Collecting additional fields in Active Directory

Similar Questions

• Windows Server 2008 R2, with two Windows Storage Server 2003 Standard: How can I add the MAC authentication on top of Active Directory authentication for a storage servers?

  I have two running Windows Storage Server 2003 storage servers in a domain R2 Windows Server 2008 Standard.  On top of the Active Directory authentication, I want to add authentication of MAC address for the access to one of the storage servers.  In this scenario, an authenticated user is unable to log on to the target storage server unless the user is also on one of the computers MAC address accepted.  All domain users will have access to other folders and files as configuration storage server in Active Directory.  I already have a user access to installation by the permissions for folders on the storage server target, but I still want to restrict access to specific computers as well.  For what it's worth the server hardware is HP Proliant DL360 G5 for the Standard Server 2008 R2 and server HP Proliant DL185 G5 for two Storage Server 2003 computers.  I don't want to have MAC address authentication as the main means of access control to the network, only for the storage server a as an addition to control Active Directory.

  Hi Kerry,

  The question you posted would be better suited in the TechNet Server Forums since we have dedicated to this support; We recommend that you post your question in the TechNet Forums to get help:

  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

  Keep us informed on the status of the issue.

• Error of IDM to connect the port 636 to Active Directory

  Hello friends,
  I have a question about the configuration of the Active Directory Connector, I installed the certificate in one of the directories active I use as a target and import this certificate the server of Oracle Identity Manager 9.1.0.2, IDM of this server try to connect by Ldap Browser and port 636 to Active Directory without success.
  How else can I validate that there is communication with SSL?
  
  I need to do additional configuration in Active Directory.
  
  Thank you

  You can write a piece of code JNDI just to create the connection via the SSL protocol and use JXplorer or LDAP browsers.

  Also check diagnostic Dashborad that provides you to check connectivity via the SSL protocol.

• Why do I get an error message "Active Directory Domain Services unavailable" when I'm not connected to a server?

  I have 2 computers running under that Windows 7 Ultimate SP1 connected to a modem-router D-Link. I have defined a collective dwelling and have attached my HP Officejet 4500 printer to the router.

  At the office on both computers, when I click on "Find a printer" in the window of the printer, I get the error "Active Directory Domain Services unavailable. Do not understand why this error exists, since I do not have any field. There is no server on the network.

  Hello Chaim,

  Thanks for posting your query inMicrosoft community.

  I understand that you have a guest of error as you try to find the printer. So, please try to follow the following suggestions to solve the problem.

   
  Method 1: First of all, try to update the printer driver which might help you resolve the issue. Click on the link below for more information on the updated printer drivers.
  
  Find and install printer drivers in Windows 7
  http://Windows.Microsoft.com/en-us/Windows7/find-and-install-printer-drivers
   
  Additional information:
   
  Please refer to suggestions provided by Adam_W_ responded on May 28, 2010
  http://answers.microsoft.com/en-us/windows/forum/windows_vista-networking/clicking-find-printer-shows-error-the-active/52bfd961-ff62-4397-b8cf-a0708f0cb3d2.
  
  I hope this helps. Otherwise, please respond to this answer and we will be happy to help you again.

  Thank you

• Integration with Active Directory OraHome92?

  Let me first say that I have absolutely zero knowledge of all Oracle products, I don't know if I'm posting in the right forum, but I'm here, if I need to ask another forum please let me know.

  Question:
  We are Microsoft System administrators. We have a client that is running a very old application to the database on a Windows 2003 server. Currently they use a new database (Oracle, not), but the oracle database must accessible for research in history.

  The application works very well.

  We plan to migrate the domain existing (Active Directory) to a couple of servers R2 2012.

  The 2003 with oracle server is also a domain controller, and we do not want in our field of 2012R2 2003 domain controllers.

  Our question is can demote us this domain controller and Orahome92 will work after the demotion?

  Server 2003 is not the FSMO, the FSMO is a Windows Server 2008.

  In other words, how Orahome92 integrates with Active Directory? Or isn't there any Active Directory integration and may us just demote the server and leave it to run as a member of the domain server?

