Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

25
votes
7answers
26k views

What causes a workstation to lose trust with the domain controller?

I've received the error several times on Windows 7 Workstations and Laptops where it loses trust with the domain controller, and I know how to fix it, but why does it do that?
0
votes
0answers
5 views

LDAP/TLS authentication off of the network

My client has their own network. My network hosts their web app. They want to be able to authenticate using their AD. I have a website in house that authenticates via ldap locally. Would ldap over ...
2
votes
0answers
186 views

Windows NFS Client Tools Doesn't Follow manage-gids

I am running into an issue with the Windows NFS Client tools, it seems that when I attempt to access a folder on an NFS share that has read permissions for a group that user is member of - but not the ...
1
vote
0answers
14 views

How to allow AD group to access and manage IIS sites and pools?

i manage actually a domain with around 34 IIS servers running webapplications. I would like to get a better user right management in my domain. For the moment, my users allowed to manage IIS ...
0
votes
1answer
157 views

Can Alfresco join a domain (or use cifs without typing passwords)?

I have a windows 2012 domain. I am trying Alfresco 5.1 COMMUNITY that should be able to show windows servers a passwordless cifs share. I first would like to ask if it is really possible. Then I would ...
0
votes
1answer
27 views

Can a active directory group be administered by itself?

I was wondering if an active directory group can be administered by itself. Unfortunately I have no access to an active directory setup -as administrator- to do the test by myself.
0
votes
0answers
13 views

Audit resources in Windows Server 2008 [on hold]

I am trying to audit the different resources of my server with Windows Server 2008 but no related option appears, only to audit the server locally. I know that to audit the server is worth the ...
0
votes
1answer
34 views

Backup and Restore Active Directory Users and Computers Without Full AD Restore

Before I begin, I will be the first to admit that much of you this problem stemmed from failing to follow best practices pertaining to deployment and disaster recovery of AD servers. Much has been ...
-1
votes
0answers
12 views

Defunct Windows Domain and Linux (NAS4Free)

Ok nerds, I have a good one for you. I'll preface by saying that I already know the CORRECT way to handle this, but I'm looking for an answer to the incorrect way to do this (aka the easy way). I ...
0
votes
1answer
4k views

What is a non-interactive service account?

Trying to get a clear understanding of what makes a AD domain service account non-interactive and how this is done? I require a service e account with "logon as a service" and "logon as a batch" for ...
2
votes
1answer
94 views

AD: Unable to perform remote desktop logon

For my users in Active Directory, I did setup a GPO in order to allow the remote desktop connections. For a specific user in particular, I did also manually setup the group membership for Remote ...
0
votes
1answer
2k views

Unable to retrieve users from AD on VMWare vcenter

I have added the AD successfully from the vcenter console and also configured the Single Sign On. When I try to retrieve the users from the AD, I first set the domain in the Users and Groups tab, ...
0
votes
1answer
1k views

Active Directory Domain Services on remote VPS

I really need help with configuring Active Directory Domain Services on a remote VPS. Situation we have a remote Windows Server 2008R2 VPS and i just installed the Active Directory Domain Services ...
1
vote
1answer
2k views

NFSv4 + SSSD + Active Directory: 'nobody' permissions when ldap_id_mapping disabled

I'm attempting to configure NFSv4 with KRB5 authentication in accordance with RedHat's current recommendations, using SSSD to access Active Directory. The NFS server in this case is a NAS appliance, ...
0
votes
0answers
17 views

Active Directory full forest recovery - Doubts about obscure sentence in MS documentation

I am trying to apply and test best practices about Active Directory full forest recovery as warmly advised in “Best Practices for Implementing Schema Updates or : How I Learned to Stop Worrying and ...
4
votes
4answers
41k views

How to Get IP Addresses of Computers In Active Directory Domain

I'm not even sure if this is the proper approach but I have a number of computers on our school network (domain) that I need to report the IP addresses for. All of these computers are contained in a ...
1
vote
1answer
34 views

Is it possible to choose which objects get synchronized in AWS Managed AD?

