Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

-1
votes
1answer
41 views

How to set Starting program section and Remote control section by powershell for AD user

I have used the "New-ADUser" command to create a batch of new user. However, I need to set the "Program file name" in "Starting program" to "c:\windows\system32\logoff.exe" and "Start in" to "c:\...
0
votes
1answer
39 views

Unable to select fields on Get-ADGroupMember query

I am trying to grab a list of users and their descriptions/departments, who are in a certain AD Security Group using the following command: Get-ADGroupMember -Identity "SecurityGroup" | select ...
1
vote
1answer
988 views

AD Connect changed primary smtp on O365 - how to fix it?

I've got a problem with AD Connect working in one of our customers systems. We first configured O365 and Exchange Online, then connected AD with AAD with AD Connect. when we did that, the local AD ...
0
votes
1answer
37 views

User/Group Auto Add when joining Domain

I've been in the process of joining our ESXi hosts to the AD domain and have noticed that the group "ESX_Admin" is automatically being added to Permissions on the ESXi hosts. I have found the ...
1
vote
0answers
17 views

Nesting gMSA in security group for use in ACLs

I'm trying to solve a conundrum for my DBAs and developers. We have an application that is running under a gMSA (group managed service account) identity. This application needs to access a SQL ...
0
votes
1answer
13 views

remove DNS A record from internal samba PDC DNS with samba-tool

I would like to remove one interface (eno0s3, 10.10.37.166) from samba PDC (samba 4.10) I added to my smb.conf: bind interfaces only = yes interfaces = lo enp0s8 enp0s8 is 10.21.0.2. This ...
0
votes
1answer
1k views

WMI Security issue

When I am trying to access WMI from a remote domain controller using WMIMGMT.MSC, I keep getting "Failed to connect to \(remote server) because 'Win32: Access is denied.'. Does anyone have any ideas ...
1
vote
2answers
1k views

Control IIS website access to users with Active Directory

Basic authentication question. I have my website up and it is set up to be used by Windows Active Directory users. How can I control access to the website within AD users so that some have access ...
0
votes
1answer
93 views

aad authentication for azure file share

I have on-premise AD and it syncs with Azure AD. I have setup ADDS on the Azure for AAD authentication for Azure files. I have setup the storage account and enabled the Azure Active Directory ...
1
vote
0answers
41 views

hide domain user on windows logon screen

At the moment, I'm preventing our admin account from showing on the logon screen using this registry. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\...
1
vote
1answer
32 views

FreeRADIUS can not login with Active Directory user

I install freeradius 3 in debian 9. I can login with user from text file in radius but I want to login with user from Active Directory. First, I install this library. apt install samba winbind krb5-...
1
vote
1answer
1k views

Apache 2.2 LDAP Authentication Error 500 - AuthLDAPURL

I have an Apache server on RHEL 6 that uses our active directory for authentication and when we added a new "LocationMatch" AuthLDAPURL ldap://ad.company.com/DC=ad,DC=company,DC=com?samaccountname?...
0
votes
0answers
38 views

AWS Managed Microsoft AD LDAP

I have AWS managed MS AD standup and running. Created a jump node and joined the domain. I was able to execute ldp.exe and establish connection to one of my AD controller whose address is like (port ...
-1
votes
1answer
49 views

Install a .reg file via GPO

I have downloaded a .reg file with some registry keys I'd like to apply on a Windows machine. Since the same key need to be applied, I'd like to do it directly with GPO policies. I found several ...
0
votes
0answers
14 views

Single User Domain Profile Can't Access Network Shares - Can't Recreate Profile

Server 2016 - PCs Win10 TL;DR; User can Login, but not access shares with out entering Admin/Other user Creds. Changed the Password to her User Profile, didn't change the outcome. Renamed her ...
0
votes
3answers
963 views

AD forest one-way trust: can't list users from the other domain

So, we have two forests (AWS and On-Prem). The DCs can talk to each other and the one-way trust works fine. Here is the problem. If I create a share on the DC1 (in AWS), I can grant access to the ...
1
vote
1answer
34 views

Change Windows Activation Key as part of OBE (*before* setup is done)

Is there a way to change the activation key in Windows before you start the out of box experience (setup) on machines w/windows pre-installed? For example, say you purchase a laptop with Home ...
1
vote
1answer
1k views

