How do I setup Active Directory and Group Policy on Windows Server 2012?

I work for a school district that uses a Windows 2012 server with about 400 Windows 7 PCs and 150 Mac PCs. We are set up with Roaming Profiles on the PCs and would like to be able to setup Active Directory, Group Policy, and Roaming Profiles on our macs. (We also have a mac server that they are using as a file server only) As we are a school, our funds are very low. Now for the questions...
Is there a software that allow us to accomplish this?
Is there a free solution or a very reduced price option to do this?
I heard that http://www.centrify.com/products/mac-edition.asp may accomplish this and I read something about it on here but didn't know if this is what I was really trying to do becuase it was marked as "The Golden Triangle" and did not mention Raoming Profiles. This is the link though: https://discussions.apple.com/message/17200059#17200059
Any help would be greatly appreciated.

The above reply does not take into account that I am trying to use GROUP POLICY EDITOR to make it the default browser.

Similar Messages

Trying to install a setup on a 64 bit machine with Windows server 2012 R2 which writes to registry FAILES

My msi is a 32 bit setup.
When I install it on a 32 bit machine with Windows XP it works fine .
I tried to install it on a 64 bit machine with windows server 2008 and it succeeds
While running my setup on a 64 bit machine with Windows server 2012 R2 it failes and I get the folloawing message:
"Registry object reference not set to an instance of an object"
Then the setup exits and leaves the app partially installed
I tried searching for known problems over the net, but found nothing
I will be happy to get some advice
Thanks
Liora

Sounds like you are trying to update a registry object that is not there.
Is this your own msi, or is it from a third party application? If third party, check with them to see if they support it on 2012 or if they have a known workaround.
If it is your own msi, sounds like it is time to debug it.
.:|:.:|:. tim

Windows 8 and IE10 and 11 not accepting Proxy Settings via Group Policy from windows server 2003

Hi
We are still running Windows Server 2003 with a Win7 and Win8 desktop environment. I can control Win7 IE9 settings,
But Win8 systems are running IE10. We have an internal proxy server.
Is there any way to force the proxy settings to the Win8/IE10 or 11 systems .
i have tried with The IE 10 .adm template and applied gpo,but does not have any proxy settings for ie10 and no changes were applies
please can anyone help me regarding this
i want to apply GPO from windows server 2003 to windows 8 ie10/11
Thanks
KNC

Hi,
I agree with Zanderol24, we can install RSAT on a windows8 client, and then we can use Group Policy Management to manage group policy from the client.
For more information about RSAT, we can refer to the following link:
Remote Server Administration Tools (RSAT) for Windows Client and Windows Server (dsforum2wiki)
http://social.technet.microsoft.com/wiki/contents/articles/2202.remote-server-administration-tools-rsat-for-windows-client-and-windows-server-dsforum2wiki.aspx
For more detailed information about how to use GPP to configure the proxy setting for ie10 and ie11, we can refer to the following link:
How to configure Group Policy Preference settings for Internet Explorer 11 in Windows 8.1 or Windows Server 2012 R2
http://support.microsoft.com/kb/2898604
When we use GPPs you need to be aware of the F5-F8 keys:
Red / Green: GP Preferences doesn’t work even though the policy applied and after gpupdate \force
http://blogs.technet.com/b/grouppolicy/archive/2008/10/13/red-green-gp-preferences-doesn-t-work-even-though-the-policy-applied-and-after-gpupdate-force.aspx
Besides, aside from using group policy to manage IE, IEAK can also be used to do this.
For IEAK, the following article can be referred to for more information.
Internet Explorer Administration Kit (IEAK) Information and Downloads
http://technet.microsoft.com/en-in/ie/bb219517.aspx
Best Regards,
Erin

Forest and domain functional level Windows Server 2012 R2 - what's new?

Hi, I still can't find documentation about the new domain and forest functional levels in WS 2012 R2.
a) "What's New in Active Directory in Windows Server 2012 R2"
http://technet.microsoft.com/en-us/library/dn268294.aspx
No word about it.
b) "Understanding Domain and Forest Functional Levels"
http://technet.microsoft.com/en-us/library/cc771294.aspx
Still WS 2012.
Thorsten

For what's New in Active Directory in windows server 2012 R2,
Read the following Blog
http://policelli.com/blog/archive/2013/06/27/whats-new-in-active-directory-in-windows-server-2012-r2-preview/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer".

