote Desktop
I am running Windows Server 2003 domain and implementing the Remote Desktop Users group without any problems to manage who has access to remote into the Domain Controller.
I recently set up a virtual ...
- 111k
2
votes
4
answers
1k
views
Putting a Windows DC, Exchange in a DMZ
I have one guy at my company telling me that I should put FF:TMG in between my main Internet-facing firewall (Cisco 5510) and put my Exchange server and DC on the internal network.
I have another guy ...
- 15.6k
0
votes
1
answer
822
views
Group Policy Preferences Filtering
I'm having issues getting a 2008 Policy to apply on my 2003 domain.
I attached Group Policy Management from a 2008 server to the domain and setup it's own policy. The policy is User Configuration > ...
- 4,594
0
votes
3
answers
119
views
What is the preferred way to host the Active Directory service, given that we are a Linux shop?
We would like to employ Active Directory to handle duties including DNS, LDAP, domain-controller stuff, etc. The obvious way to do this would be to install Windows and run AD from there. However, we ...
- 1,762
1
vote
2
answers
10k
views
Why can't I replicate DNS zones to non-DC DNS servers?
I've installed Windows Server 2008R2 Enterprise Edition with SP1 on two computers:
1) My primary domain controller.
2) A dedicated DNS server.
My DNS server is not a domain controller, but it has ...
CommunityBot
- 1
2
votes
1
answer
393
views
rules for usernames in windows domain
I'm working on a app that uses Jespa to do transparent SSO. I'm using the NtlmSecurityProvider. In my code, when I get the username looks like this: "DOMAINNAME\username"
e.g.
<% out.println(...
- 38k
3
votes
1
answer
1k
views
How to move SharePoint authentication from AD to LDAP without breaking user profiles?
We have a bunch of users in a local Active Directory OU that access the SharePoint portal. We've just added LDAP authentication and pointed it at the organisation's global LDAP server, so out AD ...
CommunityBot
- 1
0
votes
1
answer
2k
views
gpupdate causes infinite loop
I've got a patch file with the following content:
gpupdate /force /boot /logoff
When executing this file it causes an infinite loop, executing the line in the same cmd window again and again. This ...
- 444
1
vote
1
answer
2k
views
SAMBA4 as Active Directory DC: Linux computer and changing password [closed]
I have successfully joined computer to the SAMBA4 DC and successfully logging in!
Now the question is...how Linux users now can change their own passwords?
I guess it's to use "passwd" command. But ...
- 1,287
6
votes
4
answers
43k
views
Push new registry keys via group policy
Recently I have added registry keys in active directory and I need to push them via group policy instead of going to each PC to apply the new ones.
How can I push new registry keys (not modify ...
- 133
2
votes
2
answers
425
views
Configuring time sync on domain
I have an AD domain (2 dcs single domain) and a number of member servers. I need to configure time synchronisation so that everything is in sync.
There is a lot of fluff on this topic. Does anyone ...
- 2,744
1
vote
1
answer
397
views
Using Google Apps Directory Sync with existing system in place
We use Google Apps for our systems and have an Active Directory in place as well. The AD is not being used as of now but we really want to get started with using it.
A few questions re. using Google ...
- 101
1
vote
1
answer
21k
views
How to check if machines are set to use a proxy (remotely)?
I have a Windows active directory domain network and a list of Windows machine names that I want to check if they are set to use a proxy (internet settings > connections > lan settings > proxy > use a ...
- 132k
1
vote
2
answers
708
views
how to config DNS in DHCP network in windows 2008 server R2?
I have dynamic IP assigned on my server and server connects with my router where I bind raw static IP, I have installed DNS and Active Directory, but I am not able to setup DNS it says "you should ...
- 111
2
votes
2
answers
169
views
Is there any user-friendly version of the RUN AS feature
Background
I have some Windows XP virtual machines that are used to run some low-trust software. Domain accounts assigned to be used on these machines are forbidden from accessing files shares or ...
- 454
3
votes
3
answers
811
views
Red Hat Server Becomes Unresponsive After Primary Domain Controller is Shut Down
We have a number of servers (application servers, web servers & ftp servers) running red hat 5 that are all virtual. We also have a similar setup that is Windows-based. Yesterday, our ...