  Maybe you need more information about oracle, all I can say that the following services are running:

  OracleMTSRecoveryService
  OracleOraHome92TNListener

  OracleServiceORCL

  Oracle installed, but NOT running services:
  OracleOraHome92Agent
  OracleOraHome92ClientCache
  OracleOraHome92HTTPServer

  OracleOraHome92PAgingServer

  OracleOraHome92SNMPPeerEncapsulator

  OracleOraHome92SNMPPeerMasterAgent

  
  

  I hope sombody can give treatment of this or point us in the right direction.

  I would not be protected by an export created like this. It is not a full export, is an export of the only pattern and you may need more than that if it is necessary to rebuild the database. In addition, it is not a coherent export which may make it unnecessary. I was running export something like this:

  exp.exe System/sys@oracle_w3 complete file=d:\directory\\file.dmp = compliance = y

  You may think it's all pretty awkward. The problem is that it is generally considered bad practice to install Oracle on a domain controller, unless you install as a member of the domain administrators group. I guess just like you do not have that, you can be able to downgrade the machine without affecting the database. But I don't really know, Windows security is a mystery to me.

• Open migration to Active Directory directory Windows vs Mac

  OK, so I help my old school to their IT needs, because they do not have a person hired for this role.

  Currently, they have a center where the staff use computers based on Windows 10 10 (systems of Core 2 Duo, especially assembled; all about 3 years) connected to a Windows 2008 Server (from Dell; about a year). As the institution wishes to expand the computers available to their staff (from 90), my suggestion was to move to Mac (probably 11 '' MBAs), with a MacBook Pro 15 "is the duty of the server.

  This migration can be done in one shot and would happen progressively (probably MBAs purchased each year for the next four years, 20-25).

  The current configuration is that there is a local + Admin user configured on each of the 10 Windows PC - based, with all personnel having access to the user not local administrator.

  In order to facilitate the management, I would like to move to the logons on the network, as we begin our migration to a Mac OS environment.

  Should we configure AD on Windows Server and bind it as MBAs, and when to buy us, with the final being the MBP 15 "for server-buying functions, or is it possible we can get the MBP 15" now and use Open Directory and binding the existing 10 10 Windows-PC with the macOS Server?

  NOTE: The school operates Google Apps, and all employees have a Google Apps account with a custom domain name.

  You can't link PCs to Open Directory without using 3rd - Party (page). In addition, depending on the operating system will not work reliable? You'd have to trial it first. Beyond bond and provide a home folder there will be nothing else. No management, no policies etc Open Directory to your PC.

  Support way to achieve this is to use Active Directory and complete with OD to manage your estate of mac only. Again, you can apply GPOS for Mac without 3rd - Party help which can be very expensive.

  Not that it's something that you would consider - although you could do? It may be preferable to go ' all the mac "If your intention is to switch to Mac OS. If your PC using the software that is available only for PCs consider using virtual machines on your Mac to keep this aspect of the school.

  My 2 p

• Active Directory - join the domain for multiple devices

  Hi all

  I need your expertise to advice me how join domain for multiple devices.

  Currently my organization have more than 10,000 computers are made up of Windows XP, 7, 8 and 10.

  We will deploy new Active Directory server in the data center.

  Currently, we plan to go every computer/devices to perform a field joints. This method will take much time to complete the 10,000 devices.

  is there another method to do this?

  is there a method that all devices will join automatically field when it is connected to the corporate network.

  Thank you.

  Hello

  Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums.

  http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

  See you soon.

• Add several domain in Active Directory

  Add several domain in Active Directory

  Hello vinod Thakur Linux,.

  Microsoft Communities is consumer related questions about Windows 8, Windows 7, Windows Vista and Windows XP. For questions about the field of issues related to Active Directory, it would be best to ask your question on the TechNet forum.

  Click here to transfer your question in TechNet for Windows Server in the Directory Services forum.  They will be able to solve your problem.

  Thank you

  Marilyn

• When I try to open Active Directory users and computers in Windows Server 2008 Standard, I get an error message.

  MMC.exe APPCRASH

  When I try to open Active Directory users and computers in Windows Server 2008 Standard, I get the error message below. Kindly help

  Problem event name: APPCRASH

  Application name: mmc.exe

  Application version: 6.0.6001.18000

  Application timestamp: 47918d 09

  Fault Module name: KseAdm.dll

  Fault Module Version: 6.0.1262.1064

  Timestamp of Module error: 49426cbb

  Exception code: c0000005

  Exception offset: 0004 849 d

  OS version: 6.0.6001.2.1.0.272.7

  Locale ID: 1033

  Additional information 1: fd00

  More information 2: ea6f5fe8924aaa756324d57f87834160

  Additional information 3: fd00

  Additional information 4: ea6f5fe8924aaa756324d57f87834160

  Hello

  The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the TechNet Forums:

  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

• When you try to add 'fédération Service Active Directory' in the VM, it fails with exception after clicking on the last step of the wizard.

