Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
19 views

How should I design my 'public' network of an project?

I'm thinking about doing some online projects as a Developer/IT Technician, and I have some concerns regarding security. I'm unable to host my servers locally for my project and I thought why not to ...
  • 1
-2 votes
0 answers
76 views

Applied Windows 2022 November Update to my Windows 2012 R2 DCs. Cannot reach a Windows 2003 box anymore. How to restore communication? [closed]

Please let's skip the part "what? 2003???" etc :P That's nothing into production, but I need to be able to allow communication with them for some more week if possibile. As you know (and if ...
-2 votes
1 answer
23 views

Can't find computer object in AD

I replaced ex-sysadmin and there is a laptop that is giving me an error of trust relationship. The computer object is not available in AD. But, I can ping the computer name. I don't know the password ...
-1 votes
1 answer
26 views

Windows Server 2022 join Azure AD Domain Services over VPN - How to do this?

I have servers spread across multiple on-premises locations that I want to join to Azure AD DS, and I don't want to setup ADFS because it is too much work. So here is what I am thinking: Use VPN to ...
  • 401
-1 votes
1 answer
24 views

Windows Active Directory Group Policy: Restrict direct access to folder by users and only allow an application to read/write

I have a terminal server (Windows Server Std 2022) on which an ERP application is run by multiple users at once. The application saves its database in a folder in the public folder and right now all ...
0 votes
0 answers
25 views

xrdp no login possible for AD-users

i have set up a Fedora 37 Gnome box, as well as Fedora 32 Gnome box and a Fedora 37 KDE box (this one upgraded since about 5 years) All PCs are part of a AD-domain, login with AD-users on local ...
  • 113
0 votes
0 answers
20 views

Samba doesn't run root preexec

I have Windows Server 2019 AD and Samba Winbind joined to the AD. The Samba is technically used for home directories and a shared folder between all domain users. How to force Samba to create ...
  • 99
0 votes
0 answers
16 views

Unable to login via RDP into a VM from a domain joined Windows client to a VM that is joined to another domain

The setup is the following: Windows VM (Domain Joined to Domain A (Internal) - AD is under my control) [Windows Server 2022] Windows Client (Domain Joined to Domain B (External) - AD is not under my ...
0 votes
1 answer
23 views

Samba Winbind - Windows Server AD - Users are able to see each other's home directories

I'm running AlmaLinux and Samba Winbind joined into Windows Server 2019 AD. The domain users have home directories and a pccommon directory (shared folder). When I create a new domain user in the ...
  • 99
0 votes
0 answers
15 views

AD joined Linux machine with different suffix

I've been struggling for 4 days and according to the information I have stated below, I can't access the linux os (debian) joined in AD to users with different UPN suffixes. What kind of config (sssd ...
0 votes
0 answers
18 views

Azure P2S killing Kerberos Connection

EDIT: I can confirm that doing the registry change as mentioned here and here does in fact Band-Aid the issue. But why? Why do I need this work around just because I am using a laptop on the VPN when ...
0 votes
0 answers
30 views

Group Policy - Issues with DFSR, NETLOGON/SYSVOL?

We have an issue where some computers don't seem to be picking up all of their GPO's. When looking in group policy management editor we see many many "red x", "file not found" GPOs ...
  • 164
0 votes
0 answers
19 views

Active directory to ldap synchronization

I have two LDAP servers. First is Active Directory and second is openLDAP. I need setup between these servers. Is here anybody, who know, how to do it? I tried to use this link for tutorial, but I ...
  • 1
0 votes
1 answer
25 views

Set folder permission by OU

I'm attempting to setup folder permissions on my DC to a shared desktop. I have an OU containing the users I want to allow to view this folder, and a GPO which handles the permissions linked to the OU....
  • 13
0 votes
1 answer
35 views

What happens if the only DC fails?

