Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
-1
votes
1answer
31 views

Active Directory rename computer account minimal permissions

I've decided to review delegated permissions our branches have over Active Directory computer objects and reorganize things a bit. One thing which stunned me is the fact that I need (according to ...
0
votes
0answers
6 views

Restore ADLDS from Network X to Network Y and on different port

We are working on Win 2008 server machines. We have Network X and Network Y. Both network are independent of each other. In Network X LDS runs on port 389/636. We take windows backup of our LDS. In ...
0
votes
1answer
39 views

Windows server 2016 Failover Cluster does not complete Forming the cluster

I am trying to set up a 2 Node failover cluster using Windows server 2016. I deployed the servers in AWS. Here are the details. I used ; 1 server acting as the Domain Controller ( 10.30.10.101 ) ...
-1
votes
0answers
37 views

Best Practice to Backup Domain Controller [on hold]

If you have 15,000+ Domain User and around 35 Domain Controller spread all over World. Which practice will be Best as per your experience and knowledge. Can we use AD Snapshot with following ...
0
votes
0answers
8 views

Windows Server AD LDS: How to adjust the replication authentication mode on the source server

I am working on Windows server 2008 machines. Both machines are in enterprise network domain. I have already installed AD LDS on machine A. Now i was trying to install replica on machine B, i got ...
1
vote
0answers
41 views

Non Domain IIS servers / Files hosted on Domain File Share

Building a load balanced pile of IIS servers: Windows 2019, not domain joined. I'd like to point them all to a share for the sites' content directory to [hopefully] simplify keeping them all in sync. ...
7
votes
3answers
926 views

How to Check all AD users for “blank” password?

How can I check all users in the AD for a blank password? AND Filter them.... I know how to check all user but I can't Filter them... Here is what I have: Get-ADUser -Filter * -SearchBase "OU=...
1
vote
0answers
23 views

Single Server 2012 R2 - DNS service won't start

I got called in to help a small office and found a Server 2012 R2 box that hadn't had any updates installed since 2014. Went ahead and let it update and now DNS won't start. Unfortunately this is ...
0
votes
1answer
26 views

Adding users automatically to AD domain through G Suite

Okay, I don't really think this is possible, but I just want to ask: Is it at all possible to have a user be automatically added to an AD domain whenever they sign into their Google Account in a ...
0
votes
1answer
52 views

Find application causing account lockout on windows server 2012 R2

One of my account is being locked out from a windows server, it was tracked down using the Security Audit which produced event ID 4740. Its a Windows server 2012 R2 running only WSUS service. I think ...
0
votes
2answers
44 views

Exchange 2016 does not start after fresh install

I tried installing Exchange 2016 CU 12 on Windows Server 2016, version 1607, build 14393.2273, after a fresh installation of the OS. The server is part of a simple domain. At the end of setup, I get ...
0
votes
1answer
79 views

It is required to have a DC in a Windows network?

I´m really confused about DC and Active Directory. In a small network with a single Windows Server (2008 Foundation), it is required to have a DC? I reviewed this question Is there any difference ...
0
votes
1answer
48 views

local admin account management on a Windows AD domain

In a Windows AD domain how do you manage local admin accounts ? What I found out: Every computer has an Administrator account (SID S-1-5-domain-500, display name Administrator). The Administrator ...
-2
votes
0answers
15 views

FreeNAS Active Directory join a specific location [closed]

Is it possible to join a FreeNAS system directly to a specific OU? Thanks
0
votes
0answers
98 views

NPS authentication Cross-Forest domains

I am trying to utilize NPS in a resource forest (Azure MFA NPS extension to be exact), that has two-way trusts with 2 user forest, lets say Forest A and Forest B. The forest trust are setup with ...
0
votes
0answers
134 views

How do i prevent AD users without administrative privileges from kicking out a remote desktop session in their pc?