In Azure AD Connect Sync, it is possible to configure filtering. This is described as: By using filtering, you can control which objects appear in Azure Active Directory (Azure AD) from your on-...
0
votes
1answer
2k views

Linux SSSD with two AD Domains

I Joined my Centos Box to a Windows Active Directory Domain with realm join --user=DomUser dom2.local Without any Problems. The Domain hast a one-way Trust relationship to Dom1. Our Windows Users ...
0
votes
0answers
53 views

Domain Controller dropped from domain

While in the process of making some changes in my environment I set up a new Domain Controller (2019) and promoted it, did some testing and verified it was working properly. I demoted my old DC (2016) ...
1
vote
0answers
14 views

syncronization from active directory to azure

I have created an user but with some errors, error on smtp: SMTP SIP etc... I changed it on Active Directory OU sync to azure but the values set after creation on office 365 and exchange is still the ...
0
votes
2answers
2k views

Insufficient quota exists to complete this operation, net ads join

I'm trying to join Active Directory in Xubuntu 16.04 in a enterprise business enviroment so I'll change the name of my REALM by MY.EXAMPLE.CORP. My issue is: when I run net ads join -U Administrator ...
0
votes
1answer
25 views

Nesting Email Distribution Groups into job code Groups

My company wants to create job code groups. A single group for a single job code. For example, if Bob is a courier, the only groups he will have is the "Domain User" and Courier. Couriers are part of ...
0
votes
1answer
930 views

Can't connect to WinRM on Domain controller

I have set up a domain controller server on Azure with Windows Server 2016. Now I want to connect to this server using PSSession. WinRM is enabled, all firewall rules are ok, inbound rules on Azure ...
0
votes
1answer
2k views

Server 2012 AD-DS Setup Fails (Microsoft.Directory.Services.Deployment.DeepTasks.DeepTasks not found)

Good Morning everyone, I am currently trying to promote my 2012 Server to a Domain Controller but when I am at the first step in the setup I get the Error Message (German, Original Message): [...
5
votes
1answer
4k views

Debugging a timeout with ldap auth on apache

I'm trying to debug a timeout problem I have with Apache, for some months now. The pattern looks like this: On every first request of a new session (or after some time after the last request) the ...
2
votes
1answer
2k views

New-ADGroup with Multiple -OtherAttributes?

Keep getting "The Paramater is Incorrect" I think im following microsofts method correctly but its not working, any help is greatly appriciated. New-ADGroup -DisplayName $name -...
1
vote
3answers
3k views

How do I prevent 'net ads join' from doing DDNS update?

I'm using 'net ads join' to add Linux servers to an AD domain. The servers are multi-homed, with a public IP on eth1 and a non-routable private background network on eth0 (in the 172.20 space, used ...
0
votes
1answer
927 views

DHCP in router with AD, DNS and DHCP in one Server

My Lan is working fine 5 switches connected to core switch and have a router, DHCP configured in the router, network 10.10.10.1, 10.10.11.254 -- Mask 255.255.254.0 -- d.g 10.10.10.1 (Router IP).DNS 8....
0
votes
0answers
12 views

When does WinNT:// provider query Active Directory? Or how to get SID of local group member if it is domain account

Okay so I am using the WinNT provider with a .Net DirectoryEntry class to enumerate the members of a local group, through the Members property. If the member is a local account, the DirectoryEntry ...
0
votes
1answer
7k views

Windows 2008 Web Enrollment Fails The RPC server is unavailable. 0x800706ba (WIN32: 1722)

I am setting up an RA and a Subordinate CA who is also an AD. I can issue certs through certutil and the mmc snap-in with no problem. But when I try using Web Enrollment in the RA, it fails saying "...
0
votes
1answer
455 views

LDAP Query to find ALL managers of a user

Is it possible, using LDAP filter syntax, to retrieve all users a user is subordinate to, based on the 'manager' attribute? For example, Bob is John's manager Alice is Bob's manager Dave is Alice's ...
2
votes
1answer
1k views

What does an alias group means in SID context?

