Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

2
votes
1answer
95 views

How do you setup an NFS4 server that utilises Kerberos authentication from an Active Directory KDC using CentOS Linux release 7.6.1810 (Core)

How do you setup an NFS4 server with Kerberos from Active Directory? I can install and configure an NFS4 server and connect to it, but I can not get Kerberos to work under any circumstances where the ...
0
votes
1answer
81 views

Security Groups in Exchange Distribution Groups?

We do have a case where we would like to setup an Exchange distribution group (created using New-DistributionGroup with closed joining and leaving) in order to easily reach multiple teams. Adding ...
2
votes
1answer
80 views

Folder Redirection: What does the “Also Apply Redirection Policy…” setting do?

When implementing Folder Redirection via Group Policy, there is a checkbox on the Settings tab that says "Also apply redirection policy to Windows 2000, Windows 2000 Server, Windows XP, and Windows ...
1
vote
1answer
94 views

Odd Behavior of DNS forwarding with SRV record resolution

I'm running into a weird problem while setting up a new SAMBA AD DC on my network. I've got the DC itself up and running and checked on the server that I am able to resolve the DNS name of the server, ...
2
votes
1answer
49 views

Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)

Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
0
votes
2answers
79 views

Avoiding security groups in Windows domain with automated filesystem security

As far as I understand, best practices recommend that security groups are used with a Windows domain to assign permissions over files and folders. That is, you should create groups in Active Directory,...
0
votes
0answers
28 views

How to join linux pc to active directory in specific ou with authconfig

I use authconfig command to join linux computers to AD How do I specify which OU they go in? I llook at authconfig --help but not see antyhing\ Can I use --ldapbasedn=<dn> to select what OU ...
-2
votes
1answer
43 views

Can I add a Microsoft Account to my Windows Server Core? (WITHOUT domain nor domain controller) [closed]

Can I use Microsoft accounts in my Windows Server Core virtual machines as we can do with Windows 10 without domain controller role or additional magic?
1
vote
1answer
73 views

Several Audit Failures Messages in the Event logs with Even ID 4625

We have 3 VM's (All win 2012 R2) deployed on Azure. Today i noticed that since Dec 9th, there have been several Logon Failures messages getting logged in the Security logs on all the servers. It ...
2
votes
2answers
150 views

Bitlocker - “Recovery information was successfully backed up to Active Directory”, but not really?

I have a device that needs to have its' bitlocker recovery backup up to AD for visibility in the "Bitlocker Recovery" tab of the object in Active Directory. I found that the device only had a TPM ...
2
votes
1answer
41 views

Accessing an Active Directory DC using the domain name

I have a domain (myDomain.com) set up with Active Directory and 3 DCs (serverA, serverB, serverC). Each DC has a set of shares, which are accessed via UNC, such as \\server1\share1. Today I noticed ...
1
vote
1answer
253 views

Audit failed login attempts to domain on Active Directory controller

I want to get information about all failed login attempts on Active directory server. I already changed these policies on AD controller: And disabled Audit: Force Audit policy subcategory settings (...
7
votes
2answers
316 views

How to plan an Active Directory domain rename without it killing me?

It's looking more and more like I'll have to rename my Active Directory domain. There is a well-known process for making this change, including some very good answers on Server Fault already (like ...
1
vote
1answer
80 views

Empty SYSVOL share

After a restore, my standalone (Yes, I know, horrible practice, I shot myself in the foot, etc.) Windows 2012 R2 domain controller no longer has data in the SYSVOL share. Immediately after the restore,...
1
vote
0answers
52 views

dsget the users in a group, or member groups

I am using the chain of commands to get a report of the members of group AD_GROUP_NAME. dsquery group domainroot -name AD_GROUP_NAME | dsget group -members | dsget user -display -email And it ...
0
votes
0answers
70 views

OU Name with 'slash' in title “suddenly(?)” rejected by Exchange 2013/0365 Hybrid

We recently migrated from Exchange 2007 to 0365 Hybrid with a 2013 server on-prem. I'm reasonably sure I've made changes to users in the 'Web/IT' OU since the migration and not run into this error, ...
1
vote
1answer
118 views

