Active Directory
A set of directory-based technologies included in Windows Server.
5,808 questions
0 answers
Windows 11 connecting to Active Directory via Cisco AnyConnect
I'm going to start with the question here and if I need to move this elsewhere, I can. We have just started deploying Windows 11. We have a couple of users that it is working well for, however, just this week two new computers were unable to access…
asked 2024-04-05T20:38:27.4733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 23%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
DaChiTriGuy
0
Reputation points
commented 2024-04-16T20:13:36.7033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 28.999999999999996%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
ajay
0
Reputation points
0 answers
How to Prevent login redirect to 'login.microsoftonline.com' when user accesses secure page.
Hello, I am trying to have any user redirected to my login page, which has a login for ASP.net 4.8 Identity, and a button for Microsoft AD login which sends them to their company login page. Currently it words great, but if they access a page directly…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 44%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EE%3C/text%3E%3C/svg%3E)
1 answer
Can I migrate FRS to DRSR while the domain and forest level are still in 2008r2
Hi everyone, Good afternoon. Hope you can help. I have two 2012r2 domain controllers. The AD forest level and domain level are still in 2008r2. With the fact provided, do you think if i can proceed with the migration from FRS to DRSR? Then I can raise…
asked 2024-04-16T18:58:01.8433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 89%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETC%3C/text%3E%3C/svg%3E)
Takami Chiro
231
Reputation points
answered 2024-04-16T19:01:55.3266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 38%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
Marcin Policht
8,415
Reputation points MVP
0 answers
No Mobile Phone Option for AAD B2C SignIn or SignUp
Hello, We currently encountered a situation in which a user didnt have a mobile phone to sign up to create an Entra ID account. The mobile phone is required to send them a verification code as our account sign up is password-less. Is it possible to have…
asked 2024-04-16T18:22:38.31+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 61%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMJ%3C/text%3E%3C/svg%3E)
Morrison, John
0
Reputation points
asked 2024-04-16T18:22:38.31+00:00
Morrison, John
0
Reputation points
1 answer
Access to Azure Active Directory, will be disabled on May 2, 2024
Received this email form Microsoft. No idea What I'm supposed to do. Your subscription offer, Access to Azure Active Directory, will be disabled on May 2, 2024 Access to Azure Active Directory subscriptions were subscriptions that were used to connect to…
asked 2024-04-02T17:00:57.5433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 49%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETF%3C/text%3E%3C/svg%3E)
Tom Flanagan
1
Reputation point
commented 2024-04-16T14:42:07.8566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 78%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJN%3C/text%3E%3C/svg%3E)
jose nava bravo
0
Reputation points
0 answers
Hybrid environemtn - SSO not working
Hi, We have a Hybrid environment, and are trying to auto enroll our Hybrid joined machines to Intune. I have created a GPO and linked it to the machines It seems to work for some, but many fails. When I check dsregcmd I get the following EntraID…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 88%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
2 answers
How to overcome from issue after migrating from one forest to another for Hybrid Azure AD joined devices scenario?
I'm trying to migrate a Hybrid Azure AD joined workstation from one domain to another in a different forest. I used PowerShell to unregister the device from Azure AD and signed out of all Microsoft 365 applications. I also deployed an application package…
asked 2024-04-10T16:10:14.9433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 67%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPS%3C/text%3E%3C/svg%3E)
Prabhjot Singh
125
Reputation points
answered 2024-04-16T13:12:56.7633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Akhilesh
4,540
Reputation points Microsoft Vendor
1 answer
One of the answers was accepted by the question author.
Delegate Control Wizard reports
Does the Delegate Control Wizard in AD allow an auditor to view which permissions have already been 'delegated' within AD/a domain? Or is it purely for delegating new permissions? If it does not, how exactly could you determine where such permissions…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 76%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECB%3C/text%3E%3C/svg%3E)
2 answers
Two Domain controller on single windows server
Can we install two Domain controller on single windows server: Ex: Domain1.net Domain2.com is it possible to run two AD on single windows server?
