Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

4
votes
0answers
45 views

Moved AD Connect to a new server and now end-users are getting errors when replying to internal emails in Outlook

I moved my Microsoft AD Connect install from one server to another today. I installed AD Connect on the new server in staging mode, turned on staging mode on the old server, turned it off on the new ...
2
votes
1answer
199 views

MS Exchange 2013 Unified Messaging issue, or really an AD issue?

Where to begin... I'd like to first admit that I am not an seasoned Exchange tech. Second here is the environment: (2) 2008 R2 DCs and (1) 2012 R2 MS Exchange 2013 server - other Exchange servers were ...
2
votes
0answers
172 views

Windows domain username formats? NETBDOMAIN\USERNAME and DNSDOMAIN.COM\Username?

I'm running into issues with authentication and mapped network drives across a VPN tunnel. Namely error messages related to not being able to find a domain controller. I suspect this is somehow ...
1
vote
0answers
331 views

OpenLDAP Proxy to AD - userPrincipalName as BindDN

I've setup OpenLDAP as AD proxy according to: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
0
votes
1answer
311 views

OpenLDAP userPrincipalName as BindDN

I've setup OpenLDAP as AD proxy according to: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
0
votes
0answers
18 views

Using a Windows Authentication protocol on a remote site without local domain services

The scenario is domain-A is a Windows domain with hybrid AD services, including on prem AD, ADFS and Azure AD with the possibility of adding Azure AD domain services. Domain-B has no Windows domain ...
1
vote
1answer
79 views

List AD Users that are part of Group Membership but in specific OU

I am trying to list AD users that are a member of a specific group but i need to search one ou at a time Get-ADGroup 'GroupName' | Get-ADGroupMember
0
votes
1answer
4k views

Unable to connect Windows Server 2012 R2 to a Domain Controller. Getting Error

I am unable to connect Windows Server 2012 R2 to a Domain Controller. Getting Error, An Attempt to Resolve the DNS name of a domain controller in the domain being joined has failed. Please verify the ...
2
votes
1answer
85 views

browsing to AD domain displays sysvol from remote DC

Five-site company connected with low-latency layer 2 or IPSec tunnels, 2 DCs at each site. I have noticed that browsing to \\domain.tld often displays sysvol/netlogon shares from a remote DC. The ...
0
votes
2answers
94 views

Machine Account Password Resets on server and invalid Kerberos tickets on client

According to this TechNet article https://blogs.technet.microsoft.com/askds/2009/02/15/machine-account-password-process-2/ Machine Accounts (Computer Objects) reset internal passwords every 30 days. ...
1
vote
0answers
15 views

Connecting HP EWS To Active Directory

I have a HP LaserJet 500 color MFP 575 running Futuresmart Firmware 4.7 that I am trying to connect to my Windows Domain through Windows Sign-in/Kerberos. I put in the Domain Name and the Trusted ...
1
vote
1answer
54 views

Samba and router DNS setup with custom DNS

I would like to use samba on ubuntu 16.04 as an AD DC. I use custom DNS servers (OpenDNS). How should I set the DNS settings up? (e.g. my router's address is 192.168.1.1, the server is 192.168.1.2). ...
1
vote
0answers
84 views

AWS VPC EC2 Setting AD DNS Custom DNS for instance running in another VPC

Here is my scenario: 1. I have two peered VPCs VPC1 which is running Active Directory integrated DNS Service with my domain as example.local. There is another VPC2 which has both VPC DNS with ...
1
vote
0answers
24 views

Exchange Online - how to manage no-longer synchronised account?

So we've got a setup of on-prem AD and EX Online. They are synchronised by aad connect and we've expanded the schema in AD, so we have the attribute to hide users from GAL. Now, we've parted with a ...
1
vote
1answer
101 views

Kerberos authentication to root domain in Active Directory

I have an environment in Active Directory that is composed of a root and a child domain, let's call them my.root.domain.com and root.domain.com I have a RHEL7 server I've spun up which has no problem ...
1
vote
1answer
52 views

Using PrepareSchema on existing Exchange 2007 Server - Mailboxes have PROTECTED INHERIT flag

I was trying to create a new Receive Connector on my older Exchange 2007 SP3 server (planning underway to upgrade later this year) and when it failed I did some research. The solution I found Here (I ...
1
vote
0answers
58 views

Choosing the right Active Directory solution for my network

I currently manage my users "manually" on a network that began with 3 people and 3 computers. Now I have 4 users with their own computer, 4 computers used by parttime people and a second site in ...
1
vote
1answer
233 views

Use CHAP with NPS and a Domain Controller in Core

I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server. I have reproduct the problem ...
1
vote
1answer
50 views

Should the AD FS Federation metadata for a Relying Party Trust be publicly accessible?

