Questions tagged [aws-directory-service]

The AWS Directory Service enables users to access AWS resources from on-premise or cloud-based Active Directory domains.

Filter by
Sorted by
Tagged with
2
votes
1answer
42 views

Preserving AD Configuration (User/Groups/OUs) After Uninstalling “Active Directory Domain Services” Role

I have somewhat of a unique challenge, I'm trying to migrate a old legacy server from a locally installed version of Active Directory Domain Service to a centrally managed AWS Directory Service. As ...
0
votes
1answer
99 views

AWS Windows EC2 unable to join to AWS Managed AD using SSM

I have a windows server that sits in a VPC with no internet access. But it has VPC endpoints to SSM,ec2messages,ssmmessages and ec2 api. When I try to join this to a domain by using the ssm api, ...
0
votes
1answer
126 views

Connect to active directory over peered VPC

I have a VPC(VPC1) where my main instances are running, and I have another one (VPC2)specifically for directory service (AD Connector) and a MS AD server running. I have created a VPC peering (which ...
0
votes
0answers
18 views

Connect Office365 with AWS Directory Service

We have office365 where we have our user details. We want to join all our windows servers to active directory, and for the same we have to create directory service. But as we have a lot of users in ...
0
votes
0answers
35 views

AWS AD Directory: How to resolve Route53 private zones

I have an AWS Microsoft AD Directory Service in a VPC - MyVPC-A. I have a Route53 private zone "db.mydomain.com" associated with MyVPC-A. If I add a record to this zone "mysql1.db.mydomain.com", ...
3
votes
1answer
266 views

On premise AD migration to AWS Managed Microsoft AD

I have a small on premise AD environment comprising two Windows Server 2012 domain controllers. They run AD, DNS, DHCP, GP etc. I want to migrate this to the AWS Managed Microsoft AD. All the ...
0
votes
0answers
15 views

AWS Managed Microsoft AD for mobile users?

Im reading about AWS Managed Microsoft AD but I have a use case that I'm not seeing documentation for Can I use AWS Managed Microsoft AD to manage out of band mobile windows and mac users? Is there a ...
0
votes
0answers
33 views

Dual DNS namespaces unable to resolve

I have two DNS servers hosted via AWS Directory Service, one named internal.ab.research (anything in 10.0.x.x) and one named public.ab.research (anything in 10.3.x.x. I need servers in public.ad....
0
votes
0answers
102 views

Cannot delete Active directory AWS console (related application)

First i would like to apologize if the question as already been resolved, i searched for an hour without finding any solution. I am searching a way to know why does AWS Console in Directory Service, ...
1
vote
1answer
119 views

Centos 7 joined to AWS simple ad but can't query users

For the love of all that is holy - been at this for a solid 12 hours straight. I've added my centos machine to my simple AD service in AWS. Following the steps outlined here https://docs.aws.amazon....
0
votes
0answers
165 views

AWS Managed Microsoft AD LDAP

I have AWS managed MS AD standup and running. Created a jump node and joined the domain. I was able to execute ldp.exe and establish connection to one of my AD controller whose address is like (port ...
1
vote
1answer
41 views

Is it possible to choose which objects get synchronized in AWS Managed AD?

In Azure AD Connect Sync, it is possible to configure filtering. This is described as: By using filtering, you can control which objects appear in Azure Active Directory (Azure AD) from your on-...
1
vote
0answers
52 views

Unable to delete fresh AWS Directory Service instance (MS Active Directory)

I created an AWS-hosted MS Active Directory instance for testing but never actually used it. I've been trying, repeatedly, to delete it but been blocked since "it still has authorized applications". ...
1
vote
1answer
748 views

AWS S3 and Route 53: www redirect does not work

I have hosted my static website on AWS S3, like in, http://example.net I have configured two S3 buckets, one for http://example.net, and another one for http://www.example.net, whose 'Static web ...
0
votes
1answer
603 views

Export my whole AWS architecture into file?

In AWS, I have a VPC with many components inside, including subnets, security groups, gateways, load balancers, target groups, many instances, and others. Is there any ways to export my whole ...
0
votes
0answers
568 views

Amazon RDS SQL Server permissions with legacy application

I am trying to run a legacy Windows application in AWS without modifying the code. The application uses Windows Authentication for the DB connection so this is what I have set up: a Simple Directory ...
0
votes
1answer
90 views

AWS-Connection Issue between Web server and database server in the same region

I have set up a web server and database server in AWS as shown the diagram below aws diagram Web Server: OS: Windows Server 2012 R2 Application hosted: VB.NET application in .NET 3.5 framework Web ...
3
votes
1answer
2k views

Why doesn't my conditional forwarder work?

