Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

0
votes
1answer
39 views

Public DNS conflicts with Networks internal DNS [duplicate]

we are focussed on building websites/webservices for quite a few years now and right now in discussions with the company which manages a companies network. I just can't believe what they are telling ...
2
votes
1answer
119 views

Active Directory Authentication Through a Trust and Querying For Users From Trusted Domain

Domain A (Forest Tree Root) (Primary Domain) Domain B (Direct Outbound) (Direct Inbound) There is a two way trust between the two Forests Domain A/B. This scenario is used to connect two companies ...
3
votes
1answer
98 views

Cannot connect to Remote Desktop with Windows Hello PIN

When I try to connect to an intranet machine, it only works if I specify domain credentials. When I use Windows Hello pin, it fails with this message: An authentication error has occurred (Code: ...
0
votes
1answer
20 views

VPN user account looked again and again

i have issue in my Active Directory involvement there is issue with VPN user user use network drive for document sharing in my Org i reset user password many time but account looked after 5-15 ...
0
votes
1answer
23 views

Do I need “Denied RODC Password Replication” on Master domain controller using Samba Active directory

We are using Samba Active Directory 2:4.7.6 on Ubuntu 14.04.5 LT We have only one domain controller, and it is not remote (it is inside the controlled, non-WAN-accessed subnet). However, as is the ...
0
votes
1answer
47 views

How to configure the DNS in AD to return local addresses for some names in a domain and use the external DNS for other names?

I am relatively new to Active Directory. In the LAN, we need to return some local addresses for some names but for some other names, we just want to get the IP as-is from the external DNS. Example:...
1
vote
1answer
39 views

Kerberos shared secret key creation

There are 3 things that I don't fully understand about kerberos. Let's say that we are adding new server to an AD Domain. KDC creates a shared secret for this server and how is this key send securly ...
4
votes
0answers
31 views

Moved AD Connect to a new server and now end-users are getting errors when replying to internal emails in Outlook

I moved my Microsoft AD Connect install from one server to another today. I installed AD Connect on the new server in staging mode, turned on staging mode on the old server, turned it off on the new ...
2
votes
1answer
88 views

MS Exchange 2013 Unified Messaging issue, or really an AD issue?

Where to begin... I'd like to first admit that I am not an seasoned Exchange tech. Second here is the environment: (2) 2008 R2 DCs and (1) 2012 R2 MS Exchange 2013 server - other Exchange servers were ...
2
votes
0answers
58 views

Windows domain username formats? NETBDOMAIN\USERNAME and DNSDOMAIN.COM\Username?

I'm running into issues with authentication and mapped network drives across a VPN tunnel. Namely error messages related to not being able to find a domain controller. I suspect this is somehow ...
1
vote
0answers
70 views

OpenLDAP Proxy to AD - userPrincipalName as BindDN

I've setup OpenLDAP as AD proxy according to: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
0
votes
1answer
94 views

OpenLDAP userPrincipalName as BindDN

I've setup OpenLDAP as AD proxy according to: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
0
votes
0answers
14 views

Using a Windows Authentication protocol on a remote site without local domain services

The scenario is domain-A is a Windows domain with hybrid AD services, including on prem AD, ADFS and Azure AD with the possibility of adding Azure AD domain services. Domain-B has no Windows domain ...
1
vote
1answer
39 views

List AD Users that are part of Group Membership but in specific OU

I am trying to list AD users that are a member of a specific group but i need to search one ou at a time Get-ADGroup 'GroupName' | Get-ADGroupMember
0
votes
1answer
3k views

Unable to connect Windows Server 2012 R2 to a Domain Controller. Getting Error

I am unable to connect Windows Server 2012 R2 to a Domain Controller. Getting Error, An Attempt to Resolve the DNS name of a domain controller in the domain being joined has failed. Please verify the ...
2
votes
1answer
52 views

browsing to AD domain displays sysvol from remote DC

Five-site company connected with low-latency layer 2 or IPSec tunnels, 2 DCs at each site. I have noticed that browsing to \\domain.tld often displays sysvol/netlogon shares from a remote DC. The ...
0
votes
2answers
63 views

Machine Account Password Resets on server and invalid Kerberos tickets on client

According to this TechNet article https://blogs.technet.microsoft.com/askds/2009/02/15/machine-account-password-process-2/ Machine Accounts (Computer Objects) reset internal passwords every 30 days. ...
1
vote
0answers
12 views

