Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
2
votes
1answer
842 views

Expose Active Directory to the Internet

I need to find how can I expose Active Directory on my Widnows 2003 server to the internet. I need to be able to make Active Directory avaliable to my development computer. The Active Directory is ...
2
votes
5answers
3k views

Active Directory 2003 Native mode vs Mixed Mode

My company is switching the Active Directory schema from Mixed Mode to Native Mode. Did anyone had any problems when doing this?. It is a one way process and I'm wondering if there are any impacts on ...
0
votes
1answer
912 views

Problem accessing Windows shares when using a domain

I've had the following problems on multiple Windows networks (using domains) which have a password expiration policy: After a while the user can't access network resources. This seems to be caused ...
1
vote
1answer
4k views

Issue running Active Directory Rights Management Services administration after installation

I'm unable to run the Active Directory Rights Management Services administration console after adding the role to a Windows Server 2008 R2 server. Before adding the role, I created a new website in ...
0
votes
1answer
1k views

Event 10016 When Running ntbackup as a user in the Backup Operators group

I created a Windows 2003 AD user and deployed the user to the local Backup Operators group via Restricted Group on Default Domain Policy. I then restarted a client to make sure that this user was ...
0
votes
1answer
527 views

Active Directory cross forest group enumeration

I have 2 active directory forests, each containing at least one domain but in both cases I am dealing with the top level domain. I have a group on each domain, group1 (domain A) group2 (domain B). ...
0
votes
2answers
2k views

Username to Windows Machine Name Mapping

I have a bunch of users' Windows XP machines within an IP range that are part of Windows 2003 AD. The names, unfortunately, don't have anything to do with the user names. Anyone know how I might ...
0
votes
1answer
140 views

Adding a second line to a domain

I'm running a Windows 2003 single domain network. We currently have a single connection line run in to an inbound nic in our ISA firewall. Outbound nic goes to a switch and from there to all other ...
5
votes
1answer
718 views

What's the best way to migrate from a Windows NT domain to Windows 2000/2003 domain?

I have an old Windows NT domain in need to upgrade to Windows 2000/2003 Active Directory. There is one PDC and two BDCs. What should my next steps be?
0
votes
2answers
811 views

after vpn, not associated with a trusted sql server connection

When I sit at work every thing works fine. But when I am at home, I cant connect with a trusted connection to any sql server at work. I have tried different versions of Windows (XP, Vista and ...
1
vote
1answer
2k views

Virtual Machine Snapshot revert issue

After reverting to an older snapshot, Windows Server 2008 VM running on VMWare gives me the following error when I tried to login: The trust relationship between this workstation and primary domain ...
0
votes
3answers
462 views

Error setting a Windows Service LogOn user

I have a windows service installed (Vista SP1), and I'm trying to set its logon user to a domain user instead of the SYSTEM account. I'm able to select the domain location & user through 'browse',...
2
votes
7answers
1k views

processor - dual core or quad core for ad/ss

I'm looking at getting a few additional servers. Can someone enlighten me as to which I should prefer based on the following uses? Active Directory/DNS Server (<50 users): Dual Core Intel® Xeon® ...
7
votes
4answers
3k views

Unable to dcpromo new 2008 Server in 2000 domain

I'm trying to replace an old Windows 2000 domain controller with a new Windows 2008 Server. I have the Active Directory Domain Services role installed on the new server and joined it to the domain. ...
2
votes
4answers
450 views

Have new domain take over for old domain

I'm working on a solution for this question, and I want to float an idea: Would it be possible to: Create a new domain in the same forest as the old one Set up a trust relation between the two ...
6
votes
4answers
3k views

Wrong SID for Administrator account

In researching my problem for this question, I discovered that the SID for the account in the domain named "Administrator" account is: S-1-5-21-2025429265-492894223-1708537768-1124 That's got to be ...
4
votes
2answers
8k views

Active Directory + whenChanged attribute

Can someone explain what the 'whenChanged ' attribute is for in AD. We have recently been running a report on this attribute because I believe this attribute will will tell what accounts have changed ...
1
vote
1answer
125 views

ASP.NET Web Application on Windows Server: Domain or Not Domain?

