The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

Set-DnsClientGlobalSetting - throwing “Access to a CIM resource was not available”

I am trying to add a Suffix to list of existing domains on my workstation but am getting this error. I am running PowerShell as an administrator and still, the error persists. I have domains ABC and ...
0
votes
0answers
10 views

Finding PDC from domain name in Linux (Linux equivalent of nltest /dcname:MYDOMAIN)

I can find the PDC (Primary Domain Controller) from my Windows machine using the command nltest /dcname:MYDOMAIN. I need to find the PCD from a Linux machine. Is there a way? The only information that ...
0
votes
0answers
7 views

Connecting to Samba from AWS AD Connector

I have set up a Samba 4 Active Directory domain controller in AWS EC2 for my small business. I am trying to configure AWS Workmail to use this directory. I have followed Amazon's instructions here to ...
2
votes
0answers
14 views

Need to stop LDAP reflection attack. Will only allowing LAN IPs for LDAP break active directory/domain functionality?

Back story: I've got a domain controller exposed to the internet (I know, it shouldn't be, was put together piecemeal). Unfortunately, we just discovered that it's being used in LDAP reflection ...
1
vote
2answers
2k views

Apply permission from OU level to all child objects in AD?

We have a Windows 2008R2 server which runs Active Directory on it, I have written a C# application that will allow the IT staff to add new users to AD from it. I have no problems creating or updating ...
1
vote
1answer
1k views

Why is a domain user unable to log on into a Windows 7 machine when Samba server signing is enabled?

I have an up and running Linux-based domain controller running Samba. The server functions properly as I am able to join Windows 7 machines to my domain and then log on into the machine using my test ...
1
vote
1answer
21 views

How to restore Default Domain Policy?

I accidentally deleted "Default Domain Policy" in Group Policy Management -> Forest: mydomain -> Domain -> mydomain Actually I clicking Delete Link(s) thinking that only the link will be deleted; ...
2
votes
3answers
2k views

Windows XP SP3 and Windows 2008 R2 SP1 doesn't work

I've got a Windows Server 2008 R2 SP1 Active Directory with Full 2008 R2 Level Domain and a Windows XP SP3 Client which needs to join this domain. Unfortunately the client is not able to join the ...
0
votes
1answer
4k views

Unable to connect Windows Server 2012 R2 to a Domain Controller. Getting Error

I am unable to connect Windows Server 2012 R2 to a Domain Controller. Getting Error, An Attempt to Resolve the DNS name of a domain controller in the domain being joined has failed. Please verify the ...
2
votes
1answer
1k views

Retrieve “IP Phone” Attribute from AD for Exchange Disclaimer/Signature

I'm trying to build a company-wide signature in Exchange using the Transport Rules and Disclaimers. I'd like to include our Skype names as part of this signature. In ADAC, the closest field I could ...
1
vote
1answer
1k views

How to auto-run batch file as specific user (not scheduled task, not a duplicate)

I am an enterprise admin (Sr. Network Engineer), but my team does not manage Active Directory, so I am a little unfamiliar with policies and what is required to do what I am trying to achieve, and ...
4
votes
1answer
2k views

Active Directory - Account exists but cannot find it to remove it

I'm trying to add an AD Managed Service Account and my first attempt was as follows: New-ADServiceAccount -DNSHostName VM-Backup-Service -Name "VM Backup" -samAccountName VM_Backup -Path "OU=...
5
votes
1answer
1k views

AWS EC2 - Clone Windows Server Machines That Are Domain Joined

Firstly, I am using these as a base guide: http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ami-create-standard.html http://reduktor.net/2014/09/autoscale-ec2-instances-ad-aws/ Secondly, our ...
1
vote
1answer
47 views

Using Vbscript/PowerShell How to check if an AD user account has permissions to modify AD group membership?

I have a custom Operating System deployment solution (OSD Upgrade) which as part of the process has to first modify a few associated AD group memberships using the user account of the person who ...
1
vote
0answers
18 views

AWS EC2: All users Lost Access to D:\ - Access Denied

I have seen a number of similar problems reported in my searches, leading me to a number of questions including: Access to D drive lost even as an administrator (Windows 10) Domain Admins group ...
2
votes
1answer
1k views

Integrating squid with active directory

I am trying to integrate squid as a web proxy for my users in active directory. I have followed the tutorial in the squid site in here. When i run the command : msktutil -c -b "CN=Administrator" -s ...
0
votes
0answers
10 views

Should domain_realm point to a domain controller or KDC, or is it just the default_realm name?

