Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
0
votes
3answers
148 views

how to update Group policy for the whole domain?

I recently found the Group policy of our domain (windows server 2012) is not updated enough to support our Win10 end-user machine. which are the correct ways to update the Group policy definition ...
0
votes
1answer
47 views

Establishing security trust between two domains without VPN

We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
0
votes
1answer
79 views

Lost in the upload bandwidth in Windows Server 2016

I have problems with the performance of my network connector, the upload speed exceeds the bandwidth. I look at the resource monitor and I realize that the Lsass.exe process with PID 844 is the cause ...
0
votes
0answers
26 views

Active Directory Trusted Relation

If we have a trusted relationship between two domains, an administrator user of the domains (1) have the administration privileges in the other domain (2)? Or this only occurs if someone in the ...
1
vote
0answers
13 views

Can different accounts start Business Objects / Crystal Reports Server 2008 report instances?

I've been tasked with finding domain accounts that need to be removed when the domain goes away. One of the servers I need to check out is a Crystal Reports Server 2008 R2. I was wondering if ...
1
vote
0answers
14 views

Storing and passing credentials to a remote system securely for service install during software deployment with COTS

Some background: There is an array of Windows Server PCs being managed with Manage Engine Desktop Central There are software installers and scripts that require account credentials to install some ...
2
votes
0answers
31 views

Universal Groups not working across domain trusts

I have a problem with Universal groups across a trust - membership of the universal group gives rights from one domain in a forest but not from another domain in the same forest - I've set up a test ...
1
vote
0answers
27 views

Best practice for adding additional fields to AD Schema?

We have a few services that are connected to our domain through SAML and some other sync tools. We are looking at adding custom fields to the AD Schema to hold the data for these services (fields for ...
4
votes
1answer
101 views

Moving domain controller to private AWS subnet. It'll have a new IP address. How will member servers find it?

I have five AWS servers on a public subnet of a single VPC, each with its own elastic IP address. The subnet is 10.0.0.0/24. One server is a Win2016 domain controller. The remaining four are Win2016 ...
-1
votes
1answer
71 views

How to set Starting program section and Remote control section by powershell for AD user

I have used the "New-ADUser" command to create a batch of new user. However, I need to set the "Program file name" in "Starting program" to "c:\windows\system32\logoff.exe" and "Start in" to "c:\...
0
votes
1answer
46 views

Unable to select fields on Get-ADGroupMember query

I am trying to grab a list of users and their descriptions/departments, who are in a certain AD Security Group using the following command: Get-ADGroupMember -Identity "SecurityGroup" | select ...
0
votes
1answer
52 views

User/Group Auto Add when joining Domain

I've been in the process of joining our ESXi hosts to the AD domain and have noticed that the group "ESX_Admin" is automatically being added to Permissions on the ESXi hosts. I have found the ...
1
vote
0answers
24 views

Nesting gMSA in security group for use in ACLs

I'm trying to solve a conundrum for my DBAs and developers. We have an application that is running under a gMSA (group managed service account) identity. This application needs to access a SQL ...
0
votes
1answer
103 views

remove DNS A record from internal samba PDC DNS with samba-tool

I would like to remove one interface (eno0s3, 10.10.37.166) from samba PDC (samba 4.10) I added to my smb.conf: bind interfaces only = yes interfaces = lo enp0s8 enp0s8 is 10.21.0.2. This ...
1
vote
0answers
60 views

hide domain user on windows logon screen

At the moment, I'm preventing our admin account from showing on the logon screen using this registry. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\...
0
votes
0answers
82 views

AWS Managed Microsoft AD LDAP

I have AWS managed MS AD standup and running. Created a jump node and joined the domain. I was able to execute ldp.exe and establish connection to one of my AD controller whose address is like (port ...
-1
votes
1answer
159 views

Install a .reg file via GPO

I have downloaded a .reg file with some registry keys I'd like to apply on a Windows machine. Since the same key need to be applied, I'd like to do it directly with GPO policies. I found several ...
0
votes
0answers
14 views

