Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
0
votes
1answer
54 views

Set Adobe as default program via Group Policy?

My question is about default program via Group Policy. Basically what i need is - set Adobe as default windows PDF reader via Group Policy. I have been trying to do this for a while now, but haven't ...
0
votes
2answers
28 views

How can I get a user's password expiry date using Powershell (from a different domain, using SSL)

I'd need to get a User's password expiration date from a different Windows Domain. I have RSAT installed on my pc and, using the right credentials, I can indeed read all the target domain data using ...
1
vote
0answers
22 views

GPO vs attributes for users exctracting using CSVDE

I am currently in doubt about how the GPO is changing the attributes of the users registered in the AD. I have a Windows Server 2019 Datacenter and I have a few active users that have the flag "...
0
votes
0answers
12 views

apache directory and active directory server range attribute

I have to work with an active directory I can only communicate with by ldap connection so no mmc snap-ins. I'm using apache directory server but have a problem editing groups with large member counts. ...
0
votes
0answers
15 views

getent doesn't show full name for AD users

I had an Ubuntu 16.04 server connected to the Active Directory domain via samba. I was used to retrieving the domain users' details with: $ getent passwd DOMAIN+jdoe:*:17340:10513:John Doe:/home/...
0
votes
1answer
1k views

Can't connect to WinRM on Domain controller

I have set up a domain controller server on Azure with Windows Server 2016. Now I want to connect to this server using PSSession. WinRM is enabled, all firewall rules are ok, inbound rules on Azure ...
0
votes
1answer
6k views

What is a non-interactive service account?

Trying to get a clear understanding of what makes a AD domain service account non-interactive and how this is done? I require a service e account with "logon as a service" and "logon as a batch" for ...
0
votes
1answer
105 views

Cannot join a virtual machine Windows 10 to server 2019 virtual machine domain?

I am working as an IT technician. In order to get some exposure to Hyper-V and Windows Servers. My supervisor assigned me a project to learn how to install active directory and servers in server ...
2
votes
1answer
2k views

NFSv4 + SSSD + Active Directory: 'nobody' permissions when ldap_id_mapping disabled

I'm attempting to configure NFSv4 with KRB5 authentication in accordance with RedHat's current recommendations, using SSSD to access Active Directory. The NFS server in this case is a NAS appliance, ...
1
vote
1answer
28 views

Added DFSR to Domain controller, non domain admins can not create shares

My situation is I deployed a couple of domain controllers at some locations. My boss didn't want to spend money on servers, so I reused some servers we were not using. I installed them as domain ...
0
votes
1answer
3k views

Linux SSSD with two AD Domains

I Joined my Centos Box to a Windows Active Directory Domain with realm join --user=DomUser dom2.local Without any Problems. The Domain hast a one-way Trust relationship to Dom1. Our Windows Users ...
2
votes
1answer
2k views

New-ADGroup with Multiple -OtherAttributes?

Keep getting "The Paramater is Incorrect". I think I'm following Microsoft's method correctly, but it's not working. New-ADGroup -DisplayName $name -Name $grpName -Server server.org ` -Path:'DC=...
0
votes
1answer
1k views

DHCP in router with AD, DNS and DHCP in one Server

My Lan is working fine 5 switches connected to core switch and have a router, DHCP configured in the router, network 10.10.10.1, 10.10.11.254 -- Mask 255.255.254.0 -- d.g 10.10.10.1 (Router IP).DNS 8....
0
votes
2answers
2k views

Insufficient quota exists to complete this operation, net ads join

I'm trying to join Active Directory in Xubuntu 16.04 in a enterprise business enviroment so I'll change the name of my REALM by MY.EXAMPLE.CORP. My issue is: when I run net ads join -U Administrator ...
0
votes
1answer
2k views

Server 2012 AD-DS Setup Fails (Microsoft.Directory.Services.Deployment.DeepTasks.DeepTasks not found)

Good Morning everyone, I am currently trying to promote my 2012 Server to a Domain Controller but when I am at the first step in the setup I get the Error Message (German, Original Message): [...
2
votes
2answers
170 views

Set user home folder to local path doesn't seem to actually set the profile location for domain or local users

I have created a folder D:\Users with the same permissions as the default C:\Users and enabled the "Set user home folder." I have verified that the GPO is applied to the computer on which I am testing....
0
votes
1answer
58 views

