Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

2
votes
1answer
63 views

browsing to AD domain displays sysvol from remote DC

Five-site company connected with low-latency layer 2 or IPSec tunnels, 2 DCs at each site. I have noticed that browsing to \\domain.tld often displays sysvol/netlogon shares from a remote DC. The ...
0
votes
2answers
77 views

Machine Account Password Resets on server and invalid Kerberos tickets on client

According to this TechNet article https://blogs.technet.microsoft.com/askds/2009/02/15/machine-account-password-process-2/ Machine Accounts (Computer Objects) reset internal passwords every 30 days. ...
1
vote
0answers
14 views

Connecting HP EWS To Active Directory

I have a HP LaserJet 500 color MFP 575 running Futuresmart Firmware 4.7 that I am trying to connect to my Windows Domain through Windows Sign-in/Kerberos. I put in the Domain Name and the Trusted ...
1
vote
1answer
51 views

Samba and router DNS setup with custom DNS

I would like to use samba on ubuntu 16.04 as an AD DC. I use custom DNS servers (OpenDNS). How should I set the DNS settings up? (e.g. my router's address is 192.168.1.1, the server is 192.168.1.2). ...
1
vote
0answers
64 views

AWS VPC EC2 Setting AD DNS Custom DNS for instance running in another VPC

Here is my scenario: 1. I have two peered VPCs VPC1 which is running Active Directory integrated DNS Service with my domain as example.local. There is another VPC2 which has both VPC DNS with ...
1
vote
0answers
24 views

Exchange Online - how to manage no-longer synchronised account?

So we've got a setup of on-prem AD and EX Online. They are synchronised by aad connect and we've expanded the schema in AD, so we have the attribute to hide users from GAL. Now, we've parted with a ...
1
vote
1answer
94 views

Kerberos authentication to root domain in Active Directory

I have an environment in Active Directory that is composed of a root and a child domain, let's call them my.root.domain.com and root.domain.com I have a RHEL7 server I've spun up which has no problem ...
1
vote
1answer
51 views

Using PrepareSchema on existing Exchange 2007 Server - Mailboxes have PROTECTED INHERIT flag

I was trying to create a new Receive Connector on my older Exchange 2007 SP3 server (planning underway to upgrade later this year) and when it failed I did some research. The solution I found Here (I ...
1
vote
0answers
58 views

Choosing the right Active Directory solution for my network

I currently manage my users "manually" on a network that began with 3 people and 3 computers. Now I have 4 users with their own computer, 4 computers used by parttime people and a second site in ...
1
vote
1answer
174 views

Use CHAP with NPS and a Domain Controller in Core

I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server. I have reproduct the problem ...
1
vote
1answer
34 views

Should the AD FS Federation metadata for a Relying Party Trust be publicly accessible?

If I am a relying party, I can expose federation metadata to ease configuration for AD FS so I can import it into the Create a Relying Party Trust wizard. I can also choose to enable automatic updates ...
0
votes
0answers
56 views

How to configure domain trust and DNS to share content with an external domain?

I have two domains (same LAN subnet) lab1.tld & lab2.tld I configured a one-way external trust (with selective authentication) for those domains plus a secondary DNS zone pointing to the "opposite"...
0
votes
0answers
51 views

Issue with DC on different sites not replicating

I have a topology with 2 sites (SiteA and SiteB). Sites are connected thru a VPN (OpenVPN network to network), every traffic is playing well (Ping, SMB, RDP, SSH, Web etc.) All DCs are running ...
0
votes
0answers
16 views

Domain group doesn't grant login permission for user from another domain with one way trust

Our company divided the internet into two domains in different network. Our accounts remain in the original domain but some of the servers are moved to the new domain. In order to login with our ...
0
votes
0answers
35 views

Can't resolve one way trust domain user by GUI but able to add it to group via command line

Our company divided the internet into two domains in different network. Our accounts remain in the original domain but some of the servers are moved to the new domain. In order to login with our ...
1
vote
0answers
58 views

How Can I Prevent Windows Server 2016/AD Installation from Adding TLDs Like .local to My Domain Name?

