Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
0
votes
0answers
71 views

Group Policy - Set all but one user as temporary profiles in Windows 10

Is there a way I can associate a domain user to a specific computer, in such a way that any other domain user that logs in that computer is only allowed to login with a temporary profile? I'm looking ...
1
vote
2answers
81 views

Incoming vs Outgoing Trusts — error in book?

I'm reading an exam guide from a well-known publisher at the moment for a Windows 2016 cert and trying to get my head around domain/forest trusts. It seems to me that this section/table in the book is ...
0
votes
0answers
8 views

SSH Login with libpam-ldapd with WIN 2016 AD User

I want to login via ssh with Win AD 2016 User Credentials (User must be in specific group, ex. allow_ssh_login) on a Debian 9 Machine WITHOUT that Debian 9 Machine must AD joined and that the user ...
1
vote
2answers
87 views

Testing the separation of two AD domains

We are currently working on a so called carve-out project, i.e. part of a larger company OLDCO got sold separately and the new entity builds up a new Active Directory domain NEWCO. During the ...
0
votes
0answers
65 views

networking — Samba as a DC on Kubernetes, can't join the domain

As the title would lead you to believe, I'm trying to run Samba as a Domain Controller for Active Directory, running on a Centos 7 container, which is handled by Kubernetes. The hostname of the ...
0
votes
1answer
55 views

Attempt to create group in Active Directory under OU using ldapadd tool responds with “NAMING_VIOLATION” error

File content: $ cat /tmp/tmpmynxzg3sldap_group dn: cn=group-1760882938,ou=Employees,dc=<some>,dc=<dc> objectClass: top objectClass: posixGroup gidNumber: 1760882938 memberUid: user-...
-1
votes
2answers
54 views

Logo picture for all domain users using GPO

I am trying to apply the company logo to all our users' profile pictures using GPO. We created one share folder with the appropriate permissions and the filename "user.bmp". This is done by GPO ...
0
votes
1answer
44 views

Can I force Windows Server DNS to forward queries to DHCP server when the client/DHCP domain matches AD domain?

I currently have a Windows Server 2k19 host operating as a domain controller with integrated DNS. Clients joined to the domain use this DNS server. I have a separate Linux host operating as the DHCP ...
1
vote
0answers
35 views

AccessControlEntry (ACL/ACE) in Active Directory with LDIF

Can I add AccessControlEntry (ACL/ACE) in Active Directory with LDIF Files and ldapadd? With OpenLDAP / Oracle Directory it seems to be possible. I've tried: ## delegate Control / add ACI dn: OU=...
1
vote
2answers
90 views

Azure AD password reset error - calling 'https://graph.microsoft.com/v1.0/users/<username>' returns Status 400 Bad Request

Our AD management code was working for more than 12 months between mid 2018 and mid 2019. Suddenly, with no code change at our side, it stopped working for password reset. The last line of code ...
4
votes
1answer
59 views

Are Active Directory Users and Computers permissions different then Active Directory Administrative Center?

I just delegated control to a helpdesk user in Active Directory Users and Computers to be able to unlock accounts and reset passwords. This functionality works good in ADUC but doesn't work in ADAC, ...
1
vote
2answers
225 views

Add-ADGroupMember : Cannot find an object with identity: '{DistinguishedName}' under: 'DC=DOMAIN,DC=ORG,DC=com'

I have already browsed multiple versions of this question and the various solutions given on this and other sites, but none have addressed my issue or why it might be occurring. I am trying to create ...
-1
votes
1answer
158 views

When should one enable “Do not require Kerberos Preauthentication Kerberos Preauthentication”?

In active directory, there's an option Do not require Kerberos Preauthentication Kerberos Preauthentication. Does anyone know the use-case when it's checked? I'm wondering when people enables it.
0
votes
1answer
28 views

How to manage custom application specific permissions in AD?

