Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

0
votes
1answer
2k views

Application Error 0xc0000142 on Windows Server 2008 R2 after crash

Our server crashed a few days ago, cause was a HDD failure. The server seems to be almost fully functional (except that the Exchange DB is corrupt now, but that's another story) The main problem now ...
2
votes
1answer
2k views

Allow only root and domain group to login on Linux server

I have successfully installed PBIS-open to authenticate against active directory. I also used the /opt/pbis/bin/config RequireMembershipOf command to allow a certain domain group to login. I would ...
2
votes
0answers
27 views

Domain-joined computer doesn't have Domain network profile

One computer in our domain suddenly shows only Private network and Public network profile. It's probably connected to some update, when also network adapter name changed from "Intel Ethernet ...
0
votes
1answer
85 views

How to get Linux commands history in Splunk without Splunk Forwarder?

We have tons of Linux machines which are all connected to Active Directory (AD). AD logs are being pulled in Splunk. Is there a way to get the command history of all Linux machines in Splunk from AD ...
0
votes
2answers
3k views

Powershell - how can i list both username and group membership for users of a named group?

I am relatively new to powershell and I have two statements on the cmd line: get-adgroupmember <group name> | select-object name,samaccountname To produce a nicely formatted table with two ...
0
votes
2answers
2k views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
1
vote
2answers
713 views

Exchange is crashing our domain controller

So here is an interesting problem. Over the past few days we have been migrating from an unreliable DC runnign server 2008 to a new DC running server 2016. We have moved ADDS, certificate services, ...
0
votes
1answer
97 views

Active Directory LDAPS client certificate authentication

I've a customer whose Linux server fails to connect to a remote AD server on port 636 and it appears to be due to the fact that it does not have a client certificate. Both the remote AD server and ...
0
votes
2answers
2k views

Bitlocker Network Unlock certificate issue

I'm trying to enable Bitlocker Network Unlock feature. I followed this article: https://technet.microsoft.com/en-us/library/jj574173(v=ws.11).aspx My environment is: Domain Functional Level: 2012 ...
1
vote
1answer
81 views

Ubuntu 18 ignoring Samba AD user's `loginShell` attribute (set to ZSH, but user receives BASH after login)

We have a samba AD (4.3.11-Ubuntu) attaching to both Windows and Linux clients (Ubuntu 14, and Ubuntu 18) If I examine the LDAP for a user, his loginShell parameter is /bin/zsh. This was working for ...
1
vote
0answers
54 views

failed attempts by guest user

im a part security monitoring team Many guest failed login attempts are triggered in our environment while in my investigation, Eventcode 4625 with a subject AccountName=John account name for ...
0
votes
1answer
27 views

How to use Veeam to recover locally-hosted Exchange mailbox alias to implement on Exchange Online

I've inherited an IT department after just 1 year in it, during which the 30-year sole-IT person retired, and his replacement, who hired me, left for a remote position. Shortly before he left, Veeam ...
2
votes
2answers
3k views

Domain Controller computer name does not use FQDN

I've been experiencing some network issues on a domain controller. Ended up having to reinstall the TCP/IP stack which ended up fixing most of the issues. However, I'm having replication and GPO ...
0
votes
1answer
1k views

Windows 2k8 R2 DNS server - DNS request timed out

I have a problem with fresh installed AD/DNS server. I have one domain controller that works as it should, without any issues. Tried to install second DC at the second office. I've installed Active ...
0
votes
1answer
3k views

Adding a Printer to Active Directory - Any Advantage?