  Log Event Viewer as below.

  *****************************************************************

  Event log:

  Log name: Microsoft-Windows-ServerManager/Operational
  Source: Microsoft-Windows-ServerManager
  Date: 07/03/2012 18:09:06
  Event ID: 1600
  Task category: no
  Level: error
  Keywords:
  User: HDC\Administrator
  Computer: Win2K8HDCRoot.HDC.Com
  Description:
  An error has occurred in the Server Manager. An unexpected exception has been found:
  System.ArgumentNullException: Value cannot be null.
  to Microsoft.Windows.ServerManager.ActiveDirectoryFederationServer.ActiveDirectoryFederationServerProvider.SaveRegistrySetting (Nullable 1 setToCreate, String value, String NomValeurRegistre)
  at Microsoft.Windows.ServerManager.ActiveDirectoryFederationServer.ActiveDirectoryFederationServerProvider.PerformActionBeforeInstall (InstallableFeatureInformation featureInfo, DiscoveryResult discoveryResult, ChangeTracker changeTracker)
  at Microsoft.Windows.ServerManager.Common.Provider.PreInstall (InstallableFeatureInformation, DiscoveryResult discoveryResult, ChangeTracker changeTracker comments)
  at Microsoft.Windows.ServerManager.Common.Provider.FlushSyncPreInstall (guestsToSync from list 1, 2 syncResultMap dictionary)
  at Microsoft.Windows.ServerManager.Common.Provider.FlushSync (SyncProgressHandler progressCallback)
  at Microsoft.Windows.ServerManager.Common.Provider.FinalFlush (SyncProgressHandler progressCallback)
  to Microsoft.Windows.ServerManager.Transformation.SyncEngine.Sync (ChangeTracker changeTracker, DiscoveryResult discoveryResult, progressUpdateIdList of list 1)
  to Microsoft.Windows.ServerManager.DiscoveryResult.CommitUpdates (ChangeTracker changeTracker, ProgressUpdateCallback progressUpdateDelegate, featureIdsOfInterest of list 1)

  The event XML:
  http://schemas.Microsoft.com/win/2004/08/events/event">
   
     
      1600
      0
      2
      0
      0
      0 x 1000000000000000
     
      15
     
     
      Microsoft-Windows-ServerManager/Operational
      Win2K8HDCRoot.hDC.com
     
   
   
      http://schemas.Microsoft.com/win/2004/08/events"xmlns ="Event_NS">
        An unexpected exception has been found:
  System.ArgumentNullException: Value cannot be null.
  to Microsoft.Windows.ServerManager.ActiveDirectoryFederationServer.ActiveDirectoryFederationServerProvider.SaveRegistrySetting (Nullable 1 setToCreate, String value, String NomValeurRegistre)
  at Microsoft.Windows.ServerManager.ActiveDirectoryFederationServer.ActiveDirectoryFederationServerProvider.PerformActionBeforeInstall (InstallableFeatureInformation featureInfo, DiscoveryResult discoveryResult, ChangeTracker changeTracker)
  at Microsoft.Windows.ServerManager.Common.Provider.PreInstall (InstallableFeatureInformation, DiscoveryResult discoveryResult, ChangeTracker changeTracker comments)
  at Microsoft.Windows.ServerManager.Common.Provider.FlushSyncPreInstall (guestsToSync from list 1, 2 syncResultMap dictionary)
  at Microsoft.Windows.ServerManager.Common.Provider.FlushSync (SyncProgressHandler progressCallback)
  at Microsoft.Windows.ServerManager.Common.Provider.FinalFlush (SyncProgressHandler progressCallback)
  to Microsoft.Windows.ServerManager.Transformation.SyncEngine.Sync (ChangeTracker changeTracker, DiscoveryResult discoveryResult, progressUpdateIdList of list 1)
  to Microsoft.Windows.ServerManager.DiscoveryResult.CommitUpdates (ChangeTracker changeTracker, ProgressUpdateCallback progressUpdateDelegate, featureIdsOfInterest of list 1)
  
