Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

7
votes
2answers
398 views

How to plan an Active Directory domain rename without it killing me?

It's looking more and more like I'll have to rename my Active Directory domain. There is a well-known process for making this change, including some very good answers on Server Fault already (like ...
1
vote
1answer
175 views

Empty SYSVOL share

After a restore, my standalone (Yes, I know, horrible practice, I shot myself in the foot, etc.) Windows 2012 R2 domain controller no longer has data in the SYSVOL share. Immediately after the restore,...
1
vote
0answers
234 views

dsget the users in a group, or member groups

I am using the chain of commands to get a report of the members of group AD_GROUP_NAME. dsquery group domainroot -name AD_GROUP_NAME | dsget group -members | dsget user -display -email And it ...
0
votes
0answers
175 views

OU Name with 'slash' in title “suddenly(?)” rejected by Exchange 2013/0365 Hybrid

We recently migrated from Exchange 2007 to 0365 Hybrid with a 2013 server on-prem. I'm reasonably sure I've made changes to users in the 'Web/IT' OU since the migration and not run into this error, ...
1
vote
1answer
313 views

Enterprise Admins don't have admin permissions in child domain

I've built a forest for testing consisting of a forest root domain and two child domains. Enterprise admins in the root domain don't seem to have admin privileges on member servers in the child ...
-5
votes
1answer
199 views

AD PDC and SDC domain [closed]

We have PDC and SDC on our network. I need clarification if our PDC server fail due to server fault, how to make SDC as acting PDC. What is the purpose of two DC's on same network. If PDC fail SDC ...
0
votes
1answer
312 views

Macs on Active Directory. Password policies not being enforced

Okay. Fundamentally, I've just started a new job where all of their IT support is outsourced. I've come in and realised password policies just aren't being enforced on any OS X machine in the building ...
0
votes
0answers
192 views

SSSD authenticate against parent domain

Ubuntu 18.04 LTS, sssd 1.16.1 I have a Linux server that is joined to a AD child domain via 'realm': realm join dev.example.com I am able to authenticate with users in the dev.example.com domain (i....
0
votes
1answer
113 views

Problems with clients for secondary dns server

Good evening! Im trying to make a high availability environment on my work, in order to do that I setup a little lab installing 2 servers; one with WS 2008 R2 and the other with WS 2012 R2 (same as ...
0
votes
0answers
38 views

Assigning third-party client certificates/keys to Active Directory users

In our organization, we have a number of third-party vendors that we must interact with using client certificates. We'd like to be able to assign certificates/keys to a particular Active Directory ...
0
votes
1answer
27 views

Windows 2012 AD user failover to AWS Windows AD

We're having a bit of an issue with our local Windows AD not failing over to our AWS hosted AD. We have web portals for our support staff to log into with AD credentials. When our on-premise AD "...
1
vote
1answer
137 views

Setting 'Run-Protect-Admin-Groups-Task' Extended Right

I modified the security settings on the AdminSDHolder object in my domain and takes a very long time to propagate the settings to my admin users. I tried run runProtectAdminGroupsTask manually, but ...
0
votes
0answers
29 views

Active Directory Web Services has resumed checking if the computer is a GC error

I have two Domain Controller server 2016 that the second one is an additional DC. I'm getting the following error in additional dc : Active Directory Web Services has resumed checking if the computer ...
0
votes
1answer
39 views

Deny RDP access to specific server from a particular user via GPO

I have a security issue. How can I deny RDP access to a specific server(critical server) for a particular Active Directory user using a Group Policy Object (GPO) ?
0
votes
1answer
96 views

LastLogonDate AD property for computer object - how often is it refreshed?

I was not able to find any good enough information about this. How often should this value be refreshed for windows servers which are online all the time? Seems like it's many days?? example to get ...
1
vote
2answers
74 views

Windows Server Domain Controller without real domain

I'm setting up a local logon server, simply to handle user logons and enforce some group policies. Ideally we could do with not pointing a genuine domain to the server. Is there any way of setting up ...
-2
votes
2answers
29 views

How to identify that the protocol is using by AD DC is Kerberous?