I recently started an internship in System Administration and I am currently tasked with researching and potentially setting up an on Premise Active Directory in our company. Lets say, I am running ...
0 votes
2 answers
30 views

Simple NTFS/permissions q

Say I would like to only allow domain admins write permissions to a folder, and disallow everyone else. If I set write permissions for domain admins, but then read-only for 'authenticated users', ...
  • 164
0 votes
0 answers
21 views

Openvpn comunity setup ldap

I have got installed openvpn server on my debian virtual machine. Evrything it's OK,but now I want conenct this server to the windows active directory. I not found any working manual for this task. ...
  • 1
-2 votes
0 answers
27 views

Install MSI on remote computer with admin rights

Here's my problem: I need to install an MSI on computers in my domain and it requires admin privileges to be execute. I tried to use the classic MSI deploy procedure via GPO and even using some batch ...
  • 1
-1 votes
1 answer
28 views

Local user login on a domain machine, receiving System error 5 occurred Access is denied error

We are trying to use the command prompt net group from a local login on a workstation.. This workstation is on the domain, but I'm logging in as the local user: .\localuser and not the domain\user. ...
0 votes
1 answer
32 views

Restoring a domain machine which name is already in use

I have such situation: one of domain PCs was broken and replaced by new one using the same machine name. Now the old machine is back from service and I want to use it in different place, but if I try ...
-1 votes
0 answers
10 views

kinit.exe gives java.net.PortUnreachableException

I am trying to run kinit.exe (which is bundled with jdk 17.03) from a java application server to obtain a ticket from a Windows 2019 AD. I'm running the command as follows: kinit.exe -f -k -t <...
  • 879
0 votes
0 answers
21 views

Set proxy for local users via GPO

I have been tasked a) to create a kiosk machine and b) configure it so that users can only visit certain internal sites, and no external sites. Assumptions: Windows 10 machine, part of domain Local ...
  • 157
1 vote
0 answers
58 views

Docker container cannot use its host's /etc/hosts file

After I joined some of my Ubuntu servers (mostly 20.02) to an AD domain(using realmd and sssd), they're unable to use their host's /etc/hosts file! Which they could do before they were a part of AD. ...
0 votes
1 answer
34 views

How can a Azure-AD joined device log in to onpremise Active Directory (for Windows-authentication and SQL-server)

I don't understand how to handle this case: A laptop is joined to Azure-AD and the user logs in with a PIN-code (for example). This part works fine. Now the user needs to work with the on-premise ...
  • 123
-1 votes
1 answer
32 views

Challenging Multiple Domain Controller Upgrade Questions (parent and child) [closed]

I am new to this domain controller and new to the company. all the below domain controller are in windows 2008. we got two parent controller parent-DC1-2008.example.com parent-DC2-2008.example.com ...
0 votes
1 answer
27 views

SQL Server - Windows Active Directory users

I am actually using SQL server for my application. If I work with one user (Install and Update app with WIX installer) everything works good, but if I try to change me windows user account to the ...
0 votes
1 answer
65 views

Ubuntu 22.04 ActiveDirectory Password Syncronisation

I have Ubuntu 22.04 clients witch login with activeDirectory Domain accounts. (joined domain) A password policy is active to force a new password every 2 month. The password can be changed on multiple ...
  • 103
-1 votes
1 answer
35 views

How to sync from azure cloud to a local server

I'm new to this company which only has an azure active directory in the cloud. I'm tasked with getting azure active directories from the cloud to sync to my local server. All the guides I've read ...
-1 votes
1 answer
42 views

Is there a way to have Windows active directory give a different ip address?

Here is a summary of my problem. I have configured a switch with DHCP capabilities and have connected my machine running Windows Server 2019 to the switch and received an IP from the scope perfectly. ...
  • 1
0 votes
2 answers
46 views

What are the default settings for the "Default Domain Controller Policy"?

TL;DR: See title. Background: Back in the "old days", we did a lot of bad things: We used the same server for Active Directory and other services (anyone remember Windows Small Business ...
  • 2,188
0 votes
0 answers
29 views

Domain clients cannot UNC to \\domain. They can UNC to \\domain\netlogon and \\domain\sysvol

Server 2019 domain controllers and Server 2019 member servers. We can enter these UNC paths in File Explorer or the Run prompt: \\mydomain\netvol \\mydomain\sysvol \\mydomain.com\netvol \\mydomain.com\...
-2 votes
0 answers
15 views

How to share app installed on workgroup with domain account on Windows 10

I am using VMWare Workstation with Windows Server 2019 on machine PS1 and I have one Virtual machine PC1 running Windows 10 Pro in Workkgroup. I now installed Visual studio code and Notepad++ on PC1 ...
  • 97
-1 votes
0 answers
17 views

Centos AWS simple AD net ads user ADD failing

I am testing AWS Simple AD using Centos and AWS Linux. I can add the servers to AD no problem and query the AD. Yet when I run $#net ads add user joeblogs password123 -U administrator -S mysuperdomain....
  • 1
0 votes
0 answers
14 views