So, im part of the IT personal of a company that controls user access to their company computers trough an AD server, pretty common stuff, every time an user has some sort of issue in their computer, ...
0
votes
1answer
33 views

Creating a new AD object deletes another object instead

We have a problem with one of our AD: Creating a new object will instead delete another object. In one of the DC, we have this message logged: "There are two or more objects that have the same SID ...
0
votes
1answer
54 views

Remote manage DNS

We run our infrastructure on AWS and have chosen to use their Managed Active Directory (which I’m beginning to think was a bad idea). They have blocked PowerShell remote access for a start. Inside ...
0
votes
0answers
10 views

Kerio Control Time synchronization fails

I'm trying to put my Domain Controller as NTP Server in Kerio Control setting. but I keep getting the Error:"Time synchronization failed" in the Kerio Control log. I tried other online NTP servers ...
0
votes
0answers
49 views

AD replication: The target principal name is incorrect. 2146893022

I have three domain controlers, and repadmin /showrepl command outputs the following: C:\Windows\system32>repadmin /showrepl Repadmin: running command /showrepl against full DC localhost Default-...
1
vote
1answer
128 views

Removing a Sub-domain Controller

I've got a sub-domain controller I created a year ago, but never actually did anything with. I've had the server shutdown since then. It's time for the controller to be deleted, but I'm not sure how ...
-1
votes
1answer
29 views

Shared mailboxes disabling other users

Weird issue. Users log into their normal windows account. As they move from site to site, they log into Outlook to a Shared Mailbox. If Users 1, 2, 3, 4 decide to login in to the shared mailbox it ...
4
votes
1answer
74 views

Can RSAT-ADDS be safely removed after Exchange 2019 installation on Windows 2019 Core?

I'm deploying a new Exchange Server 2019 and using Windows Server 2019 Core as basis. Accordingly to Microsoft documentation, located https://techcommunity.microsoft.com/t5/Exchange-Team-Blog/Deploy-...
0
votes
1answer
37 views

Enabling Unconstrained Delegation on Active Directory Domains

Where can i see the setting in domain , if i enable "unconstrained Delegation" by using below command? netdom.exe trust fabrikam.com /domain:contoso.com /EnableTGTDelegation:Yes
2
votes
1answer
88 views

Getting last logged in user for lost domain computer

We recently audited our IT equipment inventory and have come across a few laptops which are missing. They aren't on the network, and most haven't logged into our DC's in several months. We have asset ...
1
vote
2answers
28 views

How to keep existing Exchange in new Domain

I have to migrate an entire domain xyz.local to zxy.com. We will setup new AD Controllers and migrate all users with the microsoft ADMT. Is there a way to keep the existing Exchange Server with the ...
-1
votes
1answer
45 views

Can we configure a DNS Server and AD in two different physical machine to be accessible from a host?

As i am somehow aware that AD itself needs to be DNS server to work. The real concern is that my company has a live DNS server working effectively. But now my management decided to control all the ...
1
vote
1answer
40 views

Restarting of Windows development machine and losing code

Not sure which exact forum this question fits in, aplogies in advance if this is the wrong forum (please let me know the correct one). Our Windows domain joined Windows 10 machines which we use for ...
0
votes
1answer
22 views

Multi-domain Azure connect to single local domain controller

I am wanting to complete the following. Azure AD: Domain1 Domain2 Azure AD Connect Single local domain controller I apologize for my formatting beforehand. But is it possible to sync users/...
0
votes
0answers
40 views

Powershell Foreach Statement not working in AD when combined with Get-ChildItem

Good Afternoon, I am attempting to count how many objects are in 9 different OU's which is in an OU for my organizations DC. This list will specifically return only the amount of objects (computers ...
3
votes
2answers
86 views

setspn does not affect Active Directory Users

I run the setspn command for specific user on Domain Controller. C:\>setspn -s example/username.companyname.com username Checking domain DC=companyname,DC=com Registering ServiceprincipalNames ...
0
votes
1answer
62 views

Windows 2016 AD DC on google cloud platform

trying to build a lab on GCP that requires windows 2012/16 AD DS. Does not need to be production grade setup. I was following the instructions mentioned location Deploying Microsoft Active Directory ...
0
votes
1answer
44 views

Joining a Windows 7 PC to a Windows Server 2019 Essentials Domain Controller

Is it possible to join all of our Windows 7 PC's to our new Windows Server 2019 Essentials domain controller, with Active Directory. The PC's are running Windows 7 Pro. Thank you
0
votes
0answers
20 views