So, I have two AWS-based environments that are largely separated, but are connected via an intermediary VPC that hosts a VPN server, and has routing into each of the individual environments. Let's ...
1
vote
1answer
172 views

Can add only one windows machine to failover cluster, both are joined to same AD domain

I want to setup a failover cluster with 2 Windows EC2 instances, for which I'm following this link. One of the pre-reqs listed says that, Make sure that all servers that you want to add as cluster ...
0
votes
1answer
56 views

Using AWS Directory Services AD to authenticate PC clients

We have an enterprise AWS Directory Services AD, and I'm wondering if it's possible/practical to use it as our AD for company desktop PC's, as well as for AWS resources. We don't have resources to ...
0
votes
1answer
281 views

Use on premise LDAP for amazon

I'm currently looking into amazon WorkMail but we have a on premise LDAP which is completely setup with integrations into multiple applications. What I would like to do is connect the workmail to this ...
1
vote
0answers
50 views

AWS Directory Service

I got couple of .net web applications installed on the EC2 instance on the AWS cloud. Have one requirement to implement the single sign on using the AWS directory service(AWS Microsopft AD). I do have ...
0
votes
1answer
2k views

AWS AD connector to on premise AD failed

I am attempting to setup AWS AD Connector to our on-premise Active Directory by following Amazon document "AD Connector Prerequisites". The status is Failed with the following error. Connectivity ...
1
vote
1answer
118 views

AWS Directory Service clarify

We're a growing shop that has no real user management. It's come the time to have single-sign-on. We host everything in AWS with the exception of an in-house desktop server that basically just hosts a ...
1
vote
2answers
2k views

AWS Active Directory: Cannot access from another VPC

I've setup an Active Directory service in AWS in 2 private subnets in a VPC. I have another VPC in the same account that I want to be able to access the AD from. However for some reason it just isn't ...
13
votes
1answer
570 views

Moving on-prem AD to AWS

I am moving my local AD domain to AWS and I am not sure the best way to do it. Scenario: I have 2 on-prem domains (.local and .net). I am retiring one of them and moving to the other. Both are ...
2
votes
1answer
99 views

My Amazon Directory Service DC is failing certain DNS requests

I have a small, Simple Active Directory domain set up in AWS using their Directory Service. It's been running fine for a year now. However, this morning, certain DNS queries that run through the ...
0
votes
1answer
509 views

SSO solution that would work with Amazon Simple AD and MS office 365

I am trying to setup Single Sign On(SSO) to AWS servers from a centralized location. Here I want to utilize Azure AD, Amazon Simple AD services. As such, I have ADFS with an Azure AD where our users ...
6
votes
0answers
1k views

Joining a server to AD via AWS cloudformation

I want to use cloudformation to automatically join new instances to AD. When I googled this it looks like many people just use scripts in there cloudformation templates and pass in credentials- I don'...
-2
votes
1answer
108 views

How to create CoreDumpDirectory in AWS? [closed]

I am using AWS but i dont know how to check CoreDumpDirectory exist or not. if not how to create this and which path?? I am trying this but not got any solution How to get a core dump from apache when ...
2
votes
3answers
4k views

Why is the user@domain and cn=user,dc=domain not equivalent?

I've setup a Simple AD on AWS that I can finally authenticate against with LDAP. I don't understand why I was unable to use dc= which is widely suggested everywhere but am able to use @domain. ...
0
votes
1answer
519 views

enable to access public dns in browser amazon aws

I am a newbie here in this server and networking things. I have signed up in amazon aws and went through some basic documentations. There I could create security groups, instance, and web servers. I ...
-4
votes
1answer
78 views

AWS security concerns

I need to have a freelancer I hired to access an aws ec2 instance to set up an env on the host. What security I need to set up on that host and aws console so that he will not destroy my system and ...
0
votes
1answer
263 views

Export IAM user accounts (with passwords) into LDAP

I have a blank LDAP account and want to import all the IAM user accounts to LDAP and keep the LDAP in sync with IAM (not the other way around using federation). Is this possible? I need a LDIF file ...
4
votes
2answers
1k views

AWS Simple AD: “KDC has no support for encryption type” for users created with adtool, but not with MS Management Console

Background I am trying to log in (via SSH, to an Amazon Linux EC2 instance running sssd) as users that I've created in my AWS Directory Services Simple AD. I am authenticating with kerberos and ...
4
votes
1answer
1k views

Connecting AWS AD to Azure AD

We are looking in starting to use AD in our office, the setup would be: On premise AD server for work stations Azure AD to support Office 365 AWS AD to support AD on our servers Connecting on ...
1
vote
1answer
1k views

Authenticating SSHD against AWS Simple Directory Service

I am trying to setup a network of Centos 7 machines with sshd that authenticate public keys against an AWS Simple Directory Service directory. Currently, I have a bunch of Centos hosts, an instance ...
0
votes
1answer
818 views

OATH TOTP with Windows NPS Server?

I'm trying to set up multi-factor authentication for AWS WorkSpaces using AD and OATH TOTP (e.g. Google Authenticator). In the AWS AD Connector config you can set up the RADIUS server's IP, port and ...
0
votes
4answers
2k views

How to create connection between AWS VPC and my PC/LAN?

May be it's little bit odd, but yes i want to make connection between AWS VPC and my PC/LAN, so i can ping any EC2 instance using their Private IP. More Details: I'm using AWS Directory Service(DS) ...
0
votes
0answers
174 views

How can I list all users in AWS Directory Service?

I'm looking for a way to list all users in an AWS AD (small), preferably with created date (of the user). Is there any way to do this? The AWS console functionality seem somewhat limited. Maybe via ...
1
vote
0answers
79 views

Why is New-DSComputer failing to join an ec2 instance to the directory services domain?

I have a domain xyz.com in AWS Directory Service, and I am trying to join an EC2 instance to this domain using PowerShell. I can do it manually but I am trying to automate it so that when the next ...
4
votes
2answers
941 views

How can I retrieve a domain computer's details from AWS Directory Service?

I know using the AD module for powershell that we can retrieve domain computers details and export them as csv. My domain is in AWS Directory Service, and I have a computer under this domain. I tried ...