We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
1
vote
1answer
1k views

Apache 2.2 LDAP Authentication Error 500 - AuthLDAPURL

I have an Apache server on RHEL 6 that uses our active directory for authentication and when we added a new "LocationMatch" AuthLDAPURL ldap://ad.company.com/DC=ad,DC=company,DC=com?samaccountname?...
3
votes
1answer
8k views

DFS Setup - The namespace server cannot be added. The system cannot find the path specified

I went to DFS Management and added a created a New Namespace. For the namespace server, I specified my Primary Domain controller (netbios name: primarydc). For the namespace, I enter Files. I use a ...
0
votes
1answer
2k views

pfSense unable to LDAP bind to Active Directory Server

I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something. I've tested the ...
0
votes
1answer
33 views

Limit Remote Assistance to domain administrators only

I'm an IT administrator in my company. Currently we use Active Directory managed by Windows Server 2012R2 and most workstations use Windows 10. We are looking into using Microsoft's built-in Remote ...
0
votes
0answers
41 views

Restrict the Computers an Azure AD DS User can log onto

I have added a user to our Azure AD and it has synced with Azure AD DS. I can see the user in the Active Directory Administrative Center. This user can logon to any of our domain-joined PCs locally ...
0
votes
1answer
34 views

Need to copy ACE from one user to another

Currently I need to allow all users to have read access to two computer objects. I can accomplish this manually in the GUI but it's not practical. I have a user that is working when I manually add ...
0
votes
0answers
28 views

AWS RDS Cannot Connect Using Endpoint

We recently set up a new infrastructure at AWS with a VPC, Windows Directory, Site-to-site VPN, One Way Domain Trust, EC2 Windows instances and RDS SQL Server instances. Assume these two domains: ...
0
votes
1answer
966 views

A linked mailbox user sometimes connects to wrong Exchange organization

Configuration is as follows: Domain hosting.contoso.com hosts an on-premises Exchange 2013 organization, that hosts several second level domains, including the contoso.com domain. The domain is in a ...
0
votes
0answers
12 views

AD Access for MacOS Managed User cron job

I have a python3 script I am running on MacOS 10.14 that connects to a a SQL Server database using pyodbc. When I run it manually, it works fine, but when I schedule it with crontab, this error is ...
0
votes
2answers
31 views

Netlogon and DNS entries (and specifically _VLMCS entry in this case)

I'm having issues with MS Volume Activation. In our AD DNS configuration, an entry keeps re-adding itself: _VLMCS._tcp.domain.com SRV 0 0 1688 server45.domain.com. Server45 doesn't have KMS ...
6
votes
1answer
3k views

Active Directory: Changing a name

I have a user with a typo'd name. For the sake of explanation, I'll say the username is lusername, first name Lindsay. Active Directory had the user initially named Lindsey Username, and I need it to ...
0
votes
0answers
24 views

Looking for a directory service/SSO solution that integrates well with AWS and G Suite

Today my organisation uses an Active Directory server which we sync to G Suite with GCDS. The AD server is basically just a directory with all users and some groups as we don't use any other features ...
0
votes
3answers
1k views

AD forest one-way trust: can't list users from the other domain

So, we have two forests (AWS and On-Prem). The DCs can talk to each other and the one-way trust works fine. Here is the problem. If I create a share on the DC1 (in AWS), I can grant access to the ...
10
votes
3answers
50k views

How can I list the Active Directory user attributes from a linux computer?

How can I list the Active directory user attributes from a Linux computer? The Linux computer is already joined to the domain. I can use 'getent' to get the user and group information, but it does ...
0
votes
0answers
71 views

Rollover Kerberos Decryption Keys - Azure AD Connect

Our site has been running Azure AD Connect/Hybrid Azure for over a year now. I'm attempting to rollover the decryption keys this month and have been receiving this error: I've attempted to complete ...
0
votes
1answer
26 views

configure nsscache with samba4 active directory

I have a problem caching the users from samba4 AD with nsscache, since there is no uid, rather samAccountName or cn in AD. When I use the uid-like attribute: # Default uid-like attribute ldap_uidattr ...
1
vote
1answer
2k views