ASP.NET Core Windows Authenticaion on Linux

I run ASP.NET Core web application in a Linux container. I need to provide Windows authentication for my application. How can this be implemented?
0
votes
2answers
48 views

Client can't authenticate to IIS site using Kerberos

We have several IIS hosted sites using windows authentication. Some of our users can logon in one of the sites, but getting never-ending authentication challenge in another (the second one is used in ...
0
votes
0answers
19 views

SMS Encryption Certificate and SMS signing certificate on Windows server

In the recent vulnerability reports, we have found two self-signed certificates. As those aren't trusted, can we replace them with other certificates? If so, do we need two different certs? Also, what ...
0
votes
0answers
22 views

2016 Domain Controller Unreachable/Unrecoverable need to seize roles

Have a newly minted DC (on VM) that is DC for a Tree Domain in our forest, and it's got issues. Unfortunately was the only DC I have promoted for this Domain when it went down. The OS is in a bad ...
1
vote
2answers
30 views

Powershell (Get-ADUser -identity).someproperty not showing result

I am trying to search for individual properties of an AD-User, when I run (Get-ADUser $userName).$targetProperty I get nothing When I run Get-ADUser $userName | select $targetProperty I get the ...
0
votes
0answers
30 views

Clients could not join to domain controller

When I`m trying join a client to the domain controller the client raises the following error: The following error occurred when DNS was queried for the service location (SRV) resource record used ...
1
vote
0answers
48 views

Access denied (5) for net user /domain command

I would like to get some help debugging an issue we are experiencing in a specific server. We have a web application that uses windows accounts to validate user credentials and groups. We noticed ...
0
votes
0answers
18 views

Policies “Audit policy change” and “Audit Authorization Policy Change” don't seem to be working

Everyone, Trying to see events in the security event log for every time I change the rights of a user and it doesn't seem to be working. I've confirmed that setting the above policy settings in the "...
1
vote
1answer
63 views

Office 2019 prompts for login

We rolled out Office 2019 Professional to around 50 of our employees. A select few are not experiencing any issues, which includes me. This means all tests before the roll-out worked just fine. After ...
1
vote
1answer
74 views

If I install certificate services (enterprise root ca) on a domain controller is LDAPS automatically enabled?

reading this article: https://www.petri.com/enable-secure-ldap-windows-server-2008-2012-dc The first method is the easiest: LDAPS is automatically enabled when you install an Enterprise Root CA ...
0
votes
0answers
9 views

wso2 and Active Directory

I am trying to get my WSO2 keymgr cluster to moved from openldap to windows Active Directory. and use this as the primary user store. i have used the guide from wso2 and applied all the ad related ...
0
votes
0answers
14 views

NFS4 idmap with IBM GPFS storage and AD

I am trying to connect a Linux machine to a new IBM GPFS-based storage via NFS4. The Linux machine uses an LDAP server and the IBM storage uses another ActiveDirectory. For now, we are in a test net, ...
0
votes
1answer
47 views

AD clients try server management IP

My servers have two NICs, one for LAN and the other for management. Those are separate VLANs. I have disabled registration of management NIC in DNS. There are no records in DNS with management ...
0
votes
0answers
25 views

Windows Group Policy Objects Using Linux [duplicate]

This might be redundant, but I have a server which currently runs Windows Server 2016, and I'm in process of fixing its many issues which would probably means that I have to reinstall the OS on it. I ...
0
votes
1answer
39 views

Network File Share access across multiple domains under the same forest

My knowledge of Active Directory and network setup is limited. In the environment of this example, there are multiple domains under one forest. It has come up that users of Domain A have access to ...
0
votes
1answer
41 views

Should Active Directory, Web Apps and MS-SQL all have the same users?

I am looking for a clean way to do audit trails in MS SQL Server, for compliance reasons, preferably completely on the database side without involving the web application. When talking about audit ...
0
votes
1answer
29 views

new ADDS in Azure VM, then expose to internet

I am really new with Active Directory, and I am trying out to setup an Active Directory on a Windows 2016 Azure VM, and then expose the Controller to the Internet, so I can join a PC into the ...