We are planning to let our customers of our software configure users and their permissions entirely in Active Directory. Once a AD-user is member of the AD-group "SoftwareXyz" he can log in and use ...
0
votes
0answers
17 views

Windows Server 2016 - Active Directory Domain Services Installation - DNS Not Automatically Populated

I have a Windows Server 2016 Server on which I have installed the "Active Directory Domain Services" role. Which in turn installed the "DNS Server" role as a dependency. I have created a new Forest "...
0
votes
1answer
35 views

IP-based Authentication

Is there a way to authenticate an user account (active directory) via ldap only when it is requesting from a specific ip range? In any other cases, the user account should not work. Short: Is it ...
1
vote
0answers
45 views

Only one user is having its print jobs deleted on Win2012 R2 Spool - everyone else prints

I've got a hairy one for you. We have a small office with an IT infrastructure solely based on Microsoft Windows Server 2012 R2 (not my fault...) and less than 50 users. All users are on AD, we do ...
1
vote
0answers
38 views

How to create AD users that match to Azure AD Accounts

What is my problem: We started with AzureAD and are currently at the point where we use our laptops and login with account emails. The devices are shown as "joined" to the azure AD. Now I want to ...
1
vote
1answer
51 views

Can't Find Failed Authentication in Event Viewer

I'm trying to gather failed login/authentication events from DC's on a 2016 Domain. I can see 4625 Audit Failure events in the Security Logs on the Domain Controllers when a user fails to login at ...
1
vote
0answers
42 views

Ubuntu 18.04 Server Join Domain LDAP DNS Confusion

I have a domain setup with mixed systems. It's running Win2k16 server. Some clients are Windows and some are Linux. Most Linux clients are Ubuntu servers, in this case an 18.04. The Ubuntu 16s I have ...
1
vote
0answers
25 views

Can't modify olcAccess values because LDAP has passthrough auth

I'm an intern working at a company that uses an OpenLDAP server on Linux in conjunction with Windows server 2016. I'm trying to modify an olcAccess value in olcDatabase={0}config, to deny/grant users ...
1
vote
1answer
32 views

Centos 7 joined to AWS simple ad but can't query users

For the love of all that is holy - been at this for a solid 12 hours straight. I've added my centos machine to my simple AD service in AWS. Following the steps outlined here https://docs.aws.amazon....
-2
votes
1answer
35 views

i can rdp windows server 2016 dc but i can't access server manager or users and computers of active directory

i am a beginer in windows server administration, i am curently working on lab about active directory, so i set up a windows server 2016 DC in whitch i created two OU, in those OUs i created a multiple ...
0
votes
1answer
24 views

Deploying driver without installer

I would like to know if there is any way to deploy a driver via Active Directory that does not have an installer. I have a bunch of *.dll files and the necessary cat and inf files. But they are not ...
2
votes
1answer
67 views

Keep Windows File Server + Use Office365

Have a site that needs to keep a local Windows 2016 file server due to legacy LOB applications. Have migrated Exchange from SBS 2011 to Office365. Running in Hybrid mode which handles AD Sync for ...
1
vote
0answers
65 views

Items in The “New” Context Menu is Missing Only on Normal Users

A computer which is running Windows server 2018 sp2 is part of the AD domain. However, any domain users, local users and local administrator, except the domain administrator, can't create any new ...
0
votes
1answer
59 views

Windows server 2016 Active Directory and VirtualBox host on same server

I know it's not considered best practice having Active Directory Domain Service role and Hyper-V role on same server. What about VirtualBox? Can I install VirtualBox on the same physical machine ...
0
votes
1answer
28 views

Allow caching of share - roaming profiles - WS2016

I have a WS2016 that is running roaming profiles for users. Within the SMB file share, the option: "Allow caching of share" is enabled and was enabled by accident upon creation. There are already ...
0
votes
1answer
119 views

Authenticating Linux Login against Active Directory (AD) without Joining Linux Machine to AD Domain

I have a conventional Active Directory Infra deployed on Windows VMs on Azure. There is no Integration of this convention AD with Azure AD. I want Linux VMs on Azure with SLES 12 SP3 to authenticate ...
0
votes
1answer
26 views

Centrally apply a GPO rule to Local Admins

Pardon if someone asked before - tried searching maybe I missed it out. Anyways, I have to 1a) Set a domain wide policy to Deny Access to this Computer from the Network 1b) Put each computer's local ...
2
votes
1answer
34 views

Powershell Importing active directory groups from a CSV file fails

I have a list of groups in CSV exported from a domain to be imported onto another domain. The destionation domain already has the same OUs and so (it is a test domain). The CSV file contains group ...
0
votes
0answers
106 views

The Target Principal Name Is Incorrect. Cannot Generate SSPI Context (SQL Server)

We had a power outage last night and when the server came back up our domain users could not access our SQL Server 2000 instance name: MASSQL. We can access using SQL Authentication. We tried making ...
8
votes
3answers
948 views

Can ADFS connect to other SSO services?