I have created a local environment as follows:- DC:- Windows server 2008<br> Client:- Windows 7<br> Domain:- januapp.local Now I read on somewhere that, the DC uses two types of Protocol ...
1
vote
2answers
46 views

AD new user account: create from scratch or copy existing user?

I can't seem to find a consensus for this online. My colleague who is writing our documentation has put that it is "best practice" to create our AD accounts new and from scratch....I have never heard ...
0
votes
0answers
18 views

How Kerberous works when using an AD with three domains, one is root and others are Child?

Assuming an AD has one root domain 'ROOT' and two Child domains 'CHILD1, CHILD2' then How a user in the CHILD1 domain can access the resource in the CHILD2 domain? ROOT is the root domain with the ...
0
votes
2answers
198 views

Generate/Sign certificates with the AD trusted root certificate?

I know that when an Active Directory domain is created: it creates it's own root certificate and that root certificate is automatically pushed into machines when they are joined to the domain You ...
0
votes
0answers
90 views

DNS client refuses to update Windows DNS server

Server 2016- DC and client Windows Integrated DNS Not sure why this is happening. I join a computer to AD and it updates DNS with its record. The IP changes on the client but the record never ...
1
vote
1answer
453 views

Creating a new AD LDS instance without the Setup Wizard?

Is the installation of a new unique instance of AD LDS (using either cmd or PowerShell) possible? All resources I can find online just use the Active Directory Lightweight Directory Services Setup ...
1
vote
1answer
47 views

How to distribute RDP certificates from ADCS to non-domain members?

I have a few hundred systems that are not AD-joined, for which I'd like to issue RDP certificates from an internal hierarchy (built with ADCS). I can do it manually, by generating CSRs, then signing ...
1
vote
1answer
38 views

Active Directory Domain name(s)

I've successfully created a test AD domain and joined several machines to it, for the purposes of this post I'll call the domain "TEST.COM". Everything seems to be working perfectly, except for one ...
4
votes
1answer
52 views

AD migration 2008 r2 to 2012 r2 - must've missed something

I finally went through with this the other day. Got DNS/AD setup, seized FSMO roles on the 2012 server, migrated DHCP etc. I thought I was ready to go so I turned off the 2008 server yesterday. ...
0
votes
1answer
317 views

Ansible & Terraform DNS creation on Active Directory with nsupdate

I'm trying to create a new DNS record on active directory with the nsupdate module. Both, Terraform and ansible works with key_name & key_secret. If I disable the secure only option on active ...
1
vote
1answer
52 views

How to fix broken secondary AD server?

My Secondary Active Directory server has gone dead, and I am installing its replacement now. Everything will be the same, computer name, IP, everything. The new server is running now, and ADDS ...
1
vote
1answer
30 views

Initialize RDP user, only via FTP

I have a rather unique issue, and was wondering if there's a simple solution to this that I am failing to find. I have a Windows Server 2012 instance running remotely, that I have no physical access ...
0
votes
1answer
77 views

/var/log/cron.log returning CRON[PID]: Permission denied for domain joined account

I'm trying to get a cron job to run, but not as root. Within the context of the user (domainuser@contoso.com), here are the outputs of the crontab and cron.log: Output of crontab -l # Edit this ...
0
votes
1answer
131 views

nslcd with domain.com and sub.domain.com

i'm trying to setup our linux server with nslcd within multiple AD Domains, example.com and sub.exmaple.com. The current setup with nslcd is pretty easy and works for the domain example.com: uid ...
2
votes
1answer
333 views

How DC authenticates when Client is not using any authentication?