Connecting HP EWS To Active Directory

I have a HP LaserJet 500 color MFP 575 running Futuresmart Firmware 4.7 that I am trying to connect to my Windows Domain through Windows Sign-in/Kerberos. I put in the Domain Name and the Trusted ...
1
vote
1answer
40 views

Samba and router DNS setup with custom DNS

I would like to use samba on ubuntu 16.04 as an AD DC. I use custom DNS servers (OpenDNS). How should I set the DNS settings up? (e.g. my router's address is 192.168.1.1, the server is 192.168.1.2). ...
1
vote
0answers
32 views

AWS VPC EC2 Setting AD DNS Custom DNS for instance running in another VPC

Here is my scenario: 1. I have two peered VPCs VPC1 which is running Active Directory integrated DNS Service with my domain as example.local. There is another VPC2 which has both VPC DNS with ...
1
vote
0answers
23 views

Exchange Online - how to manage no-longer synchronised account?

So we've got a setup of on-prem AD and EX Online. They are synchronised by aad connect and we've expanded the schema in AD, so we have the attribute to hide users from GAL. Now, we've parted with a ...
1
vote
1answer
88 views

Kerberos authentication to root domain in Active Directory

I have an environment in Active Directory that is composed of a root and a child domain, let's call them my.root.domain.com and root.domain.com I have a RHEL7 server I've spun up which has no problem ...
1
vote
1answer
46 views

Using PrepareSchema on existing Exchange 2007 Server - Mailboxes have PROTECTED INHERIT flag

I was trying to create a new Receive Connector on my older Exchange 2007 SP3 server (planning underway to upgrade later this year) and when it failed I did some research. The solution I found Here (I ...
1
vote
0answers
58 views

Choosing the right Active Directory solution for my network

I currently manage my users "manually" on a network that began with 3 people and 3 computers. Now I have 4 users with their own computer, 4 computers used by parttime people and a second site in ...
1
vote
1answer
84 views

Use CHAP with NPS and a Domain Controller in Core

I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server. I have reproduct the problem ...
1
vote
1answer
24 views

Should the AD FS Federation metadata for a Relying Party Trust be publicly accessible?

If I am a relying party, I can expose federation metadata to ease configuration for AD FS so I can import it into the Create a Relying Party Trust wizard. I can also choose to enable automatic updates ...
0
votes
0answers
35 views

How to configure domain trust and DNS to share content with an external domain?

I have two domains (same LAN subnet) lab1.tld & lab2.tld I configured a one-way external trust (with selective authentication) for those domains plus a secondary DNS zone pointing to the "opposite"...
0
votes
0answers
40 views

Issue with DC on different sites not replicating

I have a topology with 2 sites (SiteA and SiteB). Sites are connected thru a VPN (OpenVPN network to network), every traffic is playing well (Ping, SMB, RDP, SSH, Web etc.) All DCs are running ...
0
votes
0answers
14 views

Domain group doesn't grant login permission for user from another domain with one way trust

Our company divided the internet into two domains in different network. Our accounts remain in the original domain but some of the servers are moved to the new domain. In order to login with our ...
0
votes
0answers
21 views

Can't resolve one way trust domain user by GUI but able to add it to group via command line

Our company divided the internet into two domains in different network. Our accounts remain in the original domain but some of the servers are moved to the new domain. In order to login with our ...
1
vote
0answers
41 views

How Can I Prevent Windows Server 2016/AD Installation from Adding TLDs Like .local to My Domain Name?

In a few days I have to reinstall a Windows Server 2016 Essentials instance on new hardware and would like to avoid an annoyance that cropped up in the initial install a few months back. To make a ...
0
votes
1answer
17 views

adding user from sub domain to parent domain via command line

I have domain admin account of root domain(prime.server.local.net), i want to add a new user remotely using cmd.exe or powershell.exe to main domain (prime.server.local.net) from a windows machine ...
0
votes
0answers
24 views

server 2003 active directory users numbers

I would like to find all used/disbale accounts of the active directory, so I need to see the last access to the domain. I looked into the user properties but I did not find anything. Where can I find ...
1
vote
0answers
66 views

MSSQL Server 2017 on Centos - AD auth - SSPI handshake failed

We have SQL Server 2017 installed on CentOS and connected to domain according to this tutorial - https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-active-directory-authentication?view=sql-...
1
vote
3answers
45 views

Azure AD Connect remediation for O365 (how to setup test domain?)

