Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
0
votes
1answer
620 views

Most efficient way to add a large group of users to AD windows 2008

I have a large number of users and I know what their password is already. I also know what their profile path is. What is the best/most efficient way to add them all at once? Thanks!
0
votes
1answer
3k views

Can't reset user account password in AD due to Policy's restriction

I am deep *** right now and I need your precious help! Yesterday, I change a user account password in AD (Srv2003). The password was 4 letters, no caps, no numbers. It was set to never expires and ...
1
vote
2answers
1k views

Apache Authentication against AD in Ubuntu 9.04

I'm trying to configure a test setup of RT (Request Tracker) against an Active Directory...um...directory. I am searching for a simple howto, and it appears that there's about seven ways to do it and ...
0
votes
3answers
164 views

WinXP login domain change

I have the following problem. The laptop with WinXP was configured to login to company domain. I brought it home and wanted to connect to home network, which is a workgroup. So from "My Computer" ...
1
vote
3answers
228 views

outlook exchange user details

When changing users details in active directory does it take a while for that information to propagate to outlook when clicking on that persons properties? Because I changed some users information in ...
0
votes
1answer
1k views

Routing to a different gateway depending on destination for Windows Network

I have a small network on a single VLAN 10. It's a 192.168.100.x network with a firewall/NAT sitting at .254. Our company relies on some data feeds that are brought into the network via dedicated ...
0
votes
1answer
669 views

Keeping Active Directory free of stale objects

We mainly run a 2003 orientated environment. Soon we will be moving towards a clean slate of 2008 EBS. My main concern is the AD/network legacy that has accumulated over the years will be difficult to ...
1
vote
1answer
2k views

Exchange 2007 distribution groups best practices

researching the topic for some time now, here are the two facts I've found so far from Microsoft, followed by a whole bunch of questions. In Exchange 2007, you should use universal groups for ...
1
vote
3answers
6k views

How to enable domain select on Vista logon screen?

I recently set up the first Vista laptop for our domain, and discovered that there is no longer a domain dropdown box. Main application is switching between domain and local computer accounts. Since ...
0
votes
2answers
6k views

Linux active directory tool [closed]

Are there any useful tools for linux to work with active directory. I am looking for something analogous to active directory users and computers or AD Explorer. As far as ADUC is concerned, is it ...
0
votes
2answers
743 views

login to an off-domain machine with a domain account

I've started to deploy tablets to certain staff that are often out of the office and I'm wondering how to consolidate their login credentials so that they can still login to their machine with their ...
1
vote
3answers
7k views

How can I automatically log out all machines on a windows domain?

Our Sophos Anti-virus scans each night, but complains about files it can't access. Files that are in use by Firefox or Outlook. Is there a script we can configure to run each night before the scans, ...
14
votes
5answers
18k views

Should Windows Web Servers be members of an Active Directory Domain

In terms of security and manageability - What is best practice? Should web servers Be added to and managed from an Active Directory domain or Be part of a 'web server' workgroup that is separate ...
0
votes
2answers
3k views

PowerShell/Command Prompt - Create folders from AD group members

Is there a simple script I can use to give a destination folder and the AD group I want to use and it would generate a set of folders with the members of that AD group and delegate the proper ...
2
votes
3answers
2k views

Extracting the machine account domain password from the registry

If I understand correctly, to join a Windows domain, a machine needs to have an account on Active Directory, and have the password to authenticate. Such a password is renewed automatically every 30 ...
2
votes
4answers
3k views

Scan Network for Computers not on Domain

How would you scan / query a local network for computers not on a particular domain (particularly windows)?
0
votes
1answer
87 views

SBS2003 R2 - certificates

I get a log error OAL GENERATOR 9323. Seems some users have invalid certificates, however, when opening the tab in the user properties under the Global Adress lists preview option. Active directory ...
2
votes
2answers
2k views

AD account change not effective on sql server

When we have to change a user's last name lets say from jsmith to jjones, in our Win2000 active directory, we experience a bit of strange behavior with Sql Server 2008. When jjones hits the server ...
0
votes
1answer
3k views

Using AD and GPO to turn off print and file sharing

I want to start building, I believe a base GPO to lock down the machines that will be on the network. How do I go about doing this. The first thing I want to do is disable file and print sharing for ...
9
votes
2answers
1k views

Precached Windows Logins?

I know if a Windows users logs into a machine, and later that machine falls off the network, that the user can log in to the machine with cached credentials. Is there any way to precache those ...
0
votes
4answers
3k views

Query enabled but not expired users in AD

How can I query AD to give me all users that are enabled, but not expired? I use the QuestAD tools with PowerShell but it doesn't have a "-NotExpired" option or equivalent with Get-QADUser. I would ...
2
votes
2answers
203 views

Active Directory Implementation

I am planning to implement active directory on Windows Server 2003. Right now there is no AD setup in the network. We have about 80 users in this location and 300 other users across various ...
7
votes
4answers
2k views

Giant active directory deployment vs giant Sun LDAP

At work we're in the early phases of an identity management project. This is all in the context of higher ed where we have a couple thousand faculty / staff and about twenty thousand students. Has ...
0
votes
1answer
1k views

Migrating workstations from one domain to another

We recently had a new management company come in for our business - new AD forest, totally new domains, totally new everything. Our old machines were in their own AD forest and domain. From what I'...
2
votes
4answers
420 views

Recommendations for the best way to set up an office of 15 to work on-site and from home

I handle an office of 15 employees that need to access their workspace from home and at work and was looking for advice on making things easier to manage. Right now the office is in a workgroup and ...
2
votes
1answer
7k views

Why do I have to DisableDHCPMediaSense in some WinXP clients for Group Policies to apply correctly?

