Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
-2 votes
0 answers
16 views

Strange behavior of the Exchange Powershell

I have a problem since a few days. My domain administrator account can't open the Exchange Powershell anymore, I get the message "WinRM can't process the request". I don't have this problem ...
-1 votes
0 answers
7 views

ADFS auditing resolved as 'microsoft windows security auditing' in Windows server 2016 Event viewer

I have installed the ADFS service in a domain's member server (windows server 2016 datacenter). I have made a logon attempt with ADFS through the idp-initiated sign-on page. But after login success ...
0 votes
0 answers
22 views

sssd password update not working, AD behind firewall

I have a centos server in a DMZ joined to my AD with sssd, minimum ports are open in the corporate firewall to allow the authentication but if the password of a user is updated on the AD, the Centos ...
  • 1
0 votes
1 answer
22 views

Windows 11 Home - no option to "join this device to Azure AD"

I have a work computer currently running Windows 11 Home. (I will update it to Pro/Enterprise, but I need to get this figured out first.) I need to "set up a work or school account" by ...
-1 votes
0 answers
9 views

windows,powershell, windows server, adding users to groups with special permissions giving owner permissions

i want to give owner permissions to few members in a group with specific permissions update-help Import-module activedirectory $username = read-host "enter the username" $group = read-host &...
0 votes
0 answers
17 views

How do i fix krb5 kdc in a samba ad dc domain

After a restart of an samba ad dc, the kdc seems to have problems. What does the following in the krb5 daemon log mean? : AS_REQ (6 etypes {aes256-cts-hmac-sha1-96(18), DEPRECATED:arcfour-hmac(23), ...
-1 votes
0 answers
16 views

Enable AD Domain Services and AD light weight directory services

I am trying to enable these features (AD Domain Services and AD light weight directory services) on 100s of hosts through AD group policy objects. Does anyone know which GPO template is right for ...
  • 99
-1 votes
0 answers
30 views

Promoting a new Windows Server 2022 to Primary Domain Controller Disables Cortana and WindowsShellExperience and thus Disables the Start Menu

I am running an on-premise Microsoft Windows network based on Active Directory. I currently have 2 domain controllers, both Windows Server 2012. Both Virtualised and hosted via hyper-V on separate ...
-1 votes
0 answers
47 views

Can't log in with "Domain administrator" group via RDP

the problem is that all users in "Domain Admins" group can't log in via RDP on a fresh new Windows 2019 server with Domain. Error: Account restrictions are preventing this user from signing ...
  • 7
-1 votes
1 answer
33 views

How should I design my 'public' network of an project?

I'm thinking about doing some online projects as a Developer/IT Technician, and I have some concerns regarding security. I'm unable to host my servers locally for my project and I thought why not to ...
  • 1
-2 votes
0 answers
182 views

Applied Windows 2022 November Update to my Windows 2012 R2 DCs. Cannot reach a Windows 2003 box anymore. How to restore communication? [closed]

Please let's skip the part "what? 2003???" etc :P That's nothing into production, but I need to be able to allow communication with them for some more week if possibile. As you know (and if ...
-2 votes
1 answer
28 views

Can't find computer object in AD

I replaced ex-sysadmin and there is a laptop that is giving me an error of trust relationship. The computer object is not available in AD. But, I can ping the computer name. I don't know the password ...
-1 votes
1 answer
41 views

Windows Server 2022 join Azure AD Domain Services over VPN - How to do this?

I have servers spread across multiple on-premises locations that I want to join to Azure AD DS, and I don't want to setup ADFS because it is too much work. So here is what I am thinking: Use VPN to ...
  • 411
-1 votes
1 answer
24 views

Windows Active Directory Group Policy: Restrict direct access to folder by users and only allow an application to read/write

I have a terminal server (Windows Server Std 2022) on which an ERP application is run by multiple users at once. The application saves its database in a folder in the public folder and right now all ...
0 votes
0 answers
37 views

xrdp no login possible for AD-users

i have set up a Fedora 37 Gnome box, as well as Fedora 32 Gnome box and a Fedora 37 KDE box (this one upgraded since about 5 years) All PCs are part of a AD-domain, login with AD-users on local ...
  • 113
0 votes
0 answers
23 views

Samba doesn't run root preexec

I have Windows Server 2019 AD and Samba Winbind joined to the AD. The Samba is technically used for home directories and a shared folder between all domain users. How to force Samba to create ...
  • 99
0 votes
1 answer
34 views