Authenticate with SSSD in multiple domains in Ubuntu 18.04

I was able to successfully follow this document to get sssd to work with my Active Directory domain, but I was sad to learn that sssd does not support authenticating with external trusts. I read that ...
0
votes
1answer
35 views

Failover Cluster waits till the Site to Site DNS Replication done

I created a failover cluster with 2 subnets in AWS VPC. In one subnet I have DC1 (10.30.10.101) and Node 01 (10.30.10.102). In other subnet, I have DC2 (10.30.12.101)and Node 02 (10.30.12.102)....
0
votes
1answer
8k views

Windows 2008 Web Enrollment Fails The RPC server is unavailable. 0x800706ba (WIN32: 1722)

I am setting up an RA and a Subordinate CA who is also an AD. I can issue certs through certutil and the mmc snap-in with no problem. But when I try using Web Enrollment in the RA, it fails saying "...
-1
votes
1answer
89 views

Can one GMSA ( Group managed service account) be applied to multiple computers? [closed]

I read that MSA cannot be applied to more than one computer, Can gMSA be linked to more than one computer?
0
votes
1answer
223 views

DNS Servers return IPs of Domain Controllers outside DNS client's site

We had a security incident recently where we needed to rebuild the network. For the time being we are just putting things back the way they were until we have more time to come up with a better go ...
0
votes
1answer
54 views

2 Tier ADCS PKI what's different when using HSM's?

In the near future I will be tasked with building a Tier 2 ADCS PKI that uses HSM's, can anyone tell me what I have to do differently when building the PKI, and how the HSM fits into the whole PKI? (...
0
votes
1answer
2k views

Application Error 0xc0000142 on Windows Server 2008 R2 after crash

Our server crashed a few days ago, cause was a HDD failure. The server seems to be almost fully functional (except that the Exchange DB is corrupt now, but that's another story) The main problem now ...
2
votes
1answer
2k views

Allow only root and domain group to login on Linux server

I have successfully installed PBIS-open to authenticate against active directory. I also used the /opt/pbis/bin/config RequireMembershipOf command to allow a certain domain group to login. I would ...
0
votes
1answer
41 views

Bind DNS <-> Windows DNS

My environment: AD: Active Directory with AD integrated DNS (Windows Server 2016), Domain: example.com, only internal domain stuff in DNS I am owner of Domain example.com and now i want to point to ...
0
votes
2answers
2k views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
1
vote
1answer
31 views

Group Policy not Applied even on right OU and Right Security Group

I need some enlightment. I have a AD DC that name cisco.local. There's 20 computer that already connected to this AD DC. I've some GPO on the server and have a 'Praktikan' group. The praktikan group(...
1
vote
1answer
70 views

2012 SERVER DCDIAG STRUGGLE with error 1355 (DsGetDdName call failed)

EDIT: This problem was resolved by following the information found at this link: https://support.microsoft.com/en-us/help/947022/the-netlogon-share-is-not-present-after-you-install-active-directory-d ...
1
vote
0answers
30 views

New SPN required when renaming server?

I am in the process of decommissioning a Win 2008 server, that runs an app that uses Kerberos authentication, and has an SPN created for our service account. The replacement server will be renamed to ...
2
votes
1answer
943 views

Is the Kerberos SPN FQDN significant to the server, or is the keytab enough?

I spend most of my time as a developer, so I'm not familiar with all the details... I have a service running on a linux host. I want to use Kerberos to transmit identity information to the service. ...
1
vote
2answers
962 views

Windows 2008R2 Domain Controller: Name Resolution (hosts file, DNS) does not work

I have got a pretty strange issue on a domain controller. Environment is: Windows 2008R2 Std Server + all updates One DC + a few Windows clients joined to that AD On that DC was Symantec Endpoint ...
0
votes
1answer
1k views

Windows 2k8 R2 DNS server - DNS request timed out

I have a problem with fresh installed AD/DNS server. I have one domain controller that works as it should, without any issues. Tried to install second DC at the second office. I've installed Active ...
0
votes
1answer
3k views

Adding a Printer to Active Directory - Any Advantage?