- 11
1
vote
1
answer
387
views
Metadata Cleanup Windows Server 2008
I have 2x Windows Server 2008, and 1x Windows Server 2003 that doesn't boot any more. I need to remove the 2003 server from the DC role.
I found this Microsoft article. It says that you can remove a ...
- 4,594
1
vote
1
answer
491
views
BES does not seem to be able to communicate with AD domain
I've had an issue this morning with trying to log on remotely to our BES in Sydney, and i'm getting nowhere fast!
I've logged on locally to the machine with the administrator password fine, and the ...
- 142k
0
votes
1
answer
4k
views
Weird LDAP search results behaviour
I am building Google Directory sync from our domain to our Google apps account.
I am trying to search for all users in a specific Distribution Group: GoogleAppsActiveUsers.
I am using Windows 2003 R2 ...
- 632
0
votes
2
answers
143
views
New domain or existing domain - transfer or upgrade?
I have a Windows 2000 native domain and Windows 2000 Forest & Domain controllers. I also have Windows 2003 servers that are not DC, just members of the domain like any other computer.
I am ...
- 2,576
4
votes
1
answer
125
views
Deploy a single XML file through a Windows Server 2003 AD network
I am a newbie with AD and I was wondering if there was an easy way to deploy a single XML file (license file) to all computers in a Windows Server 2003 AD environment?
Do I have to create an MSI file ...
- 12k
3
votes
1
answer
7k
views
AD Integrated DNS Zone restore/repair
I have inhertied an issue where my AD Integrated DNS Zone was deleted and there are no system state backups available. I have checked in AD, under DNS and there are no records there. However, under ...
- 115k
2
votes
1
answer
2k
views
Ldap Authentication for Windows Standalone Servers
I have an LDAP server Novell eDirectory in my Environment through which has the user data. In my Environment i have set of Windows and Linux servers. I need to use this LDAP As the Authentication ...
- 142k
2
votes
3
answers
2k
views
Active Directory LDAP and user issues (using apache2 for svn access)
I currently have a setup where I work that lets users use their active directory domain logins and passwords to authenticate and authorize access to Subversion. Currently I need to allow application ...
CommunityBot
- 1
0
votes
1
answer
100
views
Windows Server 2008R2 DNS local IP's
I have a Windows Server 2008R2 server running as our domain controller and DNS server. We have a number of local IP addresses that users access quite a few times a day. At the moment they have to ...
- 97.1k
3
votes
2
answers
3k
views
dc promotion from 2003 to 2008R2
I have a 2003 windows server as our domain controller and I am trying to upgrade the active directory to one of our new virtual machines running windows server 2008r2.
I ran through all the steps I ...
- 2,744
3
votes
2
answers
528
views
Known services that don't use Kerberos authentication?
I'm looking to set up a Kerberos trust between MIT Kerberos5 and Active Directory. However, it's noted in my old Kerberos book from 2003 that "there are several applications, notably Microsoft ...
CommunityBot
- 1
0
votes
1
answer
1k
views
VPN error 778 between Windows 7 and Debian Squeeze w/ pptpd and AD
I have a VPN server set up on a debian (lenny) machine. I get an error, 778: "it was not possible to verify the identity of the server", every time I try to connect. I checked the configuration ...
- 388
1
vote
0
answers
359
views
IIS 7 and SPN Issues
Our web server is on a different box than our SQL server. When I first set up the website, I could access it, but it wasn't passing the authenticated user credentials to our SQL server (as expected).
...
CommunityBot
- 1
0
votes
1
answer
411
views
sbs2k3, how do I properly setup ad sites/subnets so vpn user can authenticate to sbs share?
just setup site2site vpn, hardwarebased. site 1 winxp, site2 sbs2k3. site 1 192.168.1.0/24 site 2 192.168.0.0/24
site 2 user can authenticate into site 1 xp computer network share using local user ...
- 111k
1
vote
1
answer
1k
views
No Login Servers available - only problem with 2 servers, trust relationship in play
I'm having a really strange issue.
I have 2 domains, we'll call them A and B.
There is a two way trust set up, A trusts B and vice-versa.
Clients in domain B are having trouble accessing shares on ...
- 306
1
vote
1
answer
2k
views
Powershell remote access denied
Last week we reinstalled ou AD (windows server 2008 R2), and reconfigured it (trust relationships, dns, dhcp).
There is my problem, I want to run a script to create folder remotly to a filesharing ...
