Similar Questions

• Can I run Backup Server (Symantec BackupExec), accounts (fast book) on the single domain Active Directory server software

  Dear all,

  I am under domain, Active Directory and the backup server (Backup Exec) and called to account quick book on the same server.

  Does make all the problems? Kindly looking for answers.

  Hello

  Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums.

  http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

  See you soon.

• problem with DNS on the active directory server unique

  I have a client that I'm having a problem with DNS that they do not have active directory structure.  I tried just about everything and at my wits end.  Customers can get online, but the problem is that they cannot see the DNS.  Any help would be much appreciated.

  Ask in the forum Windows Server:
  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

• Version of Cisco ACS 5.1.0.44.3 integrate with active directory server from Microsoft windows 2012?

  Version of Cisco ACS 5.1.0.44.3 integrate with active directory Microsoft windows 2012 R2 server?

  Unfortunately, it does not support R2 2012

  5.1 ACS supports all editions of:

  Windows Active Directory (AD) 2000

  Windows AD 2003

  Windows AD 2003 R2

  Windows AD 2008

  Source

  Windows AD 2012 R2 is supported after ACS 5.5 patch 1 and following.

  Source

  Please find below the steps to go from 5.1 to 5.5 hotfix 1:

  STEP	FILE	COMMAND
  Apply the 5.1 patch 6	5-1-0-44 - 6.tar.gpg	ACS patch install repository 5-1-0-44 - 6.tar.gpg ftp_repository_name
  Apply 5.3	ACS_5.3.0.40.tar.gz	application upgrade ACS_5.3.0.40.tar.gz ftp_repository_name
  Apply the patch 5.3 8	5-3-0-40 - 8.tar.gpg	ACS patch install repository 5-3-0-40 - 8.tar.gpg ftp_repository_name
  Apply the sharp Patch	Pointed-PreUpgrade-CSCum04132-5-3-0-40.tar.gpg	ACS patch installs Pointed-PreUpgrade -CSCum04132- 5-3-0 - 40.tar.gpg repository ftp_repository_name
  Apply 5.5	ACS_5.5.0.46.tar.gz	application upgrade ACS_5.5.0.46.tar.gz ftp_repository_name
  Apply the patch 5.5 1	5-5-0-46 - 1.tar.gpg	ACS patch install repository 5-5-0-46 - 1.tar.gpg ftp_repository_name

  Best regards ~ jousset

• Set the name of the network on a Windows 2012 without Active Directory Server

  I have a Server Windows 2012 I use for DHCP, DNS and NAT on a network without a domain controller, and I don't want to create a domain.

  When my Windows 7 clients connect, they identify the network with the name of 'network '. Is there a setting on the server, Windows 2012, that will allow me to change the name that clients identify the network with? I want something that is on the side Server and not to go and rename it on each client manually.

  I noticed low-end devices how as access points, modems etc use their own custom network that clients identify their network with, so I guess it cannot be something too difficult...

  Thank you in advance.

  Support is located in the Windows Server Forums:
  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer/

• Creating security group with grants decided in active directory - Server 2003

  Hello

  I need to create several different security groups for about 7 users with grant different access rights, but all users will access the same folder main and some of the same void records. I created a group with some of the users but appear to have access to all the folders there particular subfolder but I only want to have access to some of the folders in the selected subfolder.

  I guess what I'm asking is how do I create groups of different security with grants decided for each groups and ensuring that users in these groups only have access and subsidies to certain folders.

  I don't know if I explained myself properly but I certainly confused myself, I hope someone can point me in the right direction to solve this problem.

  Thanks in advance

  Jah

  Jah,

  For assistance, please ask for help in the appropriate Microsoft TechNet Windows Server Forum.
  
  Thank you.

• Cisco ASA 8.3 ldap AAA configuration Microsoft active directory server fails

  Hello

  I'm trying to implement authentication ldap for remote vpn ssl users like the image below:

  

  When I try the test button and enter a user name and password I get the message ' authentication rejected: user not found. "

  Why? Please help, I am running out of options here... Thank you much much in advance.