Win10 OpenVPN domain machine cannot find a domain controller

We converted to an AD environment a few months ago. From my home office, I have a Win10 laptop that I joined to our domain with much difficulty (had to set the AD dns server on my local LAN) as ...
1
vote
1answer
475 views

CentOS 7:Reoccurring failure in accessing AD member samba shares

I have a Samba 4.6.2 samba ActiveDirectory member server. Every month or so, all clients lose the ability to connect to all the shares. I can work around the issue by leaving the domain, deleting the ...
0
votes
1answer
75 views

Windows Server DHCP not working

I have an Active Directory network consisting of a Windows server 2019 domain controller with DHCP and DNS on it too. New clients on our network are failing to obtain IP Addresses from the DHCP server,...
4
votes
1answer
21k views

GPUpdate failing due to LDAP Bind Issue

When I run gpupdate on my workstations I get the following error. Computer policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed. ...
1
vote
3answers
1k views

Is there a way to mount a Windows CIFS share and bypass the password prompt without a password file?

I'm trying to mount a Windows cifs share (shared by Windows) onto a CentOS box, per user. Users are all in Active Directory. So, every user who logs into their Linux box should be mounting the drive ...
1
vote
1answer
59 views

How to view my active directory account's permissions or access on a particular Windows Server machine?

I'm on a fresh install of Windows Server 2016 Standard. My account is a domain / active directory account. I've got a problem, and have had it for a while, in which I'm unable to access certain ...
-1
votes
1answer
9k views

Active Directory Replication Errors

We just installed a second Domain Controller on our domain. The installation of DC 2 went along with no hiccups. However I am running into an issue with replication. I cannot seem to get DC1 and DC2 ...
2
votes
3answers
2k views

Using Apache / Kerberos / Keytab to Authenticate Redmine Users Against Active Directory

We have a Debian (squeeze) server to which I have root access. It is running Apache, and Redmine is deployed to the server (currently using a local MySQL database for authentication). Apache is ...
1
vote
1answer
581 views

RDP to server from client outside of domain

In the SQL course I am doing, I am tasked with creating a dc (named DC) with IP address 10.10.10.10, and then setting up the domain contoso.com on this dc. Then I create a server (named sql-a) with ...
1
vote
1answer
2k views

Trust relationship failure with RODC

I have numerous servers that sit in a DMZ which has an RODC in it as well. As you probably know, the machine passwords will change after a certain amount of time. After which I have to disjoin-rejoin ...
1
vote
2answers
79 views

Why should I choose a subdomain of my registered domain for AD (besides having to type “www” to access the comapny website?)

Best practice all over the internet would have you believe that the sky will fall on your head if you register company.com as your public domain name and then use that same domain name in Active ...
-2
votes
1answer
556 views

Are the UID of users from a domain maintained locally in a machine?

I have seen many of my office Linux machines connected to some domain. I am wondering as if a machine maintains the list of UID of users in a domain, locally? If yes, then how and who does it? if ...
1
vote
2answers
150 views

Server 2008 R2 > 2012 Migration

I am looking to upgrade our small server from server 2008 rs to windows server 2012 essentials, however we are only using one server and do not have funds to run another. I came into this job ...
8
votes
3answers
24k views

Distinguish Between Users and Service Accounts in Active Directory

Question Is there a "correct" / standard way to distinguish Service Accounts from User Accounts in AD? More Info In certain scenarios we have systems running under AD Credentials (i.e. under a ...
1
vote
2answers
1k views

Add permissions for a usergroup to all domainprofiles (roaming profiles) on server 2008 R2

This is our current situation: We have an active directory with Server 2008 R2 and roaming profiles which is currently in use (old server), and we have a new Server 2008 R2. We already set up a new AD ...
4
votes
5answers
13k views

Test for existence of an AD object in PowerShell using only Microsoft-provided cmdlets

I want to test for the existence of a computer account in Active Directory with PowerShell using only tools from Microsoft. Using Quest AD cmdlets, I can do this: if (!(get-qadcomputer $name)){ ...
0
votes
1answer
1k views

how to hide folder on root samba folder with include for each group

Currently my samba server integrated with Windows Active Directory 2012, almost configuration is just fine. I'm just curious Here are my smb.conf, [global] workgroup = "Domain Name" server ...
1
vote
1answer
2k views

How to enable LDAP over SSL/TLS in AD without installing AD Certificate Services

I am installing a Sonicwall firewall into my organization. I've connected the Sonicwall with the Active Directory domain, however now on the status page of the appliance there is a huge warning: ...
0
votes
0answers
15 views

Samba user can't access directory even though he is in owning group

We are running a Samba 4 Active Directory (AD) with a file server running Ubuntu 14.04 On the server is a directory, group owned by MyGroup ... drwxrws--- 16 sauser MyGroup 25 Aug 15 17:38 /share/...
0
votes
0answers
24 views

How to to change Remote Desktop Services connection settings for an Active Directory user with Powershell?

