Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

5
votes
2answers
86 views

Can't delete OU from AD, IsCriticalSystemObject attribute TRUE - cannot change

I recently took over a contract for a customer where the previous IT apparently did a half-ass job of migrating from SBS Server to Server 2016. In AD there's an OU called MyBusiness which has two ...
0
votes
1answer
3k views

PowerBroker (PBIS) Restricted login list - couldn't resolve srv\DomainUsers [40071]

I want to join a domain with Ubuntu 16.04 machine. The server is Windows Server 2012 R2. I have installed PowerBroker Identity Services (PBIS) 8.5.2.265 I get this error in /var/log/syslog: ...
5
votes
6answers
2k views

Making Active Directory changes atomic

I've got a Windows 2003 Active Directory infrastructure, and there are times (such as when terminating an employee) that I want instantaneous propagation across both of my AD servers. Currently, I ...
1
vote
1answer
1k views

Inconsistent information in Active Directory Members and Member Of properties

I'm trying to get a list of the members of a group in Active Directory. I'm using LDAP queries, but I think that's not relevant. I've found what I believe to be an inconsistency in Active Directory's ...
-1
votes
1answer
27 views

Able to find Active Directory group using directory search but group does not exist in left window panel domain tree

We have a single 2008 R2 DC. We're trying to locate Builtin groups that no longer visually appear in the Builtin group folder in the domain tree in the left panel of the active directory users and ...
0
votes
2answers
5k views

Active Directory SQL Server Random Handshake Timeouts

We've installed active directory on a new server and joined our database server and web servers to this new domain. However, randomly, we'll get the following error. What would be the cause of the ...
5
votes
1answer
3k views

Automatically refresh credential after password change

Lets say we have around 300 Windows XP machines on our ActiveDirectory domain that are used for processing something. Each has an account which is patterned on the machines name. As these are ...
1
vote
1answer
5k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
0
votes
1answer
34 views

How to remove AD transitive two way trust (ffl and dfl 2016)

How to remove AD transitive two way trust (ffl and dfl 2016) What problems should we anticipate after removing the trust?
3
votes
5answers
9k views

Active Directory - List ISP DNS servers as Forwarders?

Background: I have a relatively small Active Directory domain (Windows 2003 Functional level) with two domain controllers, both running DNS servers. They are the primary and secondary DNS servers ...
3
votes
1answer
186 views

Applying a GPO to local users except local administrators on Workgroup computers

I have a set of configurations which I need to replicate from my domain joined computers to non-domain (Workgroup) joined computers. I created a GPO, enabled Loopback processing and imported them via ...
0
votes
1answer
39 views

CentOS 7 SSSD LDAP against Windows Server DC fails to authenticate

I'm having an issue for authenticating via LDAP from a CentOS 7 machine to a Windows Server 2012 R2 DC via SSSD. Linux WS100 3.10.0-957.10.1.el7.x86_64 #1 SMP Mon Mar 18 15:06:45 UTC 2019 x86_64 ...
7
votes
2answers
3k views

A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly. However, we have one ...
2
votes
1answer
2k views

Openvas 9 LDAP Authentication

I am trying to configure Openvas 9 to use LDAP, for the login to the Greenbone software. It appears as based off of other threads, this issue with LDAP in unresolved unless I am seriously mistaken. ...
0
votes
2answers
381 views

Joining an Active Directory with Linux

I have a couple of CentOS 7.5 Linux servers that I need to get them to join an Active Directory 2012 R2 domain, I tried using Winbind and it tells me it cannot join as standalone server, then I tried ...
0
votes
2answers
2k views

error “Test failed: Main server ADSrv” when integrating directory

I'm trying to integrate GLPI with Active Directory. I'm using windows XAMPP V3.2.2 and GLPI 0.90.1. While setting up the LDAP Directory, I'm getting an error "Test failed: Main server ADSrv". What am ...
-3
votes
2answers
961 views

Integrate Active Directory and OpenLDAP [closed]

I am using the Active directory on windows server and LDAP on Ubuntu. I have some client that using ubuntu desktop, I want to integrate LDAP with active directory for authentication and using SSSD ...
0
votes
1answer
42 views

SSH Gateway for accessing remote ssh servers

I am currently have multiple users accessing multiple customer servers with ssh access (which all only allow access from our public office IP). This kind of gets annoying if a new employee enters the ...
2
votes
1answer
1k views

To delete DNS records in AD-integrated DNS, what permissions are needed and where?