Enterprise Admins don't have admin permissions in child domain

I've built a forest for testing consisting of a forest root domain and two child domains. Enterprise admins in the root domain don't seem to have admin privileges on member servers in the child ...
-5
votes
1answer
80 views

AD PDC and SDC domain [closed]

We have PDC and SDC on our network. I need clarification if our PDC server fail due to server fault, how to make SDC as acting PDC. What is the purpose of two DC's on same network. If PDC fail SDC ...
0
votes
1answer
119 views

Macs on Active Directory. Password policies not being enforced

Okay. Fundamentally, I've just started a new job where all of their IT support is outsourced. I've come in and realised password policies just aren't being enforced on any OS X machine in the building ...
0
votes
0answers
66 views

SSSD authenticate against parent domain

Ubuntu 18.04 LTS, sssd 1.16.1 I have a Linux server that is joined to a AD child domain via 'realm': realm join dev.example.com I am able to authenticate with users in the dev.example.com domain (i....
0
votes
1answer
105 views

Problems with clients for secondary dns server

Good evening! Im trying to make a high availability environment on my work, in order to do that I setup a little lab installing 2 servers; one with WS 2008 R2 and the other with WS 2012 R2 (same as ...
0
votes
0answers
37 views

Assigning third-party client certificates/keys to Active Directory users

In our organization, we have a number of third-party vendors that we must interact with using client certificates. We'd like to be able to assign certificates/keys to a particular Active Directory ...
0
votes
1answer
22 views

Windows 2012 AD user failover to AWS Windows AD

We're having a bit of an issue with our local Windows AD not failing over to our AWS hosted AD. We have web portals for our support staff to log into with AD credentials. When our on-premise AD "...
1
vote
1answer
118 views

Setting 'Run-Protect-Admin-Groups-Task' Extended Right

I modified the security settings on the AdminSDHolder object in my domain and takes a very long time to propagate the settings to my admin users. I tried run runProtectAdminGroupsTask manually, but ...
0
votes
0answers
27 views

Active Directory Web Services has resumed checking if the computer is a GC error

I have two Domain Controller server 2016 that the second one is an additional DC. I'm getting the following error in additional dc : Active Directory Web Services has resumed checking if the computer ...
0
votes
1answer
35 views

Deny RDP access to specific server from a particular user via GPO

I have a security issue. How can I deny RDP access to a specific server(critical server) for a particular Active Directory user using a Group Policy Object (GPO) ?
0
votes
1answer
38 views

LastLogonDate AD property for computer object - how often is it refreshed?

I was not able to find any good enough information about this. How often should this value be refreshed for windows servers which are online all the time? Seems like it's many days?? example to get ...
1
vote
2answers
59 views

Windows Server Domain Controller without real domain

I'm setting up a local logon server, simply to handle user logons and enforce some group policies. Ideally we could do with not pointing a genuine domain to the server. Is there any way of setting up ...
-2
votes
2answers
26 views

How to identify that the protocol is using by AD DC is Kerberous?

I have created a local environment as follows:- DC:- Windows server 2008<br> Client:- Windows 7<br> Domain:- januapp.local Now I read on somewhere that, the DC uses two types of Protocol ...
1
vote
2answers
41 views

AD new user account: create from scratch or copy existing user?

I can't seem to find a consensus for this online. My colleague who is writing our documentation has put that it is "best practice" to create our AD accounts new and from scratch....I have never heard ...
0
votes
0answers
18 views

How Kerberous works when using an AD with three domains, one is root and others are Child?

Assuming an AD has one root domain 'ROOT' and two Child domains 'CHILD1, CHILD2' then How a user in the CHILD1 domain can access the resource in the CHILD2 domain? ROOT is the root domain with the ...
0
votes
2answers
76 views

Generate/Sign certificates with the AD trusted root certificate?

I know that when an Active Directory domain is created: it creates it's own root certificate and that root certificate is automatically pushed into machines when they are joined to the domain You ...
0
votes
0answers
34 views

DNS client refuses to update Windows DNS server

Server 2016- DC and client Windows Integrated DNS Not sure why this is happening. I join a computer to AD and it updates DNS with its record. The IP changes on the client but the record never ...
1
vote
1answer
234 views

Creating a new AD LDS instance without the Setup Wizard?