  Use the DN of connection according to the following format.

  [email protected]/ * / _name and let me know how it goes.

  If the suggestion above does not work then please run the debugging ldap 255 and paste the result here.

  Rgds, jousset

  The rate of useful messages-

• Adding vMA server to the Active Directory domain

  I followed the instructions for adding my vMA to Active Directory server. I see the computer object in AD and a query of vMA looks good, but when adding, I get the warnings below. Can someone explain these warnings and what that if all I have to do to fix?

  [vi-admin@VMA ~] $ sudo domainjoin-cli join xxxx.com d-user
  Password:
  Join the AD domain: xxxx.com

  With the DNS name of the computer: vma.xxxx.com

  [email protected] password:
  Warning: Unknown pam Module
  The same PAM module cannot be configured for the service of wbem. This service uses the module ' $ISA/pam_unix.so ', which is not in this list of the known modules program. Please same technical support by e-mail and include a copy of /etc/pam.conf or/etc/pam.d.

  ATTENTION: An error may be resumed has occurred during the processing of a module
  Even if the "pam" configuration has been completed, the configuration has not completely finished. Please contact support as well.

  SUCCESS
  [vi-admin@VMA ~] $

  
  [vi-admin@VMA ~] $ sudo domainjoin-cli query
  Password:
  Name = vma
  Domain = XXXX.COM

  Name unique CN = VMA, VMware = OU =, OU = XXXX, DC is XXXX, DC = COM

  [vi-admin@VMA ~] $

  It's actually quite normal, I guess, this is the version still using VMware is not compatibility with WBEM (Web - Based Enterprise Management) based on the warning message, I'm not sure if this will be fixed in a later version or a newer version of the same set. As far as I know, it does not affect the integration of commercials with vMA feature.

• Active Directory - join the domain for multiple devices

  Hi all

  I need your expertise to advice me how join domain for multiple devices.

  Currently my organization have more than 10,000 computers are made up of Windows XP, 7, 8 and 10.

  We will deploy new Active Directory server in the data center.

  Currently, we plan to go every computer/devices to perform a field joints. This method will take much time to complete the 10,000 devices.

  is there another method to do this?

  is there a method that all devices will join automatically field when it is connected to the corporate network.

  Thank you.

  Hello

  Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums.

  http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

  See you soon.

• remove an active directory domain controller that no longer starts

  I'm in the process or upgrading active directory from Windows 2003 to WIndows 2008.  There are between 20 and 30 of the domain controllers.  I'm about to halfway through the process and have had no problem.

  So far.  One of the Windows 2003 domain controllers has declined before the demotion.  It has been restarted and it won't start.  What can I do to remove this Active Directory server without starting the system?  Is there a clean solution to the withdrawal?

  Hi McGinleyM

  The answers community is more than one instance based home user. Your question would be better suited for our group of TechNet. The link is below. Thank you.

  http://TechNet.Microsoft.com/en-us/ms772425.aspx

• Cisco Secure ACS groups 5.1 Active Directory and RSA Authentication Manager 7.1 for profiles

  / * Style definitions * / table. MsoNormalTable {mso-style-name: "Table Normal" "; mso-knew-rowband-size: 0; mso-knew-colband-size: 0; mso-style - noshow:yes; mso-style-priority: 99; mso-style - qformat:yes; mso-style-parent:" ";" mso-padding-alt: 0 cm 0 cm 5.4pt 5.4pt; mso-para-margin: 0 cm; mso-para-margin-bottom: .0001pt; mso-pagination: widow-orphan; font-size: 11.0pt; font family: 'Calibri', 'sans-serif"; mso-ascii-font-family: Calibri; mso-ascii-theme-make: minor-latin; mso-fareast-font-family:"Times New Roman"; mso-fareast-theme-make: minor-fareast; mso-hansi-font-family: Calibri; mso-hansi-theme-make: minor-latin ;}"}

  Hello

  I'm deploying an ACS connected to an RSA AuthManager (that is connected to an Active Directory domain)

  I create several groups within the Active Directory server, I try to give to users for their groups different access rights.