Unable to install WSUS Updates KB720211 x64 and KB2734608-x64 on windows server 2012 r2 standard

Hi,
Am testing SCCM 2012 R2 in virtual environment. To handle Windows 8 clients, need to install KB2734608 update, which is failing.
Not able to install WSUS Updates KB720211 x64 too. The server is on Windows Server Standard 2012 R2 x64.
Any help will be appreciated.

Hi,
Agree with Michael. KB2734608 is applied to the WSUS 3.0 SP2. If we install the WSUS on Windows Server 2012 or later, the version of the WSUS becomes to v6.
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Printing Problem with Epson LX-300+ii and LX-310 in Windows Server 2012 R2 64-bit

I recently installed Windows Server 2012 R2 64-Bit.
We have Printer Epson LX-300+ii and LX-310 (dot-matrix) that we share among users. Each user access the Server using Remote Desktop. From previous experience with Windows Server 2008, I knew that these printers will be problematic, especially regarding
the Easy Print driver.
And I was right, using the Easy Print driver, I got the following result:
And so, I did manual mapping & disable the "Use Remote Desktop Easy Print printer driver first". Haha, what a surprise, I got the following result:
And so I uninstalled the printer driver, and install it again, thinking that I might chose a wrong driver, but.... same result. I know for sure that I chose the correct driver.
Next, I tried connecting the printer DIRECTLY to the server. Log-in to the Server directly,
not using Remote Desktop. And tried printing again, haha... really... what a surprise... I got the same problem here !!!
So now I know the problem is not the Easy Print driver, not mapping or registry problem either. It's the print driver. This is SUPER FRUSTRATING, I tried the same driver from the same CD in Windows 8.1 64-Bit with no problem. I tried it too in Windows 7
32-Bit with no-problem either. But somehow, this driver is problematic in Windows Server 2012 R2.
Any help? Anybody else bump into this same problem ? I'm close to giving up, been spending too much time figuring out this damn thing.
Andy

Hi Bulent Sahin,
Thank you for your reply, I tried IBM Graphics driver, but the result is equally as bad. But your answer inspire me to try different drivers. And so, the closest & best driver that I could use now is EPSON ESC/P 9pin V4 Class Driver
It's not as good as I would expect, but at least now, it's acceptable & readable. I can't believe that I'm the only one who have this problem
Thank you Mr. Sahin

How do I set firefox as the default browser in Windows Server 2012 Group Policy Editor?

Hello, I am unable to set firefox as the default browser despite multiple different attempts to do so using group policy.
I have:
- Set a registry command (targeted at 32/64 via a WMI query) to reset the opening command as shown below:
HKEY_CURRENT_USER\Software\Classes\http\shell\open\command
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1"
- Set a powershell logon script to run (that does run):
firefox.exe -silent -setDefaultBrowser
Despite setting the above it seems the client computers browsers are not affected by the settings above. When the script runs or if I run the command above a UAC window pops up and requests that I accept the command (for the setDefaultBrowser) but even if I click yes as an administrator it does nothing.
Since GPO in 2012 has changed perhaps there is something that I am missing? Do I need to somehow disable Windows Internet Explorer from achieving default browser status?
Please do not reply if you will suggest that I use Internet Explorer Maintenance (since this function in GPO has been disabled since IE10)
My DC is Server 2012, my client computers are Win7 32/64.

The above reply does not take into account that I am trying to use GROUP POLICY EDITOR to make it the default browser.

Using and synchronizing applications from Windows Server 2012 on local desktop

I have Visual Studio 2010 on my remote server. How do I use Visual Studio software from the server on my local laptop and sync it with the server?

Of course remote desktop assumes that the system is also properly licensed for Remote Desktop Connections.
A little clarification on the OP's request might also be in order.
"How do I use Visual Studio software from the server on my local laptop and sync it with the server?"
If you want to run VS on the server, using something like remote desktop services, it runs there and the data stays there. Obviously you can redirect where VS will store data so that it stores data on your laptop, but then there is nothing to
automatically synchronize it. Maybe a more complete explanation of your issue would help.
. : | : . : | : . tim

Adding a Registry Key via Group Policy on Windows server 2008 R2

Hi all;
I need to add the following Registry Key and values to several PCs across the network, I tried doing so via a logon script and via Registry Preferences through GP but it didn't work!
Method 1: Logon script:
regedit.exe /S \\bbk-files\BBK Templates\slxbasic.reg
The slxbasic.reg contains the following:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\SalesLogix\ADOLogin\Connection1]
"Alias"="BBKSLX_PRODUCTION"
"Provider"="SLXOLEDB.1"
"Initial Catalog"="BBKSLX_PRODUCTION"
"Data Source"="BBK-SLX1"
"DBUser"=""
"Extended Properties"="PORT=1706;LOG=ON"
Method 2: GP Preference:
I add the above mentioned values via the GP Preference for the Registry and still didn't work, I also tried the Registry wizard and imported the required Registry info from another PC and still didn't work.
When I check the GP result for the required PCs, I see that the GP is applied, but when I check the registry, I don't find the required values their!
Please help.