I need to stand up a test domain to try and fix accounts that have been synced into AAD. I have had zero experience with Azure AD or O365, so I'm not sure how to proceed. A previous admin setup our ...
0
votes
0answers
59 views

Error 1202: 2016 AD servers

I have 3 2016 AD servers, AD level 2012. From the beginning: I noticed they were not updating from WSUS. As I tried to correct this, I noticed I was getting 1202 errors and when I ran ...
4
votes
2answers
66 views

If a Contact is Created in AD, Will that Cause the Creation of a Contact in Exchange?

If a contact is created in the AD, will it automatically be created in Exchange as well? Windows Server 2008 R2 environment On-premise Exchange 2010 hybrid with O365 Exchange is on secondary DC AD ...
0
votes
0answers
57 views

AD Connect, Different UPN and email address

I have a domain where the email addresses are different to the UPN's. So in AD, I have a UPN of john.surname@domain.com and in Office 365, I have a UPN/email address of john@domain.com. I would like ...
1
vote
0answers
50 views

AD domain rename problems, can't add server of the same name

I have inherited an active directory domain controller, and after adding a number of servers I found that I couldn't add a server with a specific name. I since found out the admin who built the ...
0
votes
1answer
48 views

Change FQDN of domain controller (and other hosts)

Is there a way to change the fqdn of my Active Directory domain controller and other hosts in the domain? Currently, my domain controller is called dc1.domain.com, and I'd like it to be dc1.site1....
2
votes
2answers
78 views

AD issue with Svr 2012 R2 DC: cannot join XP VMs to Domain, but Win7, 8 and Win10 VMs can join

Domain Controller is a physical server running Windows Server 2012 R2. FF Level is 2008 R2, DF Level is 2012 R2. However, I found a MS article that states XP is fully compatible with even a 2012 R2 ...
1
vote
0answers
50 views

Windows Server 2008 R2: Local account users can log into server without using “.\”

We have a small, standard Windows domain, two DCs with a couple of member servers. On our 2008 R2 member servers, local admin accounts can log into the machines WITHOUT having to put the ".\" in front ...
2
votes
1answer
224 views

How to make the Default Domain Policy apply to the domain?

We have a domain, and it has a default domain policy that has existed for 16 years (since 2003): I just realized today that this policy, with all its policies, are not being applied to any users or ...
1
vote
0answers
144 views

Authenticate AD user after joining CentOS 7 to Active Directory Domain

I am trying to join a CentOS 7.5 to a Windows Active Directory Domain for authenticating AD users. Although, the joining process has been successful, I'm unable to authenticate any users though. ...
0
votes
1answer
69 views

How to disable unauthenticated binds in Active Directory(2016)

How to disable unauthenticated binds in Active Directory(2016). I followed up this approach: https://lithnet.io/blog/2018/12/disabling-unauthenticated-binds-in https://lithnet.io/blog/2017/01/ad-lds-...
0
votes
2answers
142 views

Upgrade windows server HDD without losing any data in RAID1

I have a Windows Server 2012 R2 installed on a system with RAID1 setup which has several services running like Active Directory, etc.. It has 500 GB hard disk as of now. Now we want to upgrade the ...
2
votes
1answer
71 views

How to get info of other domain in active directory?

I want to learn How can we get the info of other domain while they have in trust? Forex:- a.com trusts b.com and b.com trusts a.com and I compromised a.com then Is it possible for me to retrieve info ...
-1
votes
1answer
69 views

Prevent software installation for Domain Users

Please, I was wondering how may can I block normal Domain Users from installing software but I can install using Administrators accounts (it's just like needs elevation before install) using GPO's? I ...
0
votes
2answers
44 views

Disabled users are not succeeding authentication via ADFS + Multi-Factor Server

We are using the on-premise version of Azure Multifactor authentication. When I authenticate through ADFS it's forcing every user to use MFA even though I have disabled users to succeed ...
0
votes
0answers
36 views

Can't connect from any active directory Windows PC to a Samba share with IP address, only with host name

Ok, this one is a bit surreal: We have an all Windows network with Active Directory that has the domain controller server, a file server and a database server. Recently we had to add a SUSE ...