If I am a relying party, I can expose federation metadata to ease configuration for AD FS so I can import it into the Create a Relying Party Trust wizard. I can also choose to enable automatic updates ...
0
votes
0answers
75 views

How to configure domain trust and DNS to share content with an external domain?

I have two domains (same LAN subnet) lab1.tld & lab2.tld I configured a one-way external trust (with selective authentication) for those domains plus a secondary DNS zone pointing to the "opposite"...
0
votes
0answers
59 views

Issue with DC on different sites not replicating

I have a topology with 2 sites (SiteA and SiteB). Sites are connected thru a VPN (OpenVPN network to network), every traffic is playing well (Ping, SMB, RDP, SSH, Web etc.) All DCs are running ...
0
votes
0answers
16 views

Domain group doesn't grant login permission for user from another domain with one way trust

Our company divided the internet into two domains in different network. Our accounts remain in the original domain but some of the servers are moved to the new domain. In order to login with our ...
0
votes
0answers
39 views

Can't resolve one way trust domain user by GUI but able to add it to group via command line

Our company divided the internet into two domains in different network. Our accounts remain in the original domain but some of the servers are moved to the new domain. In order to login with our ...
1
vote
0answers
63 views

How Can I Prevent Windows Server 2016/AD Installation from Adding TLDs Like .local to My Domain Name?

In a few days I have to reinstall a Windows Server 2016 Essentials instance on new hardware and would like to avoid an annoyance that cropped up in the initial install a few months back. To make a ...
0
votes
1answer
21 views

adding user from sub domain to parent domain via command line

I have domain admin account of root domain(prime.server.local.net), i want to add a new user remotely using cmd.exe or powershell.exe to main domain (prime.server.local.net) from a windows machine ...
0
votes
0answers
28 views

server 2003 active directory users numbers

I would like to find all used/disbale accounts of the active directory, so I need to see the last access to the domain. I looked into the user properties but I did not find anything. Where can I find ...
2
votes
0answers
155 views

MSSQL Server 2017 on Centos - AD auth - SSPI handshake failed

We have SQL Server 2017 installed on CentOS and connected to domain according to this tutorial - https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-active-directory-authentication?view=sql-...
1
vote
3answers
68 views

Azure AD Connect remediation for O365 (how to setup test domain?)

I need to stand up a test domain to try and fix accounts that have been synced into AAD. I have had zero experience with Azure AD or O365, so I'm not sure how to proceed. A previous admin setup our ...
0
votes
0answers
187 views

Error 1202: 2016 AD servers

I have 3 2016 AD servers, AD level 2012. From the beginning: I noticed they were not updating from WSUS. As I tried to correct this, I noticed I was getting 1202 errors and when I ran ...
4
votes
2answers
87 views

If a Contact is Created in AD, Will that Cause the Creation of a Contact in Exchange?

If a contact is created in the AD, will it automatically be created in Exchange as well? Windows Server 2008 R2 environment On-premise Exchange 2010 hybrid with O365 Exchange is on secondary DC AD ...
0
votes
0answers
173 views

AD Connect, Different UPN and email address

I have a domain where the email addresses are different to the UPN's. So in AD, I have a UPN of john.surname@domain.com and in Office 365, I have a UPN/email address of john@domain.com. I would like ...
1
vote
0answers
115 views

AD domain rename problems, can't add server of the same name

I have inherited an active directory domain controller, and after adding a number of servers I found that I couldn't add a server with a specific name. I since found out the admin who built the ...
0
votes
1answer
152 views

Change FQDN of domain controller (and other hosts)

Is there a way to change the fqdn of my Active Directory domain controller and other hosts in the domain? Currently, my domain controller is called dc1.domain.com, and I'd like it to be dc1.site1....
2
votes
2answers
376 views

AD issue with Svr 2012 R2 DC: cannot join XP VMs to Domain, but Win7, 8 and Win10 VMs can join

Domain Controller is a physical server running Windows Server 2012 R2. FF Level is 2008 R2, DF Level is 2012 R2. However, I found a MS article that states XP is fully compatible with even a 2012 R2 ...
1
vote
0answers
56 views

Windows Server 2008 R2: Local account users can log into server without using “.\”

We have a small, standard Windows domain, two DCs with a couple of member servers. On our 2008 R2 member servers, local admin accounts can log into the machines WITHOUT having to put the ".\" in front ...
2
votes
1answer
524 views

How to make the Default Domain Policy apply to the domain?