Hi,
>>When I'm processing a GP results report, I'm processing it for a certain PC and a certain user, and I look at the User's applied policies and I can find the policy
there.
How is the issue going? Are we still unable to see the value in the Registry?
>>Users have permissions on the shred drive and can navigate to the location and run the .reg file manually.
After we ran the script manually, did we check the Registry to see if the value had been changed?
Best regards,
Frank Shen

Use Active Directory to Authenticate to OS X Server VPN

I have a Windows 2008r2 Small Business Server that I use primarily but, I have to integrate with services on my Mac Mini OS X Server.
First off, I have all updates loaded and everything runs great between both servers. My OS X server does not have Open Directory running; only services such as FTP, VPN, and File Sharing. I have joined the server to Active Directory and can log into the server as a Active Directory user. I have assigned the rights to even log on with my AD credentials to that server and be an admin. I know that everything is working fine between the 2 servers and I am pretty happy with the way it is working.
My challenge deals with authenticating to these services; specifically VPN, on the OS X server with Active Directory credentials.
When I open the server app, I go to the users section and then, I cahnge it from "local users" to "Users from 'domain.'"
Next, I select the account that I am trying to allow access to the VPN services and select it in the check mark area.
I try to log into the VPN and continually get an authentication error.
I have tried the following combinations for the login:
domain\user.name
domain.local\user.name
user.name
user.name@domain
[email protected]
None of these authentication attempts are successful.
I have successfully authenticated with a local user account that I created on the OS X server and it works flawlessly.
Has anyone ever attempted this? Has anyone ever had any success with this? I have been spinning my tires on this for 3 weeks and have finally given up and have to ask for help.
I appreciate anyone's feedback.