My Windows 2008 R2 domain based network has 25 users running Windows 10 on their workstations. Our Lanier printer is NOT joined to the domain (not sure if this is the correct terminology) - and each ...
0
votes
1answer
116 views

mounting DFS filesystem with remote shares in it on Arch Linux

I have laptop joined to domain AAA. Have two DFS namespace servers which are also AD DC with Win Server 2012 R2. NAS is Synology server with CIFS enabled/domain joined. Servers: dc1.domain1.local - ...
1
vote
1answer
26 views

Map Existing Office 365 user to new Azure AD user

We have our on-premises AD synced to Azure AD using ADConnect. We use Office 365 for Exchange/SharePoint/Skype/etc. There was a user having some issues (not related to O365 or Azure AD) and the ...
2
votes
1answer
72 views

Guacamole Apache LDAP Assignment

I have managed to setup ldap authentication with my active directory server running server 2016. I can authenticate to guacamole perfectly with AD accounts. Now comes assigning the AD users desktops. ...
0
votes
4answers
11k views

Convert .exe installer to msi, to be able to deploy through GPO

I'm wondering how to convert a .exe to msi package and then deploy it in GPO. We running a Windows 2003 Server and the clients are Windows XP. I have downloaded a program called Advanced Installer ...
4
votes
0answers
48 views

Microsoft RemoteApp via TS Gateway initial connection load very long (over 2 minutes)

The Enviroment We do have a RemoteApp Terminalserver, based on a Windows Server 2016. Latest Updates are installed. We have provisioned multiple apps through this server. There is one Session ...
1
vote
1answer
41 views

AD: Windows 2008R2 to 2019 migration, one leap or step by step

In our company we are planning to do Windows 2008 R2 migration due to End of Support it reached. We're not that fans of living on edge but this time it appear to be wiser target to Windows Server 2019,...
1
vote
1answer
26 views

Is it possible that AD forest have different versions of AD on different sites?

As I plan upcoming AD upgrade (from 2008R2 to 2019) I face another problem: we're actually have AD Forest that consists of several sites, each of them on 2008R2 AD version. As we upgrade one site AD ...
2
votes
0answers
25 views

Ubuntu 18 inserting leading space to username

We have an Ubuntu 18.04 client authenticating against a Samba 4 Active Directory. On this client (and this client only) when a specific user (and this user only) logs in via ssh, tty, or the GUI (at ...
1
vote
1answer
111 views

GP and AD group memberships are different

I'm running into an odd situation: domain group membership as reported by Group Policy differs from that of Active Directory. DOMAIN\user.name was already a member of DOMAIN\some_group_1. I added it ...
2
votes
1answer
2k views

User GPO not showing in gpresult

I have a GPO that maps a drive for users. I have tested it and it works for a newly created test user. Settings are: User Configurations > Pref > Windows Settings > Drive Maps : SETTINGS The issue: ...
0
votes
1answer
18k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
5
votes
2answers
2k views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
0
votes
2answers
4k views

SSH login using Active Directory credentials

I am having trouble logging into a Linux system via SSH using my Active Directory credentials. the system is bound to AD, and all of the required packages are installed and configured, but I cannot ...
0
votes
2answers
1k views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
5
votes
2answers
85 views

Can't delete OU from AD, IsCriticalSystemObject attribute TRUE - cannot change

I recently took over a contract for a customer where the previous IT apparently did a half-ass job of migrating from SBS Server to Server 2016. In AD there's an OU called MyBusiness which has two ...
0
votes
1answer
3k views

PowerBroker (PBIS) Restricted login list - couldn't resolve srv\DomainUsers [40071]

I want to join a domain with Ubuntu 16.04 machine. The server is Windows Server 2012 R2. I have installed PowerBroker Identity Services (PBIS) 8.5.2.265 I get this error in /var/log/syslog: ...
5
votes
6answers
2k views

Making Active Directory changes atomic

I've got a Windows 2003 Active Directory infrastructure, and there are times (such as when terminating an employee) that I want instantaneous propagation across both of my AD servers. Currently, I ...
1
vote
1answer
1k views

Inconsistent information in Active Directory Members and Member Of properties

I'm trying to get a list of the members of a group in Active Directory. I'm using LDAP queries, but I think that's not relevant. I've found what I believe to be an inconsistency in Active Directory's ...
-1
votes
1answer
26 views