In a few days I have to reinstall a Windows Server 2016 Essentials instance on new hardware and would like to avoid an annoyance that cropped up in the initial install a few months back. To make a ...
0
votes
1answer
18 views

adding user from sub domain to parent domain via command line

I have domain admin account of root domain(prime.server.local.net), i want to add a new user remotely using cmd.exe or powershell.exe to main domain (prime.server.local.net) from a windows machine ...
0
votes
0answers
26 views

server 2003 active directory users numbers

I would like to find all used/disbale accounts of the active directory, so I need to see the last access to the domain. I looked into the user properties but I did not find anything. Where can I find ...
2
votes
0answers
134 views

MSSQL Server 2017 on Centos - AD auth - SSPI handshake failed

We have SQL Server 2017 installed on CentOS and connected to domain according to this tutorial - https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-active-directory-authentication?view=sql-...
1
vote
3answers
56 views

Azure AD Connect remediation for O365 (how to setup test domain?)

I need to stand up a test domain to try and fix accounts that have been synced into AAD. I have had zero experience with Azure AD or O365, so I'm not sure how to proceed. A previous admin setup our ...
0
votes
0answers
130 views

Error 1202: 2016 AD servers

I have 3 2016 AD servers, AD level 2012. From the beginning: I noticed they were not updating from WSUS. As I tried to correct this, I noticed I was getting 1202 errors and when I ran ...
4
votes
2answers
76 views

If a Contact is Created in AD, Will that Cause the Creation of a Contact in Exchange?

If a contact is created in the AD, will it automatically be created in Exchange as well? Windows Server 2008 R2 environment On-premise Exchange 2010 hybrid with O365 Exchange is on secondary DC AD ...
0
votes
0answers
113 views

AD Connect, Different UPN and email address

I have a domain where the email addresses are different to the UPN's. So in AD, I have a UPN of john.surname@domain.com and in Office 365, I have a UPN/email address of john@domain.com. I would like ...
1
vote
0answers
99 views

AD domain rename problems, can't add server of the same name

I have inherited an active directory domain controller, and after adding a number of servers I found that I couldn't add a server with a specific name. I since found out the admin who built the ...
0
votes
1answer
80 views

Change FQDN of domain controller (and other hosts)

Is there a way to change the fqdn of my Active Directory domain controller and other hosts in the domain? Currently, my domain controller is called dc1.domain.com, and I'd like it to be dc1.site1....
2
votes
2answers
218 views

AD issue with Svr 2012 R2 DC: cannot join XP VMs to Domain, but Win7, 8 and Win10 VMs can join

Domain Controller is a physical server running Windows Server 2012 R2. FF Level is 2008 R2, DF Level is 2012 R2. However, I found a MS article that states XP is fully compatible with even a 2012 R2 ...
1
vote
0answers
55 views

Windows Server 2008 R2: Local account users can log into server without using “.\”

We have a small, standard Windows domain, two DCs with a couple of member servers. On our 2008 R2 member servers, local admin accounts can log into the machines WITHOUT having to put the ".\" in front ...
3
votes
1answer
446 views

How to make the Default Domain Policy apply to the domain?

We have a domain, and it has a default domain policy that has existed for 16 years (since 2003): I just realized today that this policy, with all its policies, are not being applied to any users or ...
1
vote
0answers
237 views

Authenticate AD user after joining CentOS 7 to Active Directory Domain

I am trying to join a CentOS 7.5 to a Windows Active Directory Domain for authenticating AD users. Although, the joining process has been successful, I'm unable to authenticate any users though. ...
0
votes
1answer
131 views

How to disable unauthenticated binds in Active Directory(2016)

How to disable unauthenticated binds in Active Directory(2016). I followed up this approach: https://lithnet.io/blog/2018/12/disabling-unauthenticated-binds-in https://lithnet.io/blog/2017/01/ad-lds-...
0
votes
2answers
150 views

Upgrade windows server HDD without losing any data in RAID1

I have a Windows Server 2012 R2 installed on a system with RAID1 setup which has several services running like Active Directory, etc.. It has 500 GB hard disk as of now. Now we want to upgrade the ...
2
votes
1answer
73 views

How to get info of other domain in active directory?