In /etc/krb5.conf, given the folowing default_realm, should [realms].default_domain point at the default_realm or a Domain Controller (DC) or Key Distribution Denter (KDC)? ada and adb are Windows ...
0
votes
2answers
49 views

Translating HEX ACLs into permissions

I'm trying to write a script to scrape Samba share ACLs from my Ubuntu server machine. I've been using smbcacls to read permissions per file/folder. When a user only has RX or WX permissions, it's ...
0
votes
1answer
121 views

Is Windows 7 machine logged into domain or local cache

I've been learning AD and also troubleshoot a problem I'm having with AD. I'd like to be able to tell if a Windows 7 workstation is actively logged on to a domain or if it's logging into an account ...
2
votes
1answer
2k views

New-ADGroup with Multiple -OtherAttributes?

Keep getting "The Paramater is Incorrect". I think I'm following Microsoft's method correctly, but it's not working. New-ADGroup -DisplayName $name -Name $grpName -Server server.org ` -Path:'DC=...
1
vote
1answer
1k views

FreeBSD 10.3 SSSD AD integration issues

I'm having a lot of issues with FreeBSD 10.3 I'm finding the binary packages are fairly useless. I've had to build nearly everything to make things "work". I like using the adcli tool to join to a ...
1
vote
1answer
115 views

Group Policy software installation failing with error %%14

I have created a GPO configured to "assign" \\<AD DNS domain name>\NETLOGON\<file name>.msi and verified that it's applying to the Windows 10 v1809 PC but the actual installation ...
0
votes
2answers
14 views

Active Directory LDAPS not working

I have a test domain with one domain controller. On it I have imported the root and issuing CA certificates to the appropriate certificate stores for the entire computer and have done that for every ...
0
votes
0answers
11 views

Configured VPN access, what incoming traffic do I need to block to be safe?

I am not a server guy at all so forgive me if my questions seem somewhat odd. So I've set up a few Windows Server 2016's with internet access and I've created a VPN solution to be able to RDP to them....
0
votes
1answer
1k views

“Entire Directory” option missing from Locations in “Select Users, Computers, SrvAct, or Groups” dialog

I'm a very inexperienced server admin, so if fail to provide some important information I apologize in advance. I am doing some development for a very small software company and I'm having a bit of an ...
-1
votes
0answers
20 views

Change DNS suffix by user using GPO

I have some questions about using group policy on a windows server It is possible to change DNS suffix by user using GPO ? for clarification, having a list of user AD whose the dns of here latop is ...
0
votes
0answers
13 views

AD replication stops

i have a domain controller located in a distance site which has a replication problem. Replication stops after a small period of time (about half an hour). The only way to resolve it is to change the ...
0
votes
0answers
11 views

Old SCCM schema extension

I am working on a SCCM CB implementation, where there was an old SCCM 2012 site. That old SCCM 2012 site had extended the AD schema. AFAIK, is not correct re extend the schema. My question - How can I ...
0
votes
1answer
1k views

Creating active directory users with powershell - the mapped home folder is not mapping until edited

I'm creating active directory users in bulk from a .csv using powershell. Each user has their profile home folder path mapped to a drive letter. The script runs through fine, users are created and ...
2
votes
1answer
1k views

Winbind not enumerating users and groups of trusted domain

I'm using Samba 4.1.6-Ubuntu in Ubuntu 14.04, for authenticating users from two domains with a one-way cross-forest trust between them. Samba machine is joined to DOMAINA, while DOMAINB is the trusted ...
0
votes
0answers
30 views

How to add extensions to whitelist on firefox GPO

So I have tried all of the things that I could think of, I have used the suggested json that firefox have on their git hub found here: https://github.com/mozilla/policy-templates/blob/v1.9_release/...
1
vote
1answer
50 views