Unable to login via RDP into a VM from a domain joined Windows client to a VM that is joined to another domain

The setup is the following: Windows VM (Domain Joined to Domain A (Internal) - AD is under my control) [Windows Server 2022] Windows Client (Domain Joined to Domain B (External) - AD is not under my ...
0 votes
1 answer
26 views

Samba Winbind - Windows Server AD - Users are able to see each other's home directories

I'm running AlmaLinux and Samba Winbind joined into Windows Server 2019 AD. The domain users have home directories and a pccommon directory (shared folder). When I create a new domain user in the ...
  • 99
0 votes
0 answers
17 views

AD joined Linux machine with different suffix

I've been struggling for 4 days and according to the information I have stated below, I can't access the linux os (debian) joined in AD to users with different UPN suffixes. What kind of config (sssd ...
0 votes
0 answers
22 views

Azure P2S killing Kerberos Connection

EDIT: I can confirm that doing the registry change as mentioned here and here does in fact Band-Aid the issue. But why? Why do I need this work around just because I am using a laptop on the VPN when ...
-1 votes
1 answer
54 views

Group Policy - Issues with DFSR, NETLOGON/SYSVOL?

We have an issue where some computers don't seem to be picking up all of their GPO's. When looking in group policy management editor we see many many "red x", "file not found" GPOs ...
  • 162
0 votes
1 answer
36 views

Active directory to ldap synchronization

I have two LDAP servers. First is Active Directory and second is openLDAP. I need setup between these servers. Is here anybody, who know, how to do it? I tried to use this link for tutorial, but I ...
  • 1
0 votes
1 answer
26 views

Set folder permission by OU

I'm attempting to setup folder permissions on my DC to a shared desktop. I have an OU containing the users I want to allow to view this folder, and a GPO which handles the permissions linked to the OU....
  • 13
-1 votes
1 answer
39 views

What happens if the only DC fails?

I recently started an internship in System Administration and I am currently tasked with researching and potentially setting up an on Premise Active Directory in our company. Lets say, I am running ...
0 votes
2 answers
30 views

Simple NTFS/permissions q

Say I would like to only allow domain admins write permissions to a folder, and disallow everyone else. If I set write permissions for domain admins, but then read-only for 'authenticated users', ...
  • 162
0 votes
0 answers
21 views

Openvpn comunity setup ldap

I have got installed openvpn server on my debian virtual machine. Evrything it's OK,but now I want conenct this server to the windows active directory. I not found any working manual for this task. ...
  • 1
-2 votes
0 answers
27 views

Install MSI on remote computer with admin rights

Here's my problem: I need to install an MSI on computers in my domain and it requires admin privileges to be execute. I tried to use the classic MSI deploy procedure via GPO and even using some batch ...
  • 1
-1 votes
1 answer
28 views

Local user login on a domain machine, receiving System error 5 occurred Access is denied error

We are trying to use the command prompt net group from a local login on a workstation.. This workstation is on the domain, but I'm logging in as the local user: .\localuser and not the domain\user. ...
0 votes
1 answer
32 views

Restoring a domain machine which name is already in use

I have such situation: one of domain PCs was broken and replaced by new one using the same machine name. Now the old machine is back from service and I want to use it in different place, but if I try ...
-1 votes
0 answers
10 views

kinit.exe gives java.net.PortUnreachableException

I am trying to run kinit.exe (which is bundled with jdk 17.03) from a java application server to obtain a ticket from a Windows 2019 AD. I'm running the command as follows: kinit.exe -f -k -t <...
  • 879
0 votes
0 answers
31 views

Set proxy for local users via GPO

I have been tasked a) to create a kiosk machine and b) configure it so that users can only visit certain internal sites, and no external sites. Assumptions: Windows 10 machine, part of domain Local ...
  • 157
1 vote
0 answers
71 views

Docker container cannot use its host's /etc/hosts file

After I joined some of my Ubuntu servers (mostly 20.02) to an AD domain(using realmd and sssd), they're unable to use their host's /etc/hosts file! Which they could do before they were a part of AD. ...
0 votes
1 answer
41 views

How can a Azure-AD joined device log in to onpremise Active Directory (for Windows-authentication and SQL-server)

I don't understand how to handle this case: A laptop is joined to Azure-AD and the user logs in with a PIN-code (for example). This part works fine. Now the user needs to work with the on-premise ...
  • 123
-1 votes
1 answer
35 views

Challenging Multiple Domain Controller Upgrade Questions (parent and child) [closed]