We have a domain, and it has a default domain policy that has existed for 16 years (since 2003): I just realized today that this policy, with all its policies, are not being applied to any users or ...
1
vote
0answers
303 views

Authenticate AD user after joining CentOS 7 to Active Directory Domain

I am trying to join a CentOS 7.5 to a Windows Active Directory Domain for authenticating AD users. Although, the joining process has been successful, I'm unable to authenticate any users though. ...
0
votes
1answer
183 views

How to disable unauthenticated binds in Active Directory(2016)

How to disable unauthenticated binds in Active Directory(2016). I followed up this approach: https://lithnet.io/blog/2018/12/disabling-unauthenticated-binds-in https://lithnet.io/blog/2017/01/ad-lds-...
0
votes
2answers
155 views

Upgrade windows server HDD without losing any data in RAID1

I have a Windows Server 2012 R2 installed on a system with RAID1 setup which has several services running like Active Directory, etc.. It has 500 GB hard disk as of now. Now we want to upgrade the ...
2
votes
1answer
76 views

How to get info of other domain in active directory?

I want to learn How can we get the info of other domain while they have in trust? Forex:- a.com trusts b.com and b.com trusts a.com and I compromised a.com then Is it possible for me to retrieve info ...
0
votes
1answer
81 views

Prevent software installation for Domain Users

Please, I was wondering how may can I block normal Domain Users from installing software but I can install using Administrators accounts (it's just like needs elevation before install) using GPO's? I ...
0
votes
2answers
61 views

Disabled users are not succeeding authentication via ADFS + Multi-Factor Server

We are using the on-premise version of Azure Multifactor authentication. When I authenticate through ADFS it's forcing every user to use MFA even though I have disabled users to succeed ...
0
votes
0answers
42 views

Can't connect from any active directory Windows PC to a Samba share with IP address, only with host name

Ok, this one is a bit surreal: We have an all Windows network with Active Directory that has the domain controller server, a file server and a database server. Recently we had to add a SUSE ...
1
vote
1answer
72 views

Apply Computer Policy changes at login / Apply Computer Policy for specific users [closed]

I have an request to apply computer policy changes to a specific set of users. For example, I want a specific windows feature (Allow Cortana) available to members of a security group (CortanaUsers). ...
1
vote
1answer
56 views

Why will Azure Active Directory Connect setup not allow us to 'Add Directory'?

When we get to the 'Connect your directories' screen in the setup process the forest is auto populated with the correct FDQN of the domain but the 'Add Directory' button is grayed out. We have tried ...
1
vote
0answers
28 views

Viewing Permissions in Mac OS on a Windows Server 2016 using Active Directory

I am logging into a Windows Server 2016 server and then accessing several volumes. While browsing directories in terminal, all file permissions appear as being owned by the PAM user I am logged into ...
-2
votes
1answer
162 views

how to export a list of AD users with their account status, last login date and password change date

I have looked all over but can't seem to find a specific way of exporting a list of users (by the OU they are in) that contains. their account status, last login date and password change date. I ...
-1
votes
2answers
70 views

How to enumerate permissions of users in active directory? [closed]

I am learning AD pentesting and I am looking for a way to enumerate the user's permissions. Note:- Here through permissions I am talking about those permissions which are found in the security tab. ...
-1
votes
1answer
96 views

Deny Local Logon Windows server 2012 R2

I'm trying to apply a New GPO that deny Local Logon in my client pc's but its not working even if i applied steps : Computer Configuration > Policies > Security Settings > Local Policies > User Rights ...
2
votes
1answer
170 views

Error promoting secondary DC (Windows Server 2012)

I am trying to promote second DC server. Primary and secondary servers are both Server 2012 R2. I joined secondary server to domain, but when i try to promote it, I get the following error. ...