Trust relationship failure with RODC

I have numerous servers that sit in a DMZ which has an RODC in it as well. As you probably know, the machine passwords will change after a certain amount of time. After which I have to disjoin-rejoin ...
1
vote
1answer
2k views

Win10 OpenVPN domain machine cannot find a domain controller

We converted to an AD environment a few months ago. From my home office, I have a Win10 laptop that I joined to our domain with much difficulty (had to set the AD dns server on my local LAN) as ...
3
votes
2answers
1k views

MSCHAPv2 authentication not working

I've been fighting with this for around a week now. I'm trying to get a RADIUS server to authenticate against our Samba-based Active Directory, but I can't get it to work. Because of our ...
0
votes
1answer
32 views

Domain-joined computer won't switch time source to domain from “Local CMOS Clock”

My situation is almost identical to the one cited in this post: How to change time source from "Local CMOS Clock" to "DC" I have a domain-joined computer that is showing "Local ...
-1
votes
3answers
116 views

auto moving computer in respective OU, when joined machine in to domain

we want move Computer account automatically in respective Ou when it join Domain i have some Poworshell script but it is use for manual movement "redircmp ou=newcomputerou,dc=domainname,dc=com" so ...
0
votes
0answers
175 views

OU Name with 'slash' in title “suddenly(?)” rejected by Exchange 2013/0365 Hybrid

We recently migrated from Exchange 2007 to 0365 Hybrid with a 2013 server on-prem. I'm reasonably sure I've made changes to users in the 'Web/IT' OU since the migration and not run into this error, ...
0
votes
0answers
34 views

Trouble Promoting Windows Server 2019 to Domain Controller

I am trying to add an additional domain controller using Windows 2019 Standard in a Windows 2012 R2 environment. As far as I can tell, this is supported by Microsoft. When trying to promote the new ...
0
votes
0answers
14 views

Samba Active Directory fail over doesn't work when LV cloned with DRBD (But works with manual `dd`)

I have a XEN-4.4 server, running an Ubuntu 14 client with Samba 4.3.11-Ubuntu active directory. I manage it using a Windows 10 client running Active Directory User and Computers. I have a backup ...
0
votes
1answer
12 views

Does raising domain functional level DFL have any impact on application using AD DS?

Does raising domain functional level DFL have any impact on application using AD DS? Current DFL is Windows 2003 and we are planning to raise it to Windows 2008. Does this have any impact on sites ...
0
votes
1answer
16 views

Empty Lastlogon and lastlogontimestamp

Even though a user connects via VPN and creates 4776, 4648, 4624 and 4634 event ID's on domain controller, in active directory users attributes lastlogon and lastlogontimestamp still remains null or ...
0
votes
0answers
15 views

Can't connect to Linux machine from domain-based computers

I have a small office network (VMs on XEN hypervisor): Domain Controller, Windows Server, Centos 7 server - joined the domain (say, C1); and another Centos 7 server not on the domain (say, C2). Also, ...
0
votes
0answers
24 views

Azure - DFS replication

We've implemented a DC in the azure platform running windows 2016 connected to On-Prem using a site to site VPN connection. We've confirgured the DC to replicate a DFS share between this server and ...
2
votes
2answers
4k views

Which symbols to avoid when naming AD DS groups?

can somebody point out to the symbols which is better not to use when naming AD DS groups? I want to have some explanations/links to documentation on why those should not be used. For example Windows ...
1
vote
1answer
101 views

OTRS 6 - AD integration - Domain Admin users mapped as Agents, not as OTRS Admins

I am testing OTRS 6 with the ITSM module. Right now I'm only testing it on our DEV environment, so it would not be a problem to ditch everything and start from scratch if it's the easiest way. I ...
2
votes
2answers
37 views

DNS doesn't seem to work for Domain Controller

I took over this small windows network from another admin who is no longer involved. It's a simple setup, one bare metal server with Windows 2016 as a DC and fileserver, all in one. With less than 10 ...
-1
votes
1answer
24 views

Linux machine is getting disconnected from windows domain controller frequently [closed]

My Linux server is getting disconnected from windows DC for every 30 days. Not sure where I need to check either AD or Linux sever config files
6
votes
2answers
26k views

Rules for Active directory user name string

I have googled but not able to find a proper set of restriction in user name in active directory setting. Please help me in telling what are the special char which are not allowed in Active directory ...
1
vote
2answers
1k views

Add permissions for a usergroup to all domainprofiles (roaming profiles) on server 2008 R2

This is our current situation: We have an active directory with Server 2008 R2 and roaming profiles which is currently in use (old server), and we have a new Server 2008 R2. We already set up a new AD ...
0
votes
0answers
23 views

Administer user access to Windows based Server using Active Directory?