asked 2024-04-16T09:16:44.9633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 42%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
Shafqat Ali
0
Reputation points
commented 2024-04-16T12:15:36.91+00:00
Shafqat Ali
0
Reputation points
0 answers
Azure B2C MFA TOTP - numberOfAvailableDevices Get available devices
Hi Team, I have implemented TOTP in solution as per below sample code https://github.com/azure-ad-b2c/samples/tree/master/policies/totp/policy I have registered MFA in 2 mobiles but numberOfAvailableDevices claim still shows 1 , instead of 2. I need to…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 71%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
1 answer
Which AAD role and permission to Enable Active Directory authentication
I need to Enable Active Directory authentication for Azure File. Regarding the…
asked 2024-04-16T06:58:23.65+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 5%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EXZ%3C/text%3E%3C/svg%3E)
Xiwei Zhang
0
Reputation points
answered 2024-04-16T10:17:29.4766667+00:00
Sumarigo-MSFT
43,321
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
verify who can amend an AD groups membership
For a data protection audit, we need an accurate report on which AD accounts have the relevant permissions to amend (e.g. add or remove) members into some specific AD security groups. We don't want to assume it is just the usual default groups such as…
2 answers
Azure hybrid domain join
Hi, If I enable azure hybrid azure AD join from configuration device tasks in AD connector, does the end user of these existing AD only domain joined machines experience any prompts/ issues? Thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 70%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 11%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJZ%3C/text%3E%3C/svg%3E)
3 answers
Hybrid joined devices syncing problem
Hi, It will be a long post, so... I have a problem with hybrid joined devices and Conditional Access (set to require hybrid joined device). Our users from time-to-time are unable to use apps because of this. Infrastructure: local Active Directory…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 82%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
1 answer
Add Manager Attribute with different Domain Active Directory
Hi Everyone and Support, Really need your help to solve this solution. Two domains already fully trusted and Authentication in all forest, permission already verify. I have two domains. As example Domain A and Domain B, some users in Domain B need to…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 15%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EF%3C/text%3E%3C/svg%3E)
3 answers
One of the answers was accepted by the question author.
Why my Windows Server 2022 Datacenter can't join the domain?
We have a new Windows Server 2022 that we're trying to join the domain. It gives us an error that it cannot find the domain controller / server. We have a lot of servers that are in the domain and have joined this specific DC, but this one particular…
asked 2024-03-14T19:50:24.7433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 28.000000000000004%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECF%3C/text%3E%3C/svg%3E)
Carl Franc
0
Reputation points
accepted 2024-04-15T21:32:03.3766667+00:00
Carl Franc
0
Reputation points
1 answer
Error When Performing Post-Deployment Tasks after Installing Active Directory Certificate Services on Server 2019
After adding the Active Directory Certificate Services>Certificate Authority role on Server 2019 Standard, I cannot complete the post-deployment tasks. As soon as I enter credentials with the appropriate permissions, I receive this error message.…
asked 2024-04-03T20:37:48.9966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 76%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAB%3C/text%3E%3C/svg%3E)
Andy Baker
0
Reputation points
commented 2024-04-15T13:47:58.44+00:00
Andy Baker
0
Reputation points
2 answers
Domain Join Failed Windows Server 2016 and 2019
I have an Active Directory that is based on a primary domain controller as well as two additional domain controllers which are all Windows Server 2022 machines and are hardened according to the CIS benchmark. I wanted to test joining several different…
asked 2024-01-24T13:09:58.7666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 24%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA1%3C/text%3E%3C/svg%3E)
AndreBreuer-1699
0
Reputation points
answered 2024-04-15T11:36:05.5133333+00:00
AndreBreuer-1699
0
Reputation points
1 answer
Remove Exchange 2019
Hi, I had exchange 2019 in my network, but for some reason, I had to install a new exchange 2019 in my network and all mailboxes moved from the previous exchange to the new exchange. the previous exchange has been powered off for some months. so how can…
asked 2024-04-14T06:56:30.5533333+00:00
Hossein Zakeri
1
Reputation point
answered 2024-04-15T10:23:25.1166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 18%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENM%3C/text%3E%3C/svg%3E)
Noah Ma-MSFT
225
Reputation points Microsoft Vendor
2 answers
One of the answers was accepted by the question author.
PKI - Certification Authority (CA): Best Practice regarding CRL and OCSP propagation
Hi everyone, I would need to know if there is a Best Practice regarding the CRL and Delta CRL update time, as well as the OCSP propagation and update time. Regarding the CRL I have the settings as per the attached images. Kind regards and thanks for your…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 11%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E4%3C/text%3E%3C/svg%3E)