I would like to be able to allow a specific user to delete DNS records from my Active Directory-integrated DNS zones. One zone is replicated to all DNS servers on DCs in the domain (so in ...
0
votes
0answers
31 views

Issue accessing network share via smartcard from different domain

I am currently using Yubikey smartcards to authenticate users within a Domain (Domain B). Login and network shares are working perfectly. However, when accessing Domain B's network share from another ...
1
vote
1answer
4k views

Access denied trying to login to Ubuntu 14.04 (Authentication with Active Directory)

I'm trying to set up my Ubuntu 14.04 print server to authenticate users with my Active Directory server, I've followed all of the steps using the following tutorial: http://www.kiloroot.com/add-...
0
votes
1answer
2k views

Remote Desktop to 80% of my servers do no longer work (“User account restriction”) from just one of my PCs

I came into work last week, checked my first ticket (easy to fix one), RDP'd into the server needed for this and the login did not work. After clicking 'connect' I got the "Unable to Log You on ...
0
votes
0answers
43 views

AAD Ldap Sync Times Set-AZ-xxxx?

When when I change a password in Azure AD , this password is reflected in AAD Ldap after 20 minutes, users query Ldap all day and they SSH , I need to lower sync times to 1 minute , something like "...
1
vote
0answers
24 views

map drive automatically using user credentials for server in separate forest

We have two completely separate forests with no trusts between them. I can map a drive on my computer to a server in the other forest by using the 'Connect using different credentials' option in 'Map ...
0
votes
2answers
1k views

Query Active Directory UID attribute

I am trying to get a list of UIDs (NIS attribute). The problem is that UIDs are not in order. I would like to define a range and check if an account exist with that UID and if it does then get me the ...
0
votes
1answer
2k views

Permissions for SCCM Service Account

Does anyone know what is the least privileged Active Directory security group needed for the MS-SCCM 2012 service account to do software updates via Configuration Manager? ConfigMgr runs fine with ...
3
votes
2answers
5k views

Groupmapping does not work for AD groups

We have an ActiveDirectory where we get our users from. So authentication on the linux machine works over pam. We managed this part to work so far, but we need all users to be part of the local group ...
0
votes
2answers
1k views

Is there a way to mount a Windows CIFS share and bypass the password prompt without a password file?

I'm trying to mount a Windows cifs share (shared by Windows) onto a CentOS box, per user. Users are all in Active Directory. So, every user who logs into their Linux box should be mounting the drive ...
0
votes
1answer
2k views

Server 2012 stopped accepting computers joining to our domain with error 53: the network path was not found

We have Windows Server 2012 R2 Standard as our DC. Several workstations were added to our domain successfully. But then (I cannot determine what exactly could be a show-stopper) it stopped accepting ...
1
vote
1answer
2k views

“HTTP 503 - Service Unavailable” when trying to access ADFS password change page from an external network

I'm using ADFS 3.0 federated domain (SSO with Office-365) and I've successfully set up the password change page to work from any workplace joined device. I'm currently trying to set it up to be ...
13
votes
8answers
17k views

Set DNS host name for managed service account?

The documentation contains the example: New-ADServiceAccount service1 -DNSHostName service1.contoso.com -Enabled $true This parameter is required. What exactly is the purpose of a DNSHostName and ...
0
votes
1answer
2k views

Can an Exchange Online distribution group be configured to forward mail to it's users alternate email?