  I tried to define an access policy "NetOp/NetAdm" and two authorization rules:

  Rule-1 AD - AD1:ExternalGroups contains all dir. INTRA/groups/NETOP 'Auth for net operators' 0

  Rule 2 AD - AD1:ExternalGroups contains all dir. INTRA/groups/NETADM 'Auth net admin' 0

  Default: refuse

  In the identity, I have configured the RSA identity source, so that users get authenticated by the RSA Authentication Manager.

  But I still refuse to get access, RSA authentication is successful, but the group membership, active directory does not work, even with the unix attributes or group principal defined for the user.

  My question is this valid configuration scenario? Is there another way to define several profiles according to the Group of users of external source?

  The stages of monitoring:

  Measures

  Request for access received RADIUS 11001

  11017 RADIUS creates a new session

  Assess Service selection strategy

  15004 Matched rule

  Access to Selected 15012 - NetOp/NetAdm service policy

  Evaluate the politics of identity

  15004 Matched rule

  15013 selected identity Store - server RSA

  24500 Authenticating user on the server's RSA SecurID.

  24501 a session is established with the server's RSA SecurID.

  24506 check successful operation code

  24505 user authentication succeeded.

  24553 user record has been cached

  24502 with RSA SecurID Server session is closed

  Authentication 22037 spent

  22023 proceed to the recovery of the attribute

  24628 user cache not enabled in the configuration of the RADIUS identity token store.

  Identity sequence 22016 completed an iteration of the IDStores

  Evaluate the strategy of group mapping

  15006 set default mapping rule

  Authorization of emergency policy assessment

  15042 no rule has been balanced

  Evaluation of authorization policy

  15006 set default mapping rule

  15016 selected the authorization - DenyAccess profile

  15039 selected authorization profile is DenyAccess

  11003 returned RADIUS Access-Reject

  Thank you

  Christophe

  I think you need to do is to create a sequence of identity with RSA as a selection in

  Authentication and recovery research list of attributes and AD in the additional attribute list recovery research. Then select this sequence as a result of the politics of identity for the service

• 4.2 ACS Cisco with Active Directory integration

  Hello

  I m new in the administration of the ACS, we have recently implemented on ACS version 4.2 Server

  to manage all the authorization of users in our network.

  We are in an environment with at least one Active Directory server, group, and users.

  Now, I m just able to create a new user in ACS and work with the switch of the customer, do I have to do, is to integrate my 4.2 ACS with Active Directory.

  to work with the user and group that a registry in my ad.

  Can someon help me please?

  Hello

  If you use windows server for CE 4.2 Installing you just need to do this the domain member server.

• vCAC 6.0.1 ASD Active Directory Endpoint

  I am creating and Active Directory endpoint in the 6.0.1 vCAC designer of advanced Service that uses SSL.  I am able to configure endpoint on port 389 or 3268 with success, but when I try to connect using 636 or 3269 it fails with an error wonderfully misspelled...

  Failed to create endpoint type AD vCO. Reason: Error: retriving server certificate. (Workflow: manage SSL certificates / certificates of the URL (item0) #6)

  
  

  It's not really doesn't tell me much.  I can say that it is having a problem for a reason, get the certificate of the server, but what prevents it from working?  I have a vCO connected to the same domain controller using SSL with no problems, although I import the certificate in vCO and restart the system before creating the connection AD it.  I had a colleague to look at the workflow vCO and noticed that the Manage "Workflow" certificates for the AD ASD Endpoint and he noticed an error undefined ADCertificateUtil().  This is a VMware built class which should be part of the AD Plugin in vCO.