Restricting RDP users to certain machines on Windows AD

We need to add specific users to our on-prem part of production that uses traditional Windows Server AD. The users should be able to RDP into one machine (MachineX) and only that. I thought this ...
0
votes
1answer
22 views

user login from another domain (Transitive Trust Established)

I have setup a two way transitive forest trust between two domains (Domain A & Domain B) successfully. Now when I try to RDP as a user in domain A (admin@domainA.com) into domain B it is ...
0
votes
0answers
27 views

Primary Domain Controller not syncing with secondary

Firstly, this was setup by a previous tech guy, so please forgive me if im not using the correct terms or if the setup is not best practice (trying to change that!) We have 2 domain controllers, a ...
1
vote
1answer
1k views

Allow access to only certian AD Group users to IIS site

I have created Active Directory Group to allow access to certain user to IIS site (IIS version 8.5). I have installed "URL Authorization" module as shown in below link: http://www.iis.net/...
0
votes
1answer
2k views

negative WMI-Filter for security filtering in GPO

I need to create a group policy object (GPO) that will disable printer redirection for all computers except certain servers. I considered making a security group and adding all the computers except ...
0
votes
2answers
61 views

Finding Host Name / Computer Name over IP

I'm trying to find out how to lookup the HostName of a computer over IP using Command Prompt, however I don't need the registered DNS name. I'm attempting to do an IP/DNS Database Cleanup so finding ...
23
votes
12answers
266k views

Best way to find the computer a user last logged on from?

I am hoping that somewhere in Active Directory the "last logged on from [computer]" is written/stored, or there is a log I can parse out? The purpose of wanting to know the last PC logged on from is ...
3
votes
2answers
2k views

Use Linux BIND DNS server for my Windows Active Directory 2008 R2

How can I use a Linux BIND DNS server for my Windows Sever 2008 R2 Active Directory? We are trying to avoid having to use the Windows Sever 2008 Server as a Domain Controller at all. We want to use ...
0
votes
1answer
1k views

Exchange 2010 - smtp namespace sharing

I'm setting up SMTP namespace sharing between two different Exchange 2010 organizations/forests that are connected via an AD trust. I'm using these 2 articles as references: Configure Exchange to ...
0
votes
1answer
948 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
0answers
20 views

Can MS AD Certificate Services maintain both public and private keys in active directory?

Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
1
vote
1answer
180 views

Startup Powershell script in GPO not executing - Windows Server 2016

I'm trying to get a simple Powershell script to run as a GPO Startup script on my school's workstations. So far I've not had much luck. The script started life as a more involved set of commands ...
2
votes
1answer
1k views

IIS AppPools stop working when server joined to domain

I have a Windows 2012 R2 server that was configured with IIS, websites, and other supporting software while not connected to a domain. After the server was joined to a domain IIS AppPools crash when ...
0
votes
1answer
957 views

Is NET USE command retrying bad passwords?

I'm working at a client site that uses AD for network authentication. My laptop is not domain connected, but I can reach their shared drives when hard-wired into their LAN by using a NET USE command ...
2
votes
1answer
1k views

Remote Desktop locks user account on Password Change

We maintain a Terminal Server on our network for our remote office and occasional third party vendors to connect in to. Our windows network active directory has the standard windows password ...
0
votes
1answer
22 views

Group rights to manage Group Policy?

Consider the following scenario: The Client Engineering department is responsible for the administration of all systems that users interactively log into, including most corporate desktop and laptop ...
2
votes
4answers
6k views

looks like we can't connect to the URL for your organization's MDM terms of use

This is regarding the Free AzureAD that comes bound to office365 business premium. In previous deployments (these are very small hence no real budget to look at MDM and the extra subscriptions for ...
3
votes
0answers
75 views

Old server accounts persist after migration to Windows Server 2019

I went through the process of migrating Active Directory 2012 R2 to Active Directory 2019. Minus a few firewall ports needing to be opened up, I was able to get through the process of promoting the ...
1
vote
0answers
59 views

DFS Namespace Resolution without netbios - Why does it work

So, my problem is not that something does not work. But that it works, and I cannot figure out why. Short version: I am able to access \\mydomain\MyDFSRoot even though netbios/LLMNR is off, and DNS-...