Single User Domain Profile Can't Access Network Shares - Can't Recreate Profile

Server 2016 - PCs Win10 TL;DR; User can Login, but not access shares with out entering Admin/Other user Creds. Changed the Password to her User Profile, didn't change the outcome. Renamed her ...
0
votes
1answer
195 views

aad authentication for azure file share

I have on-premise AD and it syncs with Azure AD. I have setup ADDS on the Azure for AAD authentication for Azure files. I have setup the storage account and enabled the Azure Active Directory ...
0
votes
0answers
16 views

Samba Active Directory fail over doesn't work when LV cloned with DRBD (But works with manual `dd`)

I have a XEN-4.4 server, running an Ubuntu 14 client with Samba 4.3.11-Ubuntu active directory. I manage it using a Windows 10 client running Active Directory User and Computers. I have a backup ...
0
votes
1answer
86 views

Does raising domain functional level DFL have any impact on application using AD DS?

Does raising domain functional level DFL have any impact on application using AD DS? Current DFL is Windows 2003 and we are planning to raise it to Windows 2008. Does this have any impact on sites ...
0
votes
1answer
65 views

Empty Lastlogon and lastlogontimestamp

Even though a user connects via VPN and creates 4776, 4648, 4624 and 4634 event ID's on domain controller, in active directory users attributes lastlogon and lastlogontimestamp still remains null or ...
1
vote
1answer
74 views

Change Windows Activation Key as part of OBE (*before* setup is done)

Is there a way to change the activation key in Windows before you start the out of box experience (setup) on machines w/windows pre-installed? For example, say you purchase a laptop with Home ...
0
votes
0answers
155 views

Trouble Promoting Windows Server 2019 to Domain Controller

I am trying to add an additional domain controller using Windows 2019 Standard in a Windows 2012 R2 environment. As far as I can tell, this is supported by Microsoft. When trying to promote the new ...
0
votes
0answers
18 views

Can't connect to Linux machine from domain-based computers

I have a small office network (VMs on XEN hypervisor): Domain Controller, Windows Server, Centos 7 server - joined the domain (say, C1); and another Centos 7 server not on the domain (say, C2). Also, ...
0
votes
0answers
37 views

Azure - DFS replication

We've implemented a DC in the azure platform running windows 2016 connected to On-Prem using a site to site VPN connection. We've confirgured the DC to replicate a DFS share between this server and ...
2
votes
2answers
49 views

DNS doesn't seem to work for Domain Controller

I took over this small windows network from another admin who is no longer involved. It's a simple setup, one bare metal server with Windows 2016 as a DC and fileserver, all in one. With less than 10 ...
-1
votes
1answer
43 views

Linux machine is getting disconnected from windows domain controller frequently [closed]

My Linux server is getting disconnected from windows DC for every 30 days. Not sure where I need to check either AD or Linux sever config files
0
votes
0answers
24 views

Administer user access to Windows based Server using Active Directory?

How do I configure Active Directory such that I can define which users can access a particular server? I know that I can configure properties of the users from Domain Controller: Active Directory ...
0
votes
0answers
25 views

Windows Server 2016 can not register server in active directory

I use windows server 2016 to create Active Directory(AD) server and Network Policy Service (NPS) server. I add certificate from AD server to NPS server. After that, I try to register NPS server to AD ...
1
vote
0answers
155 views

Windows Server 2016 “Failed to register the service principal name”

I have a Windows Server 2016 virtual host which is hosting a virtual domain controller, and a few additional servers. When the physical host needs to reboot for scheduled patching, upon startup the ...
0
votes
2answers
111 views

Re-sharing a Windows 2012r2 share as read-only

Looking for a Windows based solution. Background: A standalone WS 2012R2 located on NETWORK A is sharing a folder with R/W access through a local user. A segregated NETWORK B contains user PCs, some ...
1
vote
1answer
42 views

FreeRADIUS can not login with Active Directory user

I install freeradius 3 in debian 9. I can login with user from text file in radius but I want to login with user from Active Directory. First, I install this library. apt install samba winbind krb5-...
0
votes
1answer
141 views

Domain-joined computer won't switch time source to domain from “Local CMOS Clock”