Here is a properly connected client
2013-07-16 22:37:27 EDT          Incoming call... Address given to client = 10.1.1.231
Tue Jul 16 22:37:27 2013 : Directory Services Authentication plugin initialized
Tue Jul 16 22:37:27 2013 : Directory Services Authorization plugin initialized
Tue Jul 16 22:37:27 2013 : L2TP incoming call in progress from '10.1.1.109'...
Tue Jul 16 22:37:27 2013 : L2TP received SCCRQ
Tue Jul 16 22:37:27 2013 : L2TP sent SCCRP
Tue Jul 16 22:37:27 2013 : L2TP received SCCCN
Tue Jul 16 22:37:27 2013 : L2TP received ICRQ
Tue Jul 16 22:37:27 2013 : L2TP sent ICRP
Tue Jul 16 22:37:27 2013 : L2TP received ICCN
Tue Jul 16 22:37:27 2013 : L2TP connection established.
Tue Jul 16 22:37:27 2013 : using link 0
Tue Jul 16 22:37:27 2013 : Using interface ppp0
Tue Jul 16 22:37:27 2013 : Connect: ppp0 <--> socket[34:18]
Tue Jul 16 22:37:27 2013 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x51bcd2b8> <pcomp> <accomp>]
Tue Jul 16 22:37:27 2013 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2a2e6968> <pcomp> <accomp>]
Tue Jul 16 22:37:27 2013 : lcp_reqci: returning CONFACK.
Tue Jul 16 22:37:27 2013 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x2a2e6968> <pcomp> <accomp>]
Tue Jul 16 22:37:27 2013 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x51bcd2b8> <pcomp> <accomp>]
Tue Jul 16 22:37:27 2013 : sent [LCP EchoReq id=0x0 magic=0x51bcd2b8]
Tue Jul 16 22:37:27 2013 : sent [CHAP Challenge id=0x99 <25530231620a2a32144123670735585d>, name = "server1.domain.com"]
Tue Jul 16 22:37:27 2013 : rcvd [LCP EchoReq id=0x0 magic=0x2a2e6968]
Tue Jul 16 22:37:27 2013 : sent [LCP EchoRep id=0x0 magic=0x51bcd2b8]
Tue Jul 16 22:37:27 2013 : rcvd [LCP EchoRep id=0x0 magic=0x2a2e6968]
Tue Jul 16 22:37:27 2013 : rcvd [CHAP Response id=0x99 <e05bcc591f50471f1db5dc92e30eda800000000000000000799cfb93fa3a0b70d15a018b1b1db9 9877e05463f540e54400>, name = "localusername"]
Tue Jul 16 22:37:27 2013 : sent [CHAP Success id=0x99 "S=D079042B80380C3806A1EAE231CAE53074ED1F88 M=Access granted"]
Tue Jul 16 22:37:27 2013 : CHAP peer authentication succeeded for localusername
Tue Jul 16 22:37:27 2013 : DSAccessControl plugin: User 'localusername' authorized for access
Tue Jul 16 22:37:27 2013 : sent [IPCP ConfReq id=0x1 <addr 10.1.1.3>]
Tue Jul 16 22:37:27 2013 : sent [ACSCP ConfReq id=0x1]
Tue Jul 16 22:37:27 2013 : rcvd [IPCP ConfReq id=0x1 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
Tue Jul 16 22:37:27 2013 : ipcp: returning Configure-NAK
Tue Jul 16 22:37:27 2013 : sent [IPCP ConfNak id=0x1 <addr 10.1.1.231> <ms-dns1 10.1.1.2> <ms-dns3 10.1.1.2>]
Tue Jul 16 22:37:27 2013 : rcvd [IPV6CP ConfReq id=0x1 <addr fe80::426c:8fff:fe0c:4d37>]
Tue Jul 16 22:37:27 2013 : Unsupported protocol 0x8057 received
Tue Jul 16 22:37:27 2013 : sent [LCP ProtRej id=0x2 80 57 01 01 00 0e 01 0a 42 6c 8f ff fe 0c 4d 37]
Tue Jul 16 22:37:27 2013 : rcvd [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]
Tue Jul 16 22:37:27 2013 : sent [ACSCP ConfAck id=0x1 <route vers 16777216> <domain vers 16777216>]
Tue Jul 16 22:37:27 2013 : rcvd [IPCP ConfAck id=0x1 <addr 10.1.1.3>]
Tue Jul 16 22:37:27 2013 : rcvd [ACSCP ConfAck id=0x1]
Tue Jul 16 22:37:27 2013 : sent [ACSP data <payload len 15, packet seq 0, CI_DOMAINS, flags: START END REQUIRE-ACK>
    <domain: name mtg.local>]
Tue Jul 16 22:37:27 2013 : sent [ACSP data <payload len 12, packet seq 0, CI_ROUTES, flags: START END REQUIRE-ACK>
    <route: address 10.1.1.1, mask 255.255.255.0, flags: PUBLIC>]
Tue Jul 16 22:37:27 2013 : rcvd [IPCP ConfReq id=0x2 <addr 10.1.1.231> <ms-dns1 10.1.1.2> <ms-dns3 10.1.1.2>]
Tue Jul 16 22:37:27 2013 : ipcp: returning Configure-ACK
Tue Jul 16 22:37:27 2013 : sent [IPCP ConfAck id=0x2 <addr 10.1.1.231> <ms-dns1 10.1.1.2> <ms-dns3 10.1.1.2>]
Tue Jul 16 22:37:27 2013 : ipcp: up
Tue Jul 16 22:37:27 2013 : found interface en0 for proxy arp
Tue Jul 16 22:37:27 2013 : local IP address 10.1.1.3
Tue Jul 16 22:37:27 2013 : remote IP address 10.1.1.231
Tue Jul 16 22:37:27 2013 : l2tp_wait_input: Address added. previous interface setting (name: en0, address: 10.1.1.3), current interface setting (name: ppp0, family: PPP, address: 10.1.1.3, subnet: 255.255.255.0, destination: 10.1.1.231).
Tue Jul 16 22:37:27 2013 : rcvd [ACSP data <payload len 0, packet seq 0, CI_DOMAINS, flags: ACK>]
Tue Jul 16 22:37:27 2013 : rcvd [ACSP data <payload len 0, packet seq 0, CI_ROUTES, flags: ACK>]

Can't connect Windows 8.1 Enperprise to Windows Server 2012 Essentials. Get a Digest Login page and then a Blank with HTTP 404 Error page. Need help!