     
   
  

  *****************************************************************

  Details of home:

  Win 2K 8 R2 Enterprise
  Processor: Xeon x 3440
  Roles: Hyper-V, file Services
  Related network configuration: 'Network Doscovery' lit with "SDDP" and "UPnP" running services. Also "DNS client" and "Function Discovery Resource Publication" are running. The firewall is turned on
  Virtual machines running: 6
  Total none of the network adapters: 2
  1 NETWORK card: (Intel (r) 82578DM Gigabit Network Connection is connected to service internet broadback. "Statis IP" is set for my server.
  Not virtual networks: 2
  Virtual Network 1 is "External" type and connected to the NIC1. The value settings IPv4/IPv6 IP addresses and DNS automatic.
  Virtual Network 2 is of the type 'internal '. IPv4/IPv6 settings is set to Auto for IP and DNS addresses.

  *****************************************************************

  Information on the virtual machine:

  Win 2K 8 R2 Standard
  Roles; "Domain service active Directory", "DNS Server", "File Services" and "Web Server (IIS).
  Related network configuration: 'Network Doscovery' lit with "SDDP" and "UPnP" running services. Also "DNS client" and "Function Discovery Resource Publication" are running. The firewall is turned on
  None of the network adapters: 2
  Network adapter 1 connected to 'Internal' with IPv4 set to a static IP address '192.168.10.1 ' and DNS set to ' 127.0.0.1'. IPv6 is disabled
  Network 2 connected to 'External' and IPv4 adapter set to automatic for the IP and DNS addresses. IPv6 is disabled
  Domain controller for HDC.Com.

  *****************************************************************

  History of the virtual machine:

  Initially, she felt just VS2010 and SP2010 installed without DNS and AD DS roles added. Later, we VS and SP2010 has been uninstalled via the Control Panel, as well as other programs, I can't recall. Then added roles DNS and Active Directory domain to create and control the field x ".com". After a few days, another virtual computer has been configured in the same way and 'AD FS' role added to try app based on the claims. In the coming days, all of the roles above have been removed and added to create and control the current domain ' HDC. Com'. Before this step, the self-signed certificates that have been installed as part of the App claims have been removed from MMC, and IIS services. Don't forget to change the name of the computer as well.

  *****************************************************************
  I'm not good at bases of the any tried out above learning, but ask the members of the scholarly community to help me solve the problem and I'm sorry if I ask some silly questions as part of this thread.

  Hello

  Is generally answer the question you have posted in the Microsoft Answers forums. It is better suited on TechNet forum
  TechNet Forums -http://social.technet.microsoft.com/Forums/en/categories/

• How to view the session of users in active directory remotely...

  Hello...

  
  
  I work with the environment of windows server 2008 Active Directory Domain Services (AD DS), Clint computers are joined in the field and having the xp Machines in. Now I want only to see the users session (session) or how to interact with the user desktop when users connected and without disconnect from their session and using the third-party applications. I tried with third party software, but they're expensive.

  Hello

  Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the Technet Forum. You can follow the link to your question:
  http://social.technet.Microsoft.com/forums/en/category/WindowsServer/

• Remove active directory

  I have a client who has a small office (3 positions) with an old Windows 2 K Server.  It was installed years back to serve for the performance of an application that requires MS SQL server, etc..  At that time, it was also installed running active directory, dhcp, etc.

  They no longer need the server as they now run their applications online.  In addition, it server hardware problems and will die at some point.  What I have to do, is remove the server and just run basic networking (working group) to the office so they can exchange a word document, or both.  Two of the machines will be updated with the OS so this isn't a problem but one is mobile owner using speech recognition, etc. and I would like to join the Working Group, without losing files in bulk the server and Active directory.

  BTW - all the workstations in the Active directory are Win XP Pro

  (1) what measures are necessary to accomplish the back out of the server?

  (2) what they currently have their My Documents redirected to the server, but I'm sure it's just a matter of changing its properties.

  (3) a router from internal network will resume the DHCP functions.

  Your help and assistance is greatly appreciated and necessary because no one I talked to can help me in this endeavor.

  Hi DHUM,.

  Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Windows 7 forum.

  http://social.technet.Microsoft.com/forums/en/itprovistanetworking/threads

• SRA-store outside the Active Directory user attributes

  Is it possible to be able to store a custom user attribute, such as Mobile phone number, outside the Active Directory?