I have a .net application that's wired up to my local ADFS server (connected to our corporate AD server) and everything is working fine. My question is, can my ADFS establish a trusted connection to ...
1
vote
1answer
52 views

Can we use Azure Active Directory to remove local Domain Controller?

I have done some research and I cannot get a straight answer so far. I am aware of Azure active directory domain services . But I wonder if it or anything Microsoft Azure has can delete or remove a ...
1
vote
1answer
74 views

Group Policy software installation failing with error %%14

I have created a GPO configured to "assign" \\<AD DNS domain name>\NETLOGON\<file name>.msi and verified that it's applying to the Windows 10 v1809 PC but the actual installation ...
1
vote
1answer
26 views

Software install permission to a user in whole network

I need to give a user the right to install the software as an administrator in whole network computers but they don't want him to have access to anything else on the domain. I assuming GPO settings ...
2
votes
2answers
226 views

Samba4 AD DC setup and working, but won't connect with Windows 7 or 10

I've gotten a Samba 4 AD DC setup running on Ubuntu 18.04 LTS. I used this tutorial to make it work: https://www.tecmint.com/install-samba4-active-directory-ubuntu/ The problem is I can't get my ...
0
votes
0answers
26 views

ADFS authentication with an app between SP and IDP

I have to set up an ADFS server for SSO in an existing architecture. I've already done it for some apps but I have to plan it for another. The application that requires SSO doesn't communicate ...
0
votes
1answer
61 views

Use AD to Control App Access

As of now, I'm looking at using RemoteApps to allow RDP oriented access to applications. I would like the applications presented to users to be based on the users Group membership. Right now, the ...
0
votes
1answer
24 views

Ubuntu samba restore idmap database

so i ran into a disaster and have to get the server up and running on monday morning :D my ubuntu server setup with samba / winbind and joined to active directory domain controller holds the shared ...
1
vote
0answers
38 views

can i create domain local groups in active directory with adcli

Is it possible to create domain local security groups in active directory with adcli? adcli create-group --domain-ou=$ou --domain=$ad_domain_lc --login-user=$join_user --description=\"$...
1
vote
2answers
58 views

Migrating application servers to new domain

I work in a corporate environment which has recently been merged with another like business. There is an ongoing project to take our legacy Windows Servers and migrate them to an entirely new Windows ...
0
votes
0answers
46 views

Using SID+ACL with NFS and Winbind (NOT SSSD) from a Linux file server

I've inherited a domain using a Samba 4 active directory on Ubuntu 14.04 and having a heterogeneous client environment of Windows/Ubuntu 18 clients. I have tried setting up clients using sssd, ...
0
votes
2answers
65 views

Error promoting secondary Windows server 2016 DNS with a Primary Windows Server 2003

I have an OLD Intel server socket 478 DDR running Windows Server 2003 EE SP2 as Primary DC and DNS. In order to migrate to server 2016 and discard this old hardware and server version I did: 1- ...
0
votes
0answers
28 views

RADIUS Server won't authenticate user with MAC in “Verify Caller ID”

I have a domain Controller with RADIUS server installed in. The problem I face is, Users can be authenticated if their "Dial-In" Verify Caller-ID is disabled but as soon it is provided with MAC ...
1
vote
1answer
100 views

Startup Powershell script in GPO not executing - Windows Server 2016

I'm trying to get a simple Powershell script to run as a GPO Startup script on my school's workstations. So far I've not had much luck. The script started life as a more involved set of commands ...
0
votes
0answers
93 views

Convert Samba Active Directory to sssd instead of winbind

I've inherited a Samba 4 Active Directory (AD) server. It works fine with winbind, however for security reasons we'd like to change to sssd. The domain has two domain controllers (primary and ...
0
votes
0answers
14 views

basic authentication over domaintrust

my testlab has the following topology: Webserver -> AD1 <- AD2 ^ | PC While AD[1,2] are active directories based on windows ...
0
votes
0answers
77 views

How to check if an Active Directory server is reachable from an Ubuntu/Apache/PHP web server?

How can I check if my Windows Azure webserver which has Ubuntu/Apache/PHP is inside a windows active directory ? I have php-ldap and openssl php extensions enabled, but I still can't login using ldap....
0
votes
0answers
34 views

Azure work account blocked when created home account with same email address

The initial situation was where I had an Azure Portal account and I still have this account (name: tojas-work, email: tojas@something.com). This account appears as a Work/School account on Azure. This ...