I am new to this domain controller and new to the company. all the below domain controller are in windows 2008. we got two parent controller parent-DC1-2008.example.com parent-DC2-2008.example.com ...
0 votes
1 answer
30 views

SQL Server - Windows Active Directory users

I am actually using SQL server for my application. If I work with one user (Install and Update app with WIX installer) everything works good, but if I try to change me windows user account to the ...
0 votes
1 answer
87 views

Ubuntu 22.04 ActiveDirectory Password Syncronisation

I have Ubuntu 22.04 clients witch login with activeDirectory Domain accounts. (joined domain) A password policy is active to force a new password every 2 month. The password can be changed on multiple ...
  • 103
-1 votes
1 answer
37 views

How to sync from azure cloud to a local server

I'm new to this company which only has an azure active directory in the cloud. I'm tasked with getting azure active directories from the cloud to sync to my local server. All the guides I've read ...
-1 votes
1 answer
44 views

Is there a way to have Windows active directory give a different ip address?

Here is a summary of my problem. I have configured a switch with DHCP capabilities and have connected my machine running Windows Server 2019 to the switch and received an IP from the scope perfectly. ...
  • 1
0 votes
2 answers
54 views

What are the default settings for the "Default Domain Controller Policy"?

TL;DR: See title. Background: Back in the "old days", we did a lot of bad things: We used the same server for Active Directory and other services (anyone remember Windows Small Business ...
  • 2,188
0 votes
0 answers
31 views

Domain clients cannot UNC to \\domain. They can UNC to \\domain\netlogon and \\domain\sysvol

Server 2019 domain controllers and Server 2019 member servers. We can enter these UNC paths in File Explorer or the Run prompt: \\mydomain\netvol \\mydomain\sysvol \\mydomain.com\netvol \\mydomain.com\...
-2 votes
0 answers
16 views

How to share app installed on workgroup with domain account on Windows 10

I am using VMWare Workstation with Windows Server 2019 on machine PS1 and I have one Virtual machine PC1 running Windows 10 Pro in Workkgroup. I now installed Visual studio code and Notepad++ on PC1 ...
  • 97
-1 votes
0 answers
18 views

Centos AWS simple AD net ads user ADD failing

I am testing AWS Simple AD using Centos and AWS Linux. I can add the servers to AD no problem and query the AD. Yet when I run $#net ads add user joeblogs password123 -U administrator -S mysuperdomain....
  • 1
0 votes
0 answers
15 views

How could domain controller not be able to change password of AD user

Trying to troubleshoot a customer. We have a service running on their AD domain controller. The service rotates passwords for certain accounts defined by customer at a predetermined timeout. The ...
0 votes
1 answer
47 views

I cannot get an otherwise functional Powershell script to run on a schedule

Environment: Server 2019 Domain Controller. I have a simple script that combs through my AD users and disables anyone who hasn't logged in within the past 35 days (org policy). Looks like this: Get-...
0 votes
0 answers
77 views

Azure App Proxy with onPremise RDS SSO only with AzureAD

My client have Azure Active Directory with synchronized their onPremise Active Directory. We want to provide him Remote Desktop Services behind Azure App Proxy from dedicated onPremise Active ...
1 vote
1 answer
26 views

Docker container running gMSA whilst having admin permissions

I'm trying to set up a Docker container for our DevOps pipelines. I've... almost got it all. Right now I've got a Windows-based container which: has pre-installed SDKs, Java and the like can ...
  • 377
0 votes
0 answers
16 views

Isolated non-syncing RODC

We have a multi-site active directory setup, with one of the sites only containing read only domain controllers. Due to a new remote site coming online, new site links and link bridges were created as ...
  • 852
0 votes
1 answer
51 views

Publish Root CA CRL to network drive

I am currently "prototyping" a Windows PKI with AD CS Role. I have two-tier hierarchy (Root Offline CA -> Enterprise Sub-CA -> Digital Certs). Furthermore, I am trying to publish the ...
0 votes
0 answers
30 views

Active Directory User Accounts not loading environment variables from /etc/profile and /etc/bashrc

I have Rocky Linux 8.6 server that is joined to Active Directory and I can login to it with AD accounts. I have also mounted a NFS drive to the server. The home directories for AD accounts have been ...
  • 1
0 votes
0 answers
40 views

Apache Guacamole + Windows Active Directory Error 49

I've configured my guacamole testing instance to the point where, when I enter a username and password at the prompt, I see an ldap bind request at my domain controller. obviously that is not my real ...

1
2 3 4 5
199