I've found it very easy to automate Active Directory account creation with Set-ADUser as in this script. However, I'm struggling to automate the following part of the task. In a user's Properties ...
2
votes
1answer
2k views

AD: Windows 2008R2 to 2019 migration, one leap or step by step

In our company we are planning to do Windows 2008 R2 migration due to End of Support it reached. We're not that fans of living on edge but this time it appear to be wiser target to Windows Server 2019,...
0
votes
1answer
2k views

Windows server 2008 R2 Certificate Authority error event viewer

I am getting the error "The windows default policy module initialize method returned an error. The specified domain either doesn't exists or could not be contacted the error code is 0x8007054b. The ...
0
votes
2answers
2k views

How do I add an IP address to a users dial in tab within powershell

How do I add an IP address to a users dial in tab within powershell. I want to do it about a 100 times so I was hoping to use the ad cmdlets to perform the task reading from a csv file the account ...
3
votes
1answer
958 views

Domain Trust with Selective Permissions - Object permission Allowed to Authentiicate applied by OU?

http://technet.microsoft.com/en-us/library/cc738653(v=ws.10).aspx Referencing the page above: My goal is to have all computers in the domain allow authentication from the object I am adding. In ...
52
votes
14answers
386k views

Get list of AD groups a user is a member of

Suppose I have the user id of a user in Active Directory. I'd like to get a list of all AD groups in which that user is currently a member of. How can I do this from the Windows command line? I've ...
1
vote
2answers
2k views

Active Directory: Find out which users belong to a Group Policy Object

I want to make sure that certain users are available in a group from the windows domain. I installed "Group Policy Management" and can open the Forest, the Domain. But then I am not sure what I am ...
0
votes
2answers
61 views

How to check if “Split Permissions” are set for an Exchange Server?

I need to administrate an Exchange Server where some powershell commands don't work (like New-Mailbox). It seems that "Split Permissions" are active on that installation but I'm not sure. How can I ...
0
votes
1answer
28 views

Removing default Claims Providers Trust - ADFS 2016

I want to know whether it is possible to remove/disable (or even hide) the default claims providers trust in the ADFS page. I have setup ADFS to point to my AzureAD so I wouldn't require the on-prem ...
-1
votes
1answer
34 views

Windows Domain URL

Our laptops are connected to a windows server 2019 with the domain name company.int Everything works find and when I ping company.int it points to the windows server. The server is also responsible ...
3
votes
1answer
1k views

Adding multiple users from a group to an Active Directory group using Powershell

I have a powershell script that is supposed to go through a specific ou and store the groups into a variable $groups. Here is the code I use in the script: $Groups = Get-ADGroup -Properties * -...
0
votes
1answer
2k views

Windows Domain-joined PC cannot RDP to a PC on another domain

I created an AD DS and domain called NEWDOM. Then I added a Win2012 machine "newPC" with a local account called "userA" and joined it to the NEWDOM domain. If I use my personal PC on home network, I ...
1
vote
2answers
55 views

Create Azure VM with Windows Firewall ports open?

I'm working on a Powershell script that will automate setting up an Azure VM, adding it to my Active Directory domain, and setting up a number of other settings. The idea is to be able to spin up and ...
0
votes
1answer
1k views

query Kerberos encryption modes supported by AD through LDAP

In short: I need a way to retrieve the encryption modes permitted in the network security policy of a Microsoft DC. The encryption mode is essential to creating the right set of keys for service ...
0
votes
1answer
2k views

Unable to retrieve users from AD on VMWare vcenter

I have added the AD successfully from the vcenter console and also configured the Single Sign On. When I try to retrieve the users from the AD, I first set the domain in the Users and Groups tab, ...