My Windows 2008 R2 domain based network has 25 users running Windows 10 on their workstations. Our Lanier printer is NOT joined to the domain (not sure if this is the correct terminology) - and each ...
0
votes
2answers
3k views

Powershell - how can i list both username and group membership for users of a named group?

I am relatively new to powershell and I have two statements on the cmd line: get-adgroupmember <group name> | select-object name,samaccountname To produce a nicely formatted table with two ...
0
votes
0answers
21 views

nslcd pam_ldap Windows 2019 unknown issue

Hopefully someone can point out what I may be doing wrong. We have been running CentOS6/7 systems with AD integration for a couple of years now. The setup on the AD side was Windows 2012R2. About 2 ...
0
votes
2answers
2k views

Bitlocker Network Unlock certificate issue

I'm trying to enable Bitlocker Network Unlock feature. I followed this article: https://technet.microsoft.com/en-us/library/jj574173(v=ws.11).aspx My environment is: Domain Functional Level: 2012 ...
1
vote
2answers
494 views

Generate/Sign certificates with the AD trusted root certificate?

I know that when an Active Directory domain is created: it creates its own root certificate and that root certificate is automatically pushed into machines when they are joined to the domain You can ...
0
votes
1answer
975 views

Group Policy Object not applied to client computer

I am taking over our entire Microsoft based management, this includes our AD servers, GPOs, etc. So with that being said, I don't know everything about how this setup is configured. However, I have ...
1
vote
2answers
72 views

What is wrong with my file permissions for Group Policy software deployment?

I'm trying to deploy Google Chrome Enterprise via Group Policy. Following Google's guide I created a GPO, linked it to an OU, imported the ADX file with the policies (which deploy fine by the way). I ...
0
votes
1answer
32 views

DNS forwarders not being used when external domain matches AD domain

I have a domain controller set up on Windows Server 2016, the domain name for the AD domain is example.com. Every computer connected to this domain is assigned a domain name, which I can see in the ...
0
votes
1answer
71 views

External Domain Trust validation fails after creation.Domain not found?

I am trying to set up a 1-way trust in my lab. LAB.local is the trusted domain while RED.local is the trusting domain. Conditional forwarding is set up on both pointing to each other. DC01.LAB.local [...
0
votes
0answers
15 views

Active Directory Group Membership not reflecting correctly in linux

Background: On an isolated network. Multiple RHEL6 Linux systems connected to a Windows 2012R2 DC. Systems joined to domain and authenticating with DC. Using IDMAP_RID. No known changes to ...
0
votes
0answers
35 views

why can't I delete this Active Directory object?

I'm having trouble restoring a DC to replication status. Somehow it past its tombstone timeout limit. Anyway I've tried repadmin /removelingeringobjects and was not able to remove the offensive AD ...
3
votes
4answers
17k views

Using “Active Directory Users and Computers” for a different domain

How can I manage a domain with the "Active Directory Users and Computers" from a computer that is not on that domain? I realize I'll need some domain admin (or less) credentials, but that's fine. I ...
1
vote
0answers
18 views

Active Directory Realm trust with MIT KDC and Referrals/Host Mappings

I can create a one-way trust between an Active Directory and a MIT KDC but what I'd like to know is whether Active Directory supports Kerberos Referrals (RFC 6806) as well in this scenario. This'd ...
1
vote
1answer
19k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
4
votes
1answer
85 views

SSSD storing wrong shell in cache

I am using SSSD to authenticate users on Linux against a local Active Directory server (Windows). It works fine, this is my config: [sssd] domains = my.domain config_file_version = 2 services = nss, ...
0
votes
0answers
28 views

Check for existing AD group members doesn't work in PowerShell

I have a 50% working script for adding users to AD Groups. But I can't the part to work where it needs to check if they are already member of that group. See below the failing part: ForEach ($Group ...
0
votes
1answer
36 views

Can AWS Managed AD migrate from Standard Edition to Enterprise?

Does anyone know if you can easily migrate from AWS Managed AD Standard Edition to the Enterprise Edition? It seems like this would be a logical option as standard is restricted to 30,000 objects, but ...
0
votes
2answers
2k views

Query Active Directory UID attribute

I am trying to get a list of UIDs (NIS attribute). The problem is that UIDs are not in order. I would like to define a range and check if an account exist with that UID and if it does then get me the ...