Reading https://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html, I found out that there exists an alias for groups. But what does this alias mean? Does it means that it is ...
0
votes
0answers
7 views

SCOM - report on failed logons on workstations

I have been asked to create a report that gives us the following data in a SCOM report and export to .csv: Timestamp Workstation Account Name Status and Sub Status Codes I know I'll have to work ...
0
votes
2answers
36 views

AD CS - OID for root and issuing CAs

I am willing to install a Root CA and an Issuing CA with AD CS for my private environment (test purpose). Do I need to obtain public OIDs (i.e. from IANA) or can I skip this requirement since my CAs ...
0
votes
0answers
15 views

dirsync query shows changes to an AD object that doesn't appear to exist

AdamSync is crashing periodically. In troubleshooting we found that it's throwing an exception when it encounters what it thinks is an empty DN. I replayed the query using the dirsync cookie stored in ...
1
vote
1answer
62 views

How to issue a windows machine cert for a non-domain joined computer?

I have a Windows Server 2012 AD/CA and domain joined computers automatically receive the CA public cert and also get a computer certificate generated and pushed using GPO auto-enrollment. All of this ...
1
vote
1answer
48 views

Do AD GPO's affect workstations if nobody is logged in?

I have a few computers on the domain that misbehave. (don't appear to follow GPO despite RSOP readout) One issue in particular is a computer that seems to hang/sleep/comatose when nobody is logged ...
3
votes
4answers
246 views

AD: OU for system administrator accounts

Just a simple question: Does it make sense create a dedicated OU in Active Directory for system administrators (including domain controller admins)? Are there drawbacks following this approach? Is ...
2
votes
7answers
630 views

Additional login security - windows domain user

Lets say you don't want anyone to be able to log into your windows profile. I like to save passwords in my web browser. However, I'm not the only one who has a domain admin account. Someone else can ...
0
votes
2answers
30 views

Change requirements for resetting user password via AD Users&Computers

I know we can set password policy for how users can define their passwords. But is it possible to define the required complexity when an admin resets the password via 'AD users and computers' reset ...
0
votes
0answers
28 views

How to audit what are the anonymous binds made from my server?

After an audit, I am trying to identify the applications generating anonymous binds on the Domain Controllers before the remediation happens. So far, we only have the DCs logs, and that doesn't ...
-1
votes
0answers
17 views

Adding SLES 12 (Linux) Server to Windows Domain Creating DNS Entries [closed]

Can anyone suggest how can I avoid Situation that when we add linux server (with multiple IPs on it) to domain creating dns entries with all IPs
0
votes
1answer
2k views

Application Error 0xc0000142 on Windows Server 2008 R2 after crash

Our server crashed a few days ago, cause was a HDD failure. The server seems to be almost fully functional (except that the Exchange DB is corrupt now, but that's another story) The main problem now ...
2
votes
1answer
2k views

Allow only root and domain group to login on Linux server

I have successfully installed PBIS-open to authenticate against active directory. I also used the /opt/pbis/bin/config RequireMembershipOf command to allow a certain domain group to login. I would ...
2
votes
0answers
26 views

Domain-joined computer doesn't have Domain network profile

One computer in our domain suddenly shows only Private network and Public network profile. It's probably connected to some update, when also network adapter name changed from "Intel Ethernet ...
1
vote
0answers
27 views

Azure Directory Migration [closed]

I need some guidance and assistance on the following issue: My Actual Scenario Azure Subscription: my_sub Azure Directory: dir_a Active Directory: ad_a Middle Step Scenario Azure Subscription: ...
0
votes
1answer
80 views

How to get Linux commands history in Splunk without Splunk Forwarder?

We have tons of Linux machines which are all connected to Active Directory (AD). AD logs are being pulled in Splunk. Is there a way to get the command history of all Linux machines in Splunk from AD ...
0
votes
2answers
3k views

Powershell - how can i list both username and group membership for users of a named group?

I am relatively new to powershell and I have two statements on the cmd line: get-adgroupmember <group name> | select-object name,samaccountname To produce a nicely formatted table with two ...
0
votes
2answers
2k views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
1
vote
2answers
702 views

Exchange is crashing our domain controller

So here is an interesting problem. Over the past few days we have been migrating from an unreliable DC runnign server 2008 to a new DC running server 2016. We have moved ADDS, certificate services, ...