I've been trying to figure out how to create a distribution list containing personal email addresses for all our staff. This could be done by adding each staff member as a mail contact with their ...
5
votes
1answer
4k views

Cross-Realm trust verify failed with 'netdom' command

Question 1: Am having my ActiveDirectory in Windowsserver 2012 machine - its domain name is AD-DEMO.LOCAL Kerberos admin-server is in another Ubuntu machine - its realm KERBEROS.COM Added trust in '...
-1
votes
1answer
94 views

Resolving external address when Active Directory Domain ends in .com

Prior IT support named a customer's Windows 2016 AD domain example.com instead of example.local, as I've always done it. The customer has an external Apache web server hosting www.example.com. When a ...
4
votes
2answers
2k views

Allowing Domain Users to run winrm commands

Currently i have a AD/Kerberos Configured on one EC2 instance(Windows 2008 R2) and created couple of users. Each of the users has administrator privileges. When We login as a non-domain Administrator, ...
0
votes
0answers
86 views

Active Directory Certificate Services ERROR_LOGON_FAILURE

I have found in event log following entries (event id 66): Active Directory Certificate Services could not publish a Base CRL for key 1 to the following location: file://\pki.my.lan/pki/Root CA(1)....
7
votes
2answers
407 views

How to plan an Active Directory domain rename without it killing me?

It's looking more and more like I'll have to rename my Active Directory domain. There is a well-known process for making this change, including some very good answers on Server Fault already (like ...
1
vote
0answers
25 views

What should I take into consideration when creating AD users in PowerShell?

The current way AD users are created is: The employee determines which department the new hire is assigned A current user from that same OU is copied to create the new user The problem with this ...
8
votes
1answer
136 views

Shutdown script doesn't run if workstation is not connected to the network

I have a requirement to run a batch script every time a system is shut down, no matter if the computer is connected to the network or not. (It shouldn't matter for the question, but the script in ...
4
votes
1answer
2k views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
2
votes
2answers
162 views

Unable to delete Active Directory user

I have one particular AD user, nothing really special about them that I'm aware of, that I'm unable to delete. The error is the "You do not have sufficient privileges to delete..." with the CN data ...
0
votes
0answers
14 views

Autofs Windows Active Directory users home directory to rhel that only they can see it

I have a client that has two groups with different users on a Windows Active Directory, they also have a rhel machine with sssd authentication that the users will do the authentication on the AD ...
0
votes
1answer
1k views

Problems with DNS and IPv6 on Server 2012 and 2016

I manage hundreds of servers for many customers. Most are SMB segment, having 1 to 3 servers per customer max. In past few weeks I get more and more frequent DNS errors on random domain controllers, ...
1
vote
1answer
2k views

Activating Windows 7 with MAK passed in Unattend.xml via WDS

I have configured WDS to deploy a Windows 7 Pro image (Volume Licensed) and I'm using an unattend.xml file for the configuration. The only problem I'm running into is activation. I'm passing a MAK ...
4
votes
1answer
5k views

Secure channel trust verification fails

Working on an issue with setting up a trust between two domains with several firewalls in between, and a pinhole routing between two servers in them. newdc.newdomain.com is a 2012 server in a brand ...
2
votes
1answer
2k views

Samba share, local group, AD users

I have a Debian 6 system running Samba 3.5.6 that has been successfully set up to authenticate against an Active Directory domain (via SSH that is). I have a directory (let's call it /foo) that I want ...
0
votes
1answer
2k views

Exchange Server 2013 has dependency on old PDC

I am in the process of completely upgrading a Exchange 2007 system running on server 2008 R2 Hyper-V VMs hosted on a Exchange 2008 R2 domain controller. It had all the FSMO roles on it, and it was the ...
1
vote
2answers
673 views

How to debug PowerShell Scripts which are executed via GPO during startup?

I have a Powershell Script which install and updates Software via the Windows Package Manager Chocolatey. If I execute my PS-Script as a user, everything is fine. So there has to be another issue ...
1
vote
1answer
8k views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
0
votes
2answers
3k views

Cannot connect to domain error: The format of specified network name is invalid

I cannot connect clients to sbs2003 domain because of this error: The format of specified network name is invalid. Before that there is a prompt for a login and password, so the server is found. I ...