Is the installation of a new unique instance of AD LDS (using either cmd or PowerShell) possible? All resources I can find online just use the Active Directory Lightweight Directory Services Setup ...
1
vote
1answer
42 views

How to distribute RDP certificates from ADCS to non-domain members?

I have a few hundred systems that are not AD-joined, for which I'd like to issue RDP certificates from an internal hierarchy (built with ADCS). I can do it manually, by generating CSRs, then signing ...
1
vote
1answer
38 views

Active Directory Domain name(s)

I've successfully created a test AD domain and joined several machines to it, for the purposes of this post I'll call the domain "TEST.COM". Everything seems to be working perfectly, except for one ...
4
votes
1answer
51 views

AD migration 2008 r2 to 2012 r2 - must've missed something

I finally went through with this the other day. Got DNS/AD setup, seized FSMO roles on the 2012 server, migrated DHCP etc. I thought I was ready to go so I turned off the 2008 server yesterday. ...
0
votes
1answer
187 views

Ansible & Terraform DNS creation on Active Directory with nsupdate

I'm trying to create a new DNS record on active directory with the nsupdate module. Both, Terraform and ansible works with key_name & key_secret. If I disable the secure only option on active ...
1
vote
1answer
45 views

How to fix broken secondary AD server?

My Secondary Active Directory server has gone dead, and I am installing its replacement now. Everything will be the same, computer name, IP, everything. The new server is running now, and ADDS ...
1
vote
1answer
28 views

Initialize RDP user, only via FTP

I have a rather unique issue, and was wondering if there's a simple solution to this that I am failing to find. I have a Windows Server 2012 instance running remotely, that I have no physical access ...
0
votes
1answer
59 views

/var/log/cron.log returning CRON[PID]: Permission denied for domain joined account

I'm trying to get a cron job to run, but not as root. Within the context of the user (domainuser@contoso.com), here are the outputs of the crontab and cron.log: Output of crontab -l # Edit this ...
0
votes
1answer
82 views

nslcd with domain.com and sub.domain.com

i'm trying to setup our linux server with nslcd within multiple AD Domains, example.com and sub.exmaple.com. The current setup with nslcd is pretty easy and works for the domain example.com: uid ...
2
votes
1answer
333 views

How DC authenticates when Client is not using any authentication?

I have a virtual environment with the following structure: DC: Windows Server 2008 Client: Windows 7 I installed Active Directory on the Windows Server 2008 and made it in domain januapp.local, then ...
-2
votes
1answer
35 views

Domain user cannot access to his shared folder after deleting that user

I've created an shared folder in domain and user was able to access that shared folder with his permission but after deleting that user he cannot access to that shared folder. I've created that user ...
1
vote
1answer
69 views

Switch Active Directory from Public IP to Private IP

I have an active directory and some servers running on public IPs Like ADS --> 62.xx.xx.210 Server joined ADS Team foundation server --> 62.xx.xx.211 SQL Server --> 62.xx.xx.212 Exchange ...
0
votes
0answers
96 views

office 365 enable AD sync after disabling

To me this is a rather weird issue, I've managed to complete exactly what I wanted to do, however, I'm now at the stage I want to enable AD sync again. The error I'm getting is as follows: PS C:\...
2
votes
1answer
277 views

Error when installing remote access role: There may be a version mismatch between this computer and the destination server

I am getting an error when I attempt to select the Remote Access role on a Windows 2016 Server. I have been unable to find this error mentioned anywhere. I am installing the role on the local ...
0
votes
1answer
87 views

Change password of new Windows domain user account without logging into the account?

I've got assigned an additional domain user account user2, with a password P@ssw0rd, that must be changed, before I can start using the account. I don't want to log into user2 from the Windows logon ...
0
votes
1answer
253 views

Ubuntu map CIFS / SMB share using active domain credentials without password file

Is there a way in Ubuntu 18.04 to map an SMB share when the users login without using a password file? The boxes I have are members of a Windows Active Directory domain and the users will use their ...
0
votes
1answer
317 views

Azure Connect “soft match” issues

Before I get into the details: my problem is clearly different than the one described in this question. I'm running a single Azure Connect instance, so the problem clearly isn't due to multiple sync. ...