How could domain controller not be able to change password of AD user

Trying to troubleshoot a customer. We have a service running on their AD domain controller. The service rotates passwords for certain accounts defined by customer at a predetermined timeout. The ...
0 votes
1 answer
43 views

I cannot get an otherwise functional Powershell script to run on a schedule

Environment: Server 2019 Domain Controller. I have a simple script that combs through my AD users and disables anyone who hasn't logged in within the past 35 days (org policy). Looks like this: Get-...
0 votes
0 answers
62 views

Azure App Proxy with onPremise RDS SSO only with AzureAD

My client have Azure Active Directory with synchronized their onPremise Active Directory. We want to provide him Remote Desktop Services behind Azure App Proxy from dedicated onPremise Active ...
1 vote
1 answer
24 views

Docker container running gMSA whilst having admin permissions

I'm trying to set up a Docker container for our DevOps pipelines. I've... almost got it all. Right now I've got a Windows-based container which: has pre-installed SDKs, Java and the like can ...
  • 367
0 votes
0 answers
13 views

Isolated non-syncing RODC

We have a multi-site active directory setup, with one of the sites only containing read only domain controllers. Due to a new remote site coming online, new site links and link bridges were created as ...
  • 852
-1 votes
0 answers
54 views

windows server 2019 set time automatically grayed out - How to remove it

I have windows server 2019 installed on hyper-v with ADDS replicated with the primary. The clients machines sync their time with it. For some reasons related to our company work, I need to set a ...
-1 votes
0 answers
17 views

Server Recommendation for windows server 2022 [duplicate]

I'm new to maintaining users. As we currently don't have an active directory server, everything is in the cloud currently with Azure. I would like to have a local AD on-prem, but that can change. I'm ...
0 votes
1 answer
40 views

Publish Root CA CRL to network drive

I am currently "prototyping" a Windows PKI with AD CS Role. I have two-tier hierarchy (Root Offline CA -> Enterprise Sub-CA -> Digital Certs). Furthermore, I am trying to publish the ...
-2 votes
0 answers
28 views

How can I transfer Microsoft windows servers from one AD domain to another domain?

Is it possible to transfer on-premises Microsoft Windows servers (including a database server) from one Active Directory Domain to another Active Directory Domain, without reinstalling all the servers ...
0 votes
0 answers
28 views

Active Directory User Accounts not loading environment variables from /etc/profile and /etc/bashrc

I have Rocky Linux 8.6 server that is joined to Active Directory and I can login to it with AD accounts. I have also mounted a NFS drive to the server. The home directories for AD accounts have been ...
  • 1
0 votes
0 answers
38 views

Apache Guacamole + Windows Active Directory Error 49

I've configured my guacamole testing instance to the point where, when I enter a username and password at the prompt, I see an ldap bind request at my domain controller. obviously that is not my real ...
0 votes
0 answers
32 views

Windows Active Directory cannot show user files while on VPN

I have this setup with a local LAN where I have changed the main router from PFSense to a UDM PRO router and new VPN Active Directory users no longer see their documents while working remote. The ...
  • 113
-1 votes
0 answers
50 views

Using Yubikey/smartcard for 2FA for RDP login

for higher securiy we would like to use Yubikeys as a second factor on RDP login for our admin accounts. I found many tutorials telling me how to do this as a replacement for password (by emulating ...
0 votes
0 answers
12 views

2 Issuing CAs are Effected by Subnet Region

We are working to set up a 2-tier pki with 2 issuing CAs in different regions/subnets. We were able to get everything looking right on pkiview.msc. We are still having trouble though with the second ...
  • 1
2 votes
0 answers
67 views

DFS Provider Cache

My organization has multiple mapped drives that target DFS paths such as \\domain\HOME\HomeDrives\username. When trying to access one of the mapped drives after connecting to VPN, the following error ...
-1 votes
1 answer
24 views

How to connect .local AD DS environment to Azure Virtual Desktop

I have a client that wants to migrate from on prem to hybrid to eventually cloud only and they have a few apps that I want to run via Azure Virtual Desktop as opposed to RDS (licensing for avd is ...
1 vote
0 answers
23 views

Windows test network folder permissions for another account

How to test that an account other than login account has access to a network folder ? Here's an example : I'm logged in as steves but I need to test if joej has access to : \\contoso\dept\finance\...
  • 201

1
2 3 4 5
199