I have a virtual environment with the following structure: DC: Windows Server 2008 Client: Windows 7 I installed Active Directory on the Windows Server 2008 and made it in domain januapp.local, then ...
-2
votes
1answer
38 views

Domain user cannot access to his shared folder after deleting that user

I've created an shared folder in domain and user was able to access that shared folder with his permission but after deleting that user he cannot access to that shared folder. I've created that user ...
1
vote
1answer
76 views

Switch Active Directory from Public IP to Private IP

I have an active directory and some servers running on public IPs Like ADS --> 62.xx.xx.210 Server joined ADS Team foundation server --> 62.xx.xx.211 SQL Server --> 62.xx.xx.212 Exchange ...
0
votes
0answers
185 views

office 365 enable AD sync after disabling

To me this is a rather weird issue, I've managed to complete exactly what I wanted to do, however, I'm now at the stage I want to enable AD sync again. The error I'm getting is as follows: PS C:\...
2
votes
1answer
557 views

Error when installing remote access role: There may be a version mismatch between this computer and the destination server

I am getting an error when I attempt to select the Remote Access role on a Windows 2016 Server. I have been unable to find this error mentioned anywhere. I am installing the role on the local ...
0
votes
1answer
164 views

Change password of new Windows domain user account without logging into the account?

I've got assigned an additional domain user account user2, with a password P@ssw0rd, that must be changed, before I can start using the account. I don't want to log into user2 from the Windows logon ...
0
votes
1answer
425 views

Ubuntu map CIFS / SMB share using active domain credentials without password file

Is there a way in Ubuntu 18.04 to map an SMB share when the users login without using a password file? The boxes I have are members of a Windows Active Directory domain and the users will use their ...
0
votes
1answer
626 views

Azure Connect “soft match” issues

Before I get into the details: my problem is clearly different than the one described in this question. I'm running a single Azure Connect instance, so the problem clearly isn't due to multiple sync. ...
2
votes
1answer
32 views

What considerations should be made when determining the format of the CN (common name)

We're looking to improve the standardization & quality of data in our active directory. In doing this we've found inconsistencies in the format of the distinguishedName; specifically the format ...
1
vote
0answers
109 views

Active Directory Activation - Restricting by OU

I'd like to set up Active Directory based activation on our domain. In our environment we have a need to use MAK keys on some machines that may not see the AD server for a year or more. Thus, we'd ...
0
votes
1answer
42 views

Advice for high availability

Talking about high availability im in search of advice for my particular situation. We have configured a blade center from ibm our active directory server using vmware (windows server 2008 r2), and ...
2
votes
1answer
204 views

Why should the IP address of a Domain Controller map to the site it serves?

I have questions related to this specific event: Index : 865 EntryType : Warning InstanceId : 5802 Message : None of the IP addresses (192.168.254.17) of this ...
2
votes
0answers
180 views

LDAPS Microsoft Active Directory Multiple Certificates RFC6125

We have an Microsoft Active Directory Domain with a large pool of domain controllers (DC) that are are setup with LDAP. These are all setup with LDAPS and uses Certificate Services via a template to ...
1
vote
0answers
713 views

Cannot join domain from new machine - the network path was not found

I have a standalone domain controller that was recently compromised. I've isolated it and cleaned it up, but I need to set about replacing it. I've built a replacement, however when I try and join ...
3
votes
1answer
346 views

Active Directory shortcut failing to create

Background: I am making a GPO with desktop shortcuts for users. The GPO has a few links to websites like our help desk that it places. It also has a shortcut to a network location for a file share. ...
0
votes
1answer
40 views

Password reset script error

I have the following script for bulk resetting passwords in AD; Import-Module ActiveDirectory $securePwd = ConvertTo-SecureString -String Password -Force -AsPlainText get-content "C:\Users.txt" | ...
1
vote
1answer
606 views

openldap “invalid credentials” trying to authenticate with Active Directory

We have an AD server running and it works for every windows machine on our domain for authentication across many services. We recently brought a RHEL6 machine online and are trying to configure a ...
-2
votes
1answer
25 views

Powershell subsequent usernames [closed]

I just started learning Powershell and I was wondering how to make a powershell script that scans the OU for users and picks the subsequent number. For example when I have a "User1" and "User2" in my ...
1
vote
1answer
283 views

Using SASL from CentOS 7 Host to Authenticate to Active Directory

Trying to configure SASL on a CentOS 7 box to talk to an Active Directory installation. I've tried a couple different configurations that generate different errors. The latest: No worthy mechs found ...
1
vote
0answers
68 views

Server Promoted to Domain Controller causes high ping times

We have recently (couple of months) been having issues with our internet, after dealing with our provider who states it is not their issue yet my boss and owner of the company is certain it is ...