This problem appears to apply to multiple XP clients connected to a 3Com Baseline2948 Gigabit switch. The clients don't share a common network card, some are Intel based, others nVidia. All clients ...
0
votes
1answer
187 views

Trouble adding computers to domain

I work for a medical practice with three different facilities and our newest was previously an office set up almost identical to ours. With terminal services for remote access. Problem is their ...
3
votes
2answers
691 views

Migration from Workgroups to Domain

I currently have about 50 different work stations, all running windows xp who are part of various workgroups. These machines were all setup by different people with no communication between them. I ...
0
votes
4answers
212 views

Domain Name Resolves to different IP on one WIndows 2003 Server

I have several domain controllers running, one name resolves to the internal IP, where the name resolves to an external IP on the other domain controllers. I don't see any entry for the name I am ...
2
votes
1answer
969 views

How can I create whitelist of users allowed on a domain computer?

I have a server with Windows Server 2008 which is joined to our local Active Directory Domain. This means that anyone can access it by default, but only certain specific users are Administrators. ...
9
votes
1answer
17k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
5
votes
6answers
4k views

When to add a domain controller at a remote location?

In a location that has 1 T1 connection with ~ 40 - 50 ms ping latency to the closest domain controller, about how many normal users would it take before you would recommend putting a domain controller ...
0
votes
1answer
8k views

IE8 Compatability View Mode for Intranet Sites Group Policy

Is there a group policy to disable this checkbox, I don't want compatibility view mode to be allowed on my network at all for anything or for any site. I don't even understand why Microsoft added it. ...
2
votes
4answers
3k views

Do we need CALs for our clients if we store their user accounts for third party apps in Active Directory? [duplicate]

Possible Duplicate: Can you help me with my software licensing question? We are looking at consolidating several credential stores into Active Directory. The credentials are mainly for our ...
0
votes
2answers
551 views

How does Windows Small Business Server 2003 count users toward the 75 user limit? [duplicate]

Possible Duplicate: Do we need CALs for our clients if we store their user accounts for third party apps in Active Directory? We are considering storing accounts for our third party FTP server in ...
0
votes
2answers
2k views

What to do with Exchange 2007 and crashed/rebuilt Active Directory

Here's our situation: we had one server running Win2003 Server Std that was also the only domain controller. The ntds.dit file (AD database) became corrupted and there was no backup. We scrapped the ...
0
votes
1answer
2k views

DNS lookup to AD-DNS from a different subnet

I have a Windows 2008 R2 Active Directory with several domain controllers, all with DNS. This is spread over three locations, interconnected with site to site VPN. All computers and servers are on the ...
1
vote
4answers
124 views

Is there service management software in existence that meets these needs?

I work in an IT dept. at a higher ed. institution. Because the department is small and the infrastructure simple, managing all the services we offer out to the school (like LDAP, AD, various DBMS', ...
0
votes
2answers
5k views

How to promote Active Directory domain controller replica to replace the main domain controller?

We have two DC in our network. Both now work in 2008 R2 mode. I want to remove the one, that was created first. Is it safe just to turn it off or should I do something to promote replica DC to be main ...
1
vote
1answer
149 views

Microsoft DNS set up with no forwarder

On my Windows 2003 Server domain controllers, most of them don't have IPs entered for the forwarder 'All other DNS names'. The only one that does, is one titled 'PDC'. So for DNS queries to the ...
4
votes
2answers
12k views

How do I migrate user-accounts from OpenLDAP to Active-Directory?

We want to migrate our user-accounts from OpenLDAP to Active-Directory without changing the passwords and such. The users shouldn't notice the difference against which server they're authenticating ...
3
votes
3answers
12k views

Domain User can RDP into Domain Controller?

Vanilla Windows Server 2008 x64 Standard DC (AD, DNS). I was remoting into my DC to do a bit of work and, thru force of habit, logged into the server using a regular domain account, not a domain admin....
3
votes
2answers
2k views

Removing Active Directory Server No Longer Running on Domain

We had an Active Directory server completely die, and now we have some clients that aren't getting policies properly because their client is looking for the old server instead of moving to another ...
1
vote
1answer
114 views

Two Sharepoint 2007 sites

I'm working with SharePoint 2007 and we're currently working with another organization for a long-term project. We need to access documents in their SharePoint site. After trying to figure out the ...
12
votes
3answers
35k views

What happens when a computer joins an Active Directory domain?

What changes are applied to a client when it joins an AD domain? How is a domain member supposed to behave when disconnected to the network? Are users able to login? Will domain user policies still ...
0
votes
1answer
7k views

Joining to Active Directory Problem

I have got some problem to join one computer to Domain. First I got this error Messages when try to join to DC Your Computer could not joined to the dc.. While processing a change to DNS host name ...
3
votes
3answers
3k views

Is Active Directory Unreliable or is there Another Issue Here?

We have an organization of approximately 1200 Windows PC clients on an Active Directory network. We have noticed that there seems to be random systems that don't get policies set. For example, we ...
0
votes
1answer
168 views

AD network printer

I have a quite broad but troublesome question to ask. The problem is, one network printer (installed on the main fileserver and shared to workstations) tends to go offline from time to time without ...
2
votes
1answer
5k views

Windows 2003 dcpromo demote failure

I'm rebuilding the server mentioned in this question. However before I do blow it away I would like to move its operations off of it first. DHCP and ePO are taken care of and now all that is left is ...
2
votes
1answer
842 views

Expose Active Directory to the Internet

I need to find how can I expose Active Directory on my Widnows 2003 server to the internet. I need to be able to make Active Directory avaliable to my development computer. The Active Directory is ...