What are the pros and cons of running an ASP.NET web application in a domain (having domain controllers etc) Edit Is it possible to scale up to a Server Farm without a domain? yes Pros: 1) Easier ...
0
votes
6answers
2k views

Disable User Account Remotely

I work for a highly distributed IT based consulting firm with approximately 150 users in the field at different client sites at any given time. As we have grown we have needed to ability to disable a ...
0
votes
4answers
6k views

User unable to log in to Active Directory, domain unavailable

Okay, new problem. My Domain Controller is down, and as such, it's normal that users can't login to active directory, right? Now, there's a user who can't login no more using his active directory ...
0
votes
1answer
128 views

Disaster recovery preparation for DC

I have a dc holding activedirectory, dns will be adding all infrastructure related services to this box (Dhcp, certificate server, terminal etc..) I am not planning to replicate this as well, limited ...
3
votes
2answers
3k views

Retire a Dead Windows 2003 Domain Controller

I have a Windows 2003 Domain Controller that died (totally gone). We have decided not to replace it at this time (it was just a backup at a particular office). What do I need to do to remove the ...
2
votes
2answers
204 views

Considerations for Exchange Mailboxes for External Consultants

Does anyone have recommendations on what to do differently, or a checklist, when setting up an Exchange 2003 mailbox for outside consultants? I assume I still need to create an AD user? Only webmail ...
1
vote
4answers
2k views

Allow users to install applications on Vista workstations controlled by Active Directory

I have a network with windows server 2008, Active directory and Vista workstations. I need to allow users to install applications and fonts when they need to (don't worry they are all trustworthy ...
1
vote
4answers
2k views

How to apply a policy at the ou level on Windows 2003

OK, so I am going to level, I am a software engineer trying to do the work of a System Admin. I asked a question about overriding password policies and got an answer that sounded right, but that I ...
0
votes
2answers
1k views

Active directory + public DNS

I have a Windows Server 2008 installed on a machine at a co-lo facility. I made it a domain controller for Active Directory, and it also runs DNS. On the machine if I ping one of the hosted A entries ...
4
votes
3answers
10k views

Machine in domain boots slow when not accessing the domain's network

Is there a way to reduce the timeouts for attempting to connect to domain network resources? (Windows Login Authentication, Network Printers, Network Shares, etc.) I have a series of laptops (Dell ...
0
votes
1answer
309 views

Prevent Windows 2008 Server from polluting BIND

We have a Windows 2008 Server running as DC. DNS is provided by a standalone machine running ISC BIND v9. The zone is configured to accept dynamic updates from the Windows machine. This is needed - ...
0
votes
1answer
186 views

Exchange server creating dns records automatically. How to stop

We have 3 exchange / active directory servers. exchange.queensberry.com exchange2.queensberry.com exchange3.queensberry.com In the domain 'queensberry.com' Our web server is remote from the network,...
3
votes
1answer
771 views

IIS Kerberos authentication

On windows 2003 using IIS 6, we are trying to set up Kerberos authentication. This is working to some extent. I have setup a separate application pool with a service account. When ever I use this ...
1
vote
1answer
550 views

How do I troubleshoot Active Directory on MacOS 10.4 clients?

We have three MacOS machines, all running 10.4.x, bound to our Active Directory network. The domain has two DCs on a single subnet (192.168.1.0/24). One of the DCs (the secondary one, which does not ...
0
votes
1answer
5k views

Reset an AD trust password without domain admin rights at both ends

I have two domains in different forests with an external, two way domain trust in a wndows 2003 level active directory environment. Logins from the remote domain are not working correctly, and when ...
3
votes
3answers
3k views

WSUS without a domain

We are running a SAMBA "Domain" - is it possible on a Windows server to run WSUS without a "proper" Windows domain and would our SAMBA controlled clients use this server? We are not so much worried ...
6
votes
5answers
946 views

Desktop Networked Printer Management on Active Directory Environment

Right now all of our network printers are funneled thru a single Windows server. The printers are then deployed to the desktops via Group Policy. However, should this server fail then the networked ...
0
votes
4answers
5k views