Hi,
I have make a new and clean install of Windows Server 2012 R2 Essentials on my office network server and then i made a new and clean install of Windows 8.1 Enterprise version on one of my office desktops.
After all VPN and Anywhere Access where setup on the server i when to a PC that is inside my office network and browse on Internet Explorer to the URL to connect this PC to the server and make it part of the domain.
But when i browse to the http://MYSERVERNAME/connect im not getting the Windows Server page with the option to download the windows connector. Instead i get a login pop-up saying "iexplore" and "digest". I try to create a user on the server
and use that user login details on this login box, but even then, the only thing i get is a blank page saying a HTTP Error 404.
So can someone please help me on this? Any advice on how to solve this problem in order to show the normal Windows Server connect page?
Thanks

Hi,
Based on your description, please refer to following operations and troubleshoot this issue. Then check if
can help us to narrow down the cause of this issue.
Please type
http://server-IP-address/connect in IE. Then check if encounter the same issue.
On the Windows Server 2012 R2 Essentials, please open Internet Information Services (IIS) Manager. Navigate to Sites, then right click Default Web Site and select
Edit Bindings… In Site Bindings, select Port 80 and click “Edit…” button. Would you please provide a screenshot of the Edit Site Binding (Port 80) that you can see?
Then please click
Connect which in the list of Default Web Site. In the mid panel, select
.NET Authorization Rules and double click it. Then please check if all users were allowed.
By the way, would you please provide a screenshot of the login page when you browser
http://servername/connect? It may help me to understand this issue clearly.
Meanwhile, please logon a problematic client computer and navigate to the path: C:\ProgramData\Microsoft\Windows
Server\Logs folder. Then check if there is Computerconnector log file. If there is, please check it if can find some clues. (Please note: the log file is a hidden file. Please open Control Panel, select Folder Options, select View tab and check Show hidden
files, folders and drives. Then you will be able to find the log file.)
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

How to manage Active directory and tools to manage Active Directory

How to manage Active directory and which tools we use?

You can use Microsoft Active Directory management tools:
http://technet.microsoft.com/en-us/library/aa998508(EXCHG.65).aspx
http://technet.microsoft.com/en-us/library/aa998508(EXCHG.65).aspx
erview of Server Message Block signing
http://support.microsoft.com/kb/887429/en-us
Remote Server Administration Tools for Windows 7:
http://www.microsoft.com/downloads/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d&displaylang=en
AD Admin Center:
http://technet.microsoft.com/en-us/library/dd560651(WS.10).aspx
http://technet.microsoft.com/en-us/library/dd560652(WS.10).aspx
Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX http://blogs.sivarajan.com/ http://publications.sivarajan.com/ This posting is provided "AS IS" with no warranties, and confers no rights.

How to map active directory and wordpress ?

i want to import my existing wordpress users in Active Directory but status is not changed.
This topic first appeared in the Spiceworks Community

1) I want to Import wordpress user in active Directory
2) so,I install one plugin like "Active Directory Integrate".
3) I configure this plugin and import users in Active Directory
4) I want to Enable user in Active directory and importing in Active Direcoty.
help me

How to make clone of active directory security group

Hi
i am having one Security group in AD, i want to make copy or clone of that group with same members in different name in AD.
Anybody help me out...

Hi Vino1985,
Just do it with ds-tools.
dsquery group -samid %SamidOfYourReferenceGroup% | dsget group -members | dsmod group %distinguishedNameOfYourNewGroup% -addmbr -c
This should work as
"dsquery group -samid " will return the distinguished name of your reference group and pipe it to dsget group
"dsget group -members" will return all distinguished-names of the members and pipe it to dsmod group
"dsmod group -addmbr" will all DN's to the membership-attribute of the new group the switch "-c" will continue on errors.
best regards
Switch
MCITP Enterprise Administrator
MCSA Windows Server 2012
MCTS Windows 7 Configuration
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

How to install first forest and active directory on the windows server 2012 R2 core?

hi to all
i installed a windows server 2012 R2 Core edition on the server platform and i want install first forest and Domain on this server core by cmdlet...but i cannot install it. i search in the technet and other sites and blogs on the internet
and i saw many commands that use for install it such as "DCpromo /unattend" and even
"Install-addsforest" in the powershell but still i cannot get a result from these commands.
i need step-by-step guide that help me for install new forest and domain in the server 2012 R2 core.
thanks a lot friends

C:\PS>Install-ADDSForest
-DomainName mydomain.local -CreateDNSDelegation
-DomainMode Win2012 -ForestMode Win2008R2
-DatabasePath "d:\NTDS"
-SysvolPath "d:\SYSVOL"
-LogPath "e:\Logs"
you can use above example
Darshana Jayathilake

How do I setup Active Directory and Group Policy on Windows Server 2012?

Similar Messages

Maybe you are looking for