  I would like to be able to use it on the the email (an email/SMS gateway) 2nd factor authentication process.

  I would like to avoid duty or anything else in AD store or having to expose the unit to SonicWALL SRA.

  It's something that we do now with our Barracuda SSLVPN device I'm looking to replace it with this.

  You can configure a different email for OTP by user.  In admin console click on users > local users.  Change the user you want, and then click the tab linking strategies.  Fill in the email address: field.

• Download Dell C2665dnf of addresses in Active Directory

  Does anyone have this or a printer similar book download of email addresses on a Microsoft Active directory LDAP.

  The manual is light on the data from the example and I have been unable to cross due to lack of connection error.

  As seems to be the case with this config for web printers, there is probably the settings and other outside screens LDAP, that I did not set up correctly. Maybe

  • The port settings
  • Authentication system
  • Kerberos,
  • SSL/TLS,

  Or something that I completely forgot... I'm not a complete novice to Dell printers or LDAP integration. I have validated my settings with the help of a third-party LDAP and AD Explorer apps and everything should work... but of course this isn't :-)

  I tried both SSL/TLS 4 all the usual ports, authentication Kerberos and LDAP, etc. and all combinations of these options, but no progress beyond the error message from the printer in the user interface.

  Screenshots or listed to a working configuration settings would be greatly appreciated.

  Neil.

  Thanks to ThunderGod2 to confirm that this function works really, unfortunately the recommended change did not work for me... BUT... knowing it was possible... I continued to try different options, and this is the configuration that finally worked for me.

  The setup I have is a domain controller on 192.168.1.3 running Active Directory and Windows 2008 R2 (there are other domain controllers in the network, but it's one I usually authenticate on printers, and Web sites).

  Go to the web interface of the printer and configure as follows...

  1. menu: print server settings > print server settings > Port settings

  Set the "updating address book" box to check for on and apply.

  2. menu: print server settings > Security > authentication system

  The value 'Authentication system settings' LDAP and apply.

  3. menu: print server settings > Security > SSL/TLS

  Clear the checkbox "LDAP - Communication of SSL/TLS" and apply it.

  4. menu: print server settings > Security > LDAP server

  Define "IP address / name of host and Port" to the IP address of you DC/AD server (in my case 192.168.1.3)

  Set the port number of 389

  Set the "Search directory root" at the location where your users are. In my setup, the path was something like this: OR = users, OU = FOO, DC = FOO, DC = local

  It is a FOO.local domain that has an organizational unit FOO with a unit of sub - org called "Desktop users"

  You can get the address of your own ad using a free tool called ADExplorer from SysInternals (Microsoft Corporation)... Link: https://technet.microsoft.com/en-us/library/bb963907.aspx the ADExplorer app you can navigate through the directory active directory in a configuration type LDAP, and once you have located the correct OU just right-click on it and select "exemplary object name.

  Together: "login credentials to access LDAP server" system

  Together: "Login Name" to a user valid for authentication, you may need to add the field as a suffix, for instance [email protected] for the user joe in my example

  Together: "Password" and "re-enter Password" password of the user for authentication.

  Together: "Address book server" check on... then apply and restart the printer.

  Leave all other LDAP or LDAP mapping to the default settings and you should be good to go. My setup allows me to use the no-SSL/TLS connection on port 389, this can be checked with ADExplorer or other tools of the LDAP Explorer free on the web.

• Impossible to activate Active Directory users and computers (and other features Windows AD)

  I have Windows 7 Professional Service Pack 1 and I installed the Remote Server Administration Tools, but when I go to the program and features-> turn Windows features on / off power and try to check the choice of Active Directory, and then click OK it attempts to install, but then a window pops up with the message "an error has occurred. Not all the features where successfully changed. "This happens on 2 different installations of Windows 7 I have and I can not find newspapers or additional information anywhere to help me understand why this is the case.

  This issue is beyond the scope of this site (for consumers) and to make sure you get the best answer, we need to ask either on Technet (for IT Pro) or MSDN (for developers)
  http://social.technet.Microsoft.com/forums/en-us/home s/fr-U.S./Accueil
  http://social.msdn.Microsoft.com/Forum
  
  
  If you give us a link to the new thread we can point to some resources it