Windows Cannot View Domain Location

I used to manage two domain controllers when the primary DC which handled all domain roles, DNS and DHCP service went down. So I configured DHCP and DNS on the other domain controller. The problem is ...
1
vote
2answers
2k views

Service principal name (SPN) for machine 'testsystem' not found in Active Directory

we are using Virtual PCs for some testing mockup. One VPC is running as Domain Controller with AD configured on it. The domain name is testing.local. We have another VPC in domain running web ...
0
votes
4answers
136 views

Package up programs for installation via active directory

We use active directory to push out applications and are looking for a solution that can do this: 1) I startup a clean machine (Proberbly virutal ) 2) Start up some sort of monitor program 3) ...
0
votes
2answers
924 views

Managing Users Logging into Multiple Workstations with Group Policy or AD Settings

Has anyone found a good way within Active Directory or Group Policy in order to prevent users from logging into multiple workstations simultaneously? As a bit of background, I currently am a System ...
0
votes
2answers
666 views

Offline Domain disjoin

Is there any way to dis-join a machine from a domain without it being connected to the domain. I had a machine die, and built up a new one with the same name, well, after we got the laptop back from ...
1
vote
2answers
2k views

EventID 5807, debug/NetLogon.log, and AD Sites and Services

I got the following error on a Domain Controller: During the past 4.22 hours there have been 114 connections to this Domain Controller from client machines whose IP addresses don't map to any ...
0
votes
2answers
289 views

How to access Trac server (running Tracd) with computer name instead of IP address

I am running Trac using Tracd as the interface. I can access the server by way of IP address (http://x.x.x.x:8000), but I want to access this by way of the computer name (http://compName) how would I ...
1
vote
3answers
277 views

Linux box on a Windows AD network

My work environment is mainly Windows and Active Directory. Active Directory has no unix attributes extended. What is the best way to fully integrate a Linux box in that environment? I'd like the ...
1
vote
1answer
4k views

Is it possible to only allow certain computers to print to a shared printer in a domain?

Is it possible to configure a printer shared from a generic file and print server in a domain, call it FILEPRINT01, which has a shared printer called OFFICE01, to only allow certain computers to print ...
2
votes
1answer
3k views

Can AD Lightweight Directory Service replicate from Active Directory? If so, how?

I am setting up an Active Directory Lightweight Directory Service (ADLDS) server to give a partner limited access to our directory without giving them access to the entire Active Directory. Setting up ...
2
votes
4answers
3k views

Relative strengths and weaknesses of various Identity Management solutions you have used

This is somewhat more of a survey question, than a specific question. (I assume that is still ok). I work as a consultant doing Identity Management projects. We focus mostly on Novell's Identity ...
0
votes
2answers
6k views

Openfiler AD integration and controlled access

I integrated Openfiler with an Active Directory. I configured a SMB/CIFS share as Controlled Access and set domain admins = PG and domain users = RO. This should give domain users readonly access to ...
2
votes
3answers
402 views

Can I run a test AD on the same network as my production AD without problems?

We are running Active Directory for our network (all Windows based). Single forest with 3 domain controllers. We're in the process of doing some development work on a desktop application that will be ...
1
vote
1answer
938 views

Creating and Promoting new DC/DNS win2k3 server as ESX host

I have a win2k3 stnd dc/ dns as a vm server (1.0). I recently upgraded to Vsphere4 and want to move the dc to a new vm on our new ESX host. I've read that converting a dc vm is not the best idea and ...
0
votes
4answers
1k views

Virtualized Windows 2003 server machine (VMWare ESX 3) doesn't recognize domain user

Context: Windows server 2003 x64: On a VMWare ESX 3 member of a domain has as primary DNS server the PDC, can see it (ping et al) can access a shared folder (even to a shared folder on the PDC) ...
2
votes
3answers
5k views

Non-Domain IIS server authenticate on domain?

I have an IIS server that is a stand alone server not on the domain. So users don't have to login to a local user database, Can I have the IIS server, authenticate users against the domain ...