  
  

  This led me to try and load a previous version of the AD Plugin in vCO, but I quickly discovered that no other version of the plugin AD that comes with the 5.5.1 unit will operate.  So I demoted vCO to 5.1.2 to give a try.  I loaded the version 1.0.3 plugin that has the class in the structure of the plugin files, but then discovered that no end point appear in the drop-down list in the DSA in vCAC 6.0.1.  GREAT!  So, I try to use vCO device version 5.5.0 which I remembered did not ship with a version of the plugin and then tried to download the AD Plugin once again, that worked.  Once I connect vCAC to this instance of vCO, I at least see Active Directory as an option.  I start working on it and I get the same wonderful error as described above.  Still digging into the workflow also shows the same of undefined ADCertificateUtil().

  
  

  I'm about to options for what I know to try and wish assistance.  The main reason for working through this problem is so I'm able to move from a field of AD password for password resets and the new creation of the user of a Service of Onboarding in vCAC.  Can someone help me with this?  I think I tried everything my mind can come with and now chosen to harass the communities for answers.  Thanks in advance.
  

  vCAC provides it's own series of workflow for configuring plugins different vCO. The workflow is a modified version of the original workflows plugin configuration. In this case, it seems that the workflow that ASD matters in the vCO and is trying to use for the configuration of the AD is an older version, the vCO is a more recent version of the plugin AD, where it seems that ADCertificateUtil has been removed in favor of the workflow of the library "import a certificate from URL". This is why it fails vCAC and it will also fail of the vCO.

  If it's OK for you, I would say to set up the Active Directory end point through vCO. If this isn't the case, then you can try to redirect the workflow that is used for the configuration of the parameters of AD. The configuration is a file that is located in ' / etc/vcac/vco-endpoints-workflows.xml '. You must change the endpoint "ad" to point to a workflow can configure an Active Directory server. You can try to configure create and update the workflow to point to the workflow rescue (the default configuration workflow that comes with the plugin AD) or create your own workflow and point to him. This however requires a restart of the 'advanced-designer-service' to pick up the new settings.

• Configuration of Active Directory with the OIM 11 g

  Hi all
  
  
  
  I installed OIM 11 g on windows 7. and I have one Active Directory server to another Machine.
  
  I installed the connector server in my local machine (windows 7).
  and HE created resources for AD and connector server... everything worked well.
  
  But, when I run the Active Directory organization seek Recon, is throw 'not found error in the field of the domain controller.
  
  
  Please help me on this
  1. what field I need to give to the Active Directory resource.
  
  2. any changes to do because the ad is in another Machine
  
  
  
  
  
  Thank you
  Kumar

  Connector server and AD must reside on the same domain. Install server connector on the computer where is installed the AD and check.

• Active Directory virtualization - security for AD VMDK

  Hello

  I'm an Active Directory server virtualization project manager. Currently, they are all physical, and my approach is to build virtual computers costs running 64-bit Windows 2003 R2 with sufficient storage space and disk. The actual creation of the VM is not a problem. But what is a problem for our security people and AD ops team is to protect the vmdk and associated files.

  The current VSI (Virtual Server Infrastructure) has each computer virtual using a LUN for the OS disk (c :)) drive and another logic unit number for the Page file/temp files.) Data files are also placed on a separate logical unit number. Now, the question arises since all virtual machines for a single blade (host ESX, BL685 HP) server are placed on the same logical unit number, there will be a mixture of files of the type of server (apps, SQLs, ads, etc.) in the data store. This means that C readers for all the virtual machines on this blade are running under the same security policy.

  If lock us the data store for the people of AD and other approved people, then the people to support normal ops (in another country) do not receive access to files. Only the AD team has right of ads and domain controllers, so I will try to reproduce this security model.

  So my idea is to have specific data only for ads stores; provide one for the C: drive (SysVol, etc.) and the other for Page files. Then I can lock these and let others to their current level of security.

  Does this sound logical? Feasible? Prefferable?

  That others make about it? Or is it overkill?

  Thank you very much

  Mark-Allen

  My guess is that only the AD team would never start/stop/etc a virtual machine, then maybe that's possible.

  You can create a custom role on your permission vcenter and delegete for some users, who will not have access to certain virtual machines!