Able to find Active Directory group using directory search but group does not exist in left window panel domain tree

We have a single 2008 R2 DC. We're trying to locate Builtin groups that no longer visually appear in the Builtin group folder in the domain tree in the left panel of the active directory users and ...
0
votes
2answers
5k views

Active Directory SQL Server Random Handshake Timeouts

We've installed active directory on a new server and joined our database server and web servers to this new domain. However, randomly, we'll get the following error. What would be the cause of the ...
5
votes
1answer
3k views

Automatically refresh credential after password change

Lets say we have around 300 Windows XP machines on our ActiveDirectory domain that are used for processing something. Each has an account which is patterned on the machines name. As these are ...
1
vote
1answer
5k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
0
votes
1answer
34 views

How to remove AD transitive two way trust (ffl and dfl 2016)

How to remove AD transitive two way trust (ffl and dfl 2016) What problems should we anticipate after removing the trust?
3
votes
5answers
9k views

Active Directory - List ISP DNS servers as Forwarders?

Background: I have a relatively small Active Directory domain (Windows 2003 Functional level) with two domain controllers, both running DNS servers. They are the primary and secondary DNS servers ...
3
votes
1answer
186 views

Applying a GPO to local users except local administrators on Workgroup computers

I have a set of configurations which I need to replicate from my domain joined computers to non-domain (Workgroup) joined computers. I created a GPO, enabled Loopback processing and imported them via ...
0
votes
1answer
38 views

CentOS 7 SSSD LDAP against Windows Server DC fails to authenticate

I'm having an issue for authenticating via LDAP from a CentOS 7 machine to a Windows Server 2012 R2 DC via SSSD. Linux WS100 3.10.0-957.10.1.el7.x86_64 #1 SMP Mon Mar 18 15:06:45 UTC 2019 x86_64 ...
7
votes
2answers
3k views

A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly. However, we have one ...
2
votes
1answer
2k views

Openvas 9 LDAP Authentication

I am trying to configure Openvas 9 to use LDAP, for the login to the Greenbone software. It appears as based off of other threads, this issue with LDAP in unresolved unless I am seriously mistaken. ...
0
votes
2answers
347 views

Joining an Active Directory with Linux

I have a couple of CentOS 7.5 Linux servers that I need to get them to join an Active Directory 2012 R2 domain, I tried using Winbind and it tells me it cannot join as standalone server, then I tried ...
0
votes
2answers
2k views

error “Test failed: Main server ADSrv” when integrating directory

I'm trying to integrate GLPI with Active Directory. I'm using windows XAMPP V3.2.2 and GLPI 0.90.1. While setting up the LDAP Directory, I'm getting an error "Test failed: Main server ADSrv". What am ...
-3
votes
2answers
938 views

Integrate Active Directory and OpenLDAP [closed]

I am using the Active directory on windows server and LDAP on Ubuntu. I have some client that using ubuntu desktop, I want to integrate LDAP with active directory for authentication and using SSSD ...
0
votes
1answer
41 views

SSH Gateway for accessing remote ssh servers

I am currently have multiple users accessing multiple customer servers with ssh access (which all only allow access from our public office IP). This kind of gets annoying if a new employee enters the ...
2
votes
1answer
1k views

To delete DNS records in AD-integrated DNS, what permissions are needed and where?

I would like to be able to allow a specific user to delete DNS records from my Active Directory-integrated DNS zones. One zone is replicated to all DNS servers on DCs in the domain (so in ...
0
votes
0answers
30 views

Issue accessing network share via smartcard from different domain

I am currently using Yubikey smartcards to authenticate users within a Domain (Domain B). Login and network shares are working perfectly. However, when accessing Domain B's network share from another ...
1
vote
1answer
4k views

Access denied trying to login to Ubuntu 14.04 (Authentication with Active Directory)

I'm trying to set up my Ubuntu 14.04 print server to authenticate users with my Active Directory server, I've followed all of the steps using the following tutorial: http://www.kiloroot.com/add-...