My situation is almost identical to the one cited in this post: How to change time source from "Local CMOS Clock" to "DC" I have a domain-joined computer that is showing "Local ...
1
vote
3answers
82 views

LDAP/TLS authentication off of the network

My client has their own network. My network hosts their web app. They want to be able to authenticate using their AD. I have a website in house that authenticates via ldap locally. Would ldap over ...
1
vote
0answers
27 views

How to allow AD group to access and manage IIS sites and pools?

i manage actually a domain with around 34 IIS servers running webapplications. I would like to get a better user right management in my domain. For the moment, my users allowed to manage IIS ...
0
votes
1answer
33 views

Can a active directory group be administered by itself?

I was wondering if an active directory group can be administered by itself. Unfortunately I have no access to an active directory setup -as administrator- to do the test by myself.
0
votes
1answer
187 views

Backup and Restore Active Directory Users and Computers Without Full AD Restore

Before I begin, I will be the first to admit that much of you this problem stemmed from failing to follow best practices pertaining to deployment and disaster recovery of AD servers. Much has been ...
2
votes
1answer
161 views

AD: Unable to perform remote desktop logon

For my users in Active Directory, I did setup a GPO in order to allow the remote desktop connections. For a specific user in particular, I did also manually setup the group membership for Remote ...
0
votes
0answers
47 views

Active Directory full forest recovery - Doubts about obscure sentence in MS documentation

I am trying to apply and test best practices about Active Directory full forest recovery as warmly advised in “Best Practices for Implementing Schema Updates or : How I Learned to Stop Worrying and ...
1
vote
0answers
17 views

syncronization from active directory to azure

I have created an user but with some errors, error on smtp: SMTP SIP etc... I changed it on Active Directory OU sync to azure but the values set after creation on office 365 and exchange is still the ...
0
votes
0answers
61 views

Domain Controller dropped from domain

While in the process of making some changes in my environment I set up a new Domain Controller (2019) and promoted it, did some testing and verified it was working properly. I demoted my old DC (2016) ...
0
votes
0answers
44 views

When does WinNT:// provider query Active Directory? Or how to get SID of local group member if it is domain account

Okay so I am using the WinNT provider with a .Net DirectoryEntry class to enumerate the members of a local group, through the Members property. If the member is a local account, the DirectoryEntry ...
0
votes
1answer
32 views

Nesting Email Distribution Groups into job code Groups

My company wants to create job code groups. A single group for a single job code. For example, if Bob is a courier, the only groups he will have is the "Domain User" and Courier. Couriers are part of ...
0
votes
0answers
12 views

SCOM - report on failed logons on workstations

I have been asked to create a report that gives us the following data in a SCOM report and export to .csv: Timestamp Workstation Account Name Status and Sub Status Codes I know I'll have to work ...
0
votes
1answer
28 views

dirsync query shows changes to an AD object that doesn't appear to exist

AdamSync is crashing periodically. In troubleshooting we found that it's throwing an exception when it encounters what it thinks is an empty DN. I replayed the query using the dirsync cookie stored in ...
1
vote
1answer
53 views

Do AD GPO's affect workstations if nobody is logged in?

I have a few computers on the domain that misbehave. (don't appear to follow GPO despite RSOP readout) One issue in particular is a computer that seems to hang/sleep/comatose when nobody is logged ...
0
votes
2answers
72 views

AD CS - OID for root and issuing CAs

I am willing to install a Root CA and an Issuing CA with AD CS for my private environment (test purpose). Do I need to obtain public OIDs (i.e. from IANA) or can I skip this requirement since my CAs ...
1
vote
1answer
594 views

How to issue a windows machine cert for a non-domain joined computer?

I have a Windows Server 2012 AD/CA and domain joined computers automatically receive the CA public cert and also get a computer certificate generated and pushed using GPO auto-enrollment. All of this ...
4
votes
4answers
342 views

AD: OU for system administrator accounts

Just a simple question: Does it make sense create a dedicated OU in Active Directory for system administrators (including domain controller admins)? Are there drawbacks following this approach? Is ...