I want to learn How can we get the info of other domain while they have in trust? Forex:- a.com trusts b.com and b.com trusts a.com and I compromised a.com then Is it possible for me to retrieve info ...
0
votes
1answer
75 views

Prevent software installation for Domain Users

Please, I was wondering how may can I block normal Domain Users from installing software but I can install using Administrators accounts (it's just like needs elevation before install) using GPO's? I ...
0
votes
2answers
52 views

Disabled users are not succeeding authentication via ADFS + Multi-Factor Server

We are using the on-premise version of Azure Multifactor authentication. When I authenticate through ADFS it's forcing every user to use MFA even though I have disabled users to succeed ...
0
votes
0answers
41 views

Can't connect from any active directory Windows PC to a Samba share with IP address, only with host name

Ok, this one is a bit surreal: We have an all Windows network with Active Directory that has the domain controller server, a file server and a database server. Recently we had to add a SUSE ...
1
vote
1answer
72 views

Apply Computer Policy changes at login / Apply Computer Policy for specific users [closed]

I have an request to apply computer policy changes to a specific set of users. For example, I want a specific windows feature (Allow Cortana) available to members of a security group (CortanaUsers). ...
1
vote
1answer
50 views

Why will Azure Active Directory Connect setup not allow us to 'Add Directory'?

When we get to the 'Connect your directories' screen in the setup process the forest is auto populated with the correct FDQN of the domain but the 'Add Directory' button is grayed out. We have tried ...
1
vote
0answers
28 views

Viewing Permissions in Mac OS on a Windows Server 2016 using Active Directory

I am logging into a Windows Server 2016 server and then accessing several volumes. While browsing directories in terminal, all file permissions appear as being owned by the PAM user I am logged into ...
-2
votes
1answer
114 views

how to export a list of AD users with their account status, last login date and password change date

I have looked all over but can't seem to find a specific way of exporting a list of users (by the OU they are in) that contains. their account status, last login date and password change date. I ...
-1
votes
2answers
68 views

How to enumerate permissions of users in active directory? [closed]

I am learning AD pentesting and I am looking for a way to enumerate the user's permissions. Note:- Here through permissions I am talking about those permissions which are found in the security tab. ...
-1
votes
1answer
92 views

Deny Local Logon Windows server 2012 R2

I'm trying to apply a New GPO that deny Local Logon in my client pc's but its not working even if i applied steps : Computer Configuration > Policies > Security Settings > Local Policies > User Rights ...
2
votes
1answer
105 views

Error promoting secondary DC (Windows Server 2012)

I am trying to promote second DC server. Primary and secondary servers are both Server 2012 R2. I joined secondary server to domain, but when i try to promote it, I get the following error. ...
2
votes
1answer
195 views

How do you setup an NFS4 server that utilises Kerberos authentication from an Active Directory KDC using CentOS Linux release 7.6.1810 (Core)

How do you setup an NFS4 server with Kerberos from Active Directory? I can install and configure an NFS4 server and connect to it, but I can not get Kerberos to work under any circumstances where the ...
0
votes
1answer
184 views

Security Groups in Exchange Distribution Groups?

We do have a case where we would like to setup an Exchange distribution group (created using New-DistributionGroup with closed joining and leaving) in order to easily reach multiple teams. Adding ...
2
votes
1answer
117 views

Folder Redirection: What does the “Also Apply Redirection Policy…” setting do?

When implementing Folder Redirection via Group Policy, there is a checkbox on the Settings tab that says "Also apply redirection policy to Windows 2000, Windows 2000 Server, Windows XP, and Windows ...
1
vote
1answer
150 views

Odd Behavior of DNS forwarding with SRV record resolution

I'm running into a weird problem while setting up a new SAMBA AD DC on my network. I've got the DC itself up and running and checked on the server that I am able to resolve the DNS name of the server, ...
2
votes
1answer
56 views

Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)

Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
0
votes
2answers
80 views

Avoiding security groups in Windows domain with automated filesystem security

As far as I understand, best practices recommend that security groups are used with a Windows domain to assign permissions over files and folders. That is, you should create groups in Active Directory,...
0
votes
0answers
39 views

How to join linux pc to active directory in specific ou with authconfig

I use authconfig command to join linux computers to AD How do I specify which OU they go in? I llook at authconfig --help but not see antyhing\ Can I use --ldapbasedn=<dn> to select what OU ...
-2
votes
1answer
46 views

Can I add a Microsoft Account to my Windows Server Core? (WITHOUT domain nor domain controller) [closed]

Can I use Microsoft accounts in my Windows Server Core virtual machines as we can do with Windows 10 without domain controller role or additional magic?