How do I configure Active Directory such that I can define which users can access a particular server? I know that I can configure properties of the users from Domain Controller: Active Directory ...
1
vote
1answer
1k views

How to enable LDAP over SSL/TLS in AD without installing AD Certificate Services

I am installing a Sonicwall firewall into my organization. I've connected the Sonicwall with the Active Directory domain, however now on the status page of the appliance there is a huge warning: ...
0
votes
1answer
1k views

how to hide folder on root samba folder with include for each group

Currently my samba server integrated with Windows Active Directory 2012, almost configuration is just fine. I'm just curious Here are my smb.conf, [global] workgroup = "Domain Name" server ...
0
votes
1answer
2k views

Windows server 2008 R2 Certificate Authority error event viewer

I am getting the error "The windows default policy module initialize method returned an error. The specified domain either doesn't exists or could not be contacted the error code is 0x8007054b. The ...
0
votes
0answers
16 views

Windows Server 2016 can not register server in active directory

I use windows server 2016 to create Active Directory(AD) server and Network Policy Service (NPS) server. I add certificate from AD server to NPS server. After that, I try to register NPS server to AD ...
1
vote
2answers
2k views

Active Directory: Find out which users belong to a Group Policy Object

I want to make sure that certain users are available in a group from the windows domain. I installed "Group Policy Management" and can open the Forest, the Domain. But then I am not sure what I am ...
3
votes
1answer
1k views

Adding multiple users from a group to an Active Directory group using Powershell

I have a powershell script that is supposed to go through a specific ou and store the groups into a variable $groups. Here is the code I use in the script: $Groups = Get-ADGroup -Properties * -...
0
votes
1answer
2k views

Windows Domain-joined PC cannot RDP to a PC on another domain

I created an AD DS and domain called NEWDOM. Then I added a Win2012 machine "newPC" with a local account called "userA" and joined it to the NEWDOM domain. If I use my personal PC on home network, I ...
1
vote
3answers
77 views

LDAP/TLS authentication off of the network

My client has their own network. My network hosts their web app. They want to be able to authenticate using their AD. I have a website in house that authenticates via ldap locally. Would ldap over ...
0
votes
2answers
1k views

How do I add an IP address to a users dial in tab within powershell

How do I add an IP address to a users dial in tab within powershell. I want to do it about a 100 times so I was hoping to use the ad cmdlets to perform the task reading from a csv file the account ...
1
vote
0answers
65 views

Windows Server 2016 “Failed to register the service principal name”

I have a Windows Server 2016 virtual host which is hosting a virtual domain controller, and a few additional servers. When the physical host needs to reboot for scheduled patching, upon startup the ...
0
votes
2answers
106 views

Re-sharing a Windows 2012r2 share as read-only

Looking for a Windows based solution. Background: A standalone WS 2012R2 located on NETWORK A is sharing a folder with R/W access through a local user. A segregated NETWORK B contains user PCs, some ...
9
votes
5answers
55k views

Track Down Which Process/Program is Causing Kerberos pre-authentication error (Code 0x18)

We have a domain account that is being locked out via 1 of 2 servers. The built-in auditing only tells us that much (locked out from SERVER1, SERVER2). The account gets locked out within 5 minutes, ...
1
vote
1answer
1k views

Why are my active directory groups not showing up when querying the user?

I have two domains A and B Domain A contains a security-group SEC. This group is used to access a web application. The group is a security group, and the type of the group is domain local. This ...
1
vote
2answers
2k views

login with active directory users on debian jessy not working

I'm trying to get the login with active directory users working for nearly a week now. First of all, I'm pretty new to pam, samba, kerberos and winbind. We worked with local users and sudo before, but ...