Questions tagged [aws-directory-service]

The AWS Directory Service enables users to access AWS resources from on-premise or cloud-based Active Directory domains.

The AWS Directory Service enables users to access AWS resources from on-premise or cloud-based Active Directory domains.

Resources

41 questions
13
votes
1 answer

Moving on-prem AD to AWS

I am moving my local AD domain to AWS and I am not sure the best way to do it. Scenario: I have 2 on-prem domains (.local and .net). I am retiring one of them and moving to the other. Both are considered production as they are both actively used.…
7
votes
1 answer

Joining a server to AD via AWS cloudformation

I want to use cloudformation to automatically join new instances to AD. When I googled this it looks like many people just use scripts in there cloudformation templates and pass in credentials- I don't want to do that. This article shows how this is…
4
votes
2 answers

On premise AD migration to AWS Managed Microsoft AD

I have a small on premise AD environment comprising two Windows Server 2012 domain controllers. They run AD, DNS, DHCP, GP etc. I want to migrate this to the AWS Managed Microsoft AD. All the articles I have read suggest that the two AD environments…
4
votes
2 answers

AWS Simple AD: "KDC has no support for encryption type" for users created with adtool, but not with MS Management Console

Background I am trying to log in (via SSH, to an Amazon Linux EC2 instance running sssd) as users that I've created in my AWS Directory Services Simple AD. I am authenticating with kerberos and identifying the user with LDAP (all through…
2rs2ts
  • 325
  • 3
  • 11
4
votes
1 answer

Connecting AWS AD to Azure AD

We are looking in starting to use AD in our office, the setup would be: On premise AD server for work stations Azure AD to support Office 365 AWS AD to support AD on our servers Connecting on premise to Azure is fine, but is there a way to connect…
4
votes
2 answers

How can I retrieve a domain computer's details from AWS Directory Service?

I know using the AD module for powershell that we can retrieve domain computers details and export them as csv. My domain is in AWS Directory Service, and I have a computer under this domain. I tried Get-ADComputer, but it shows this…
3
votes
1 answer

Export my whole AWS architecture into file?

In AWS, I have a VPC with many components inside, including subnets, security groups, gateways, load balancers, target groups, many instances, and others. Is there any ways to export my whole architecture and components into a file, sayXML or…
3
votes
1 answer

Why doesn't my conditional forwarder work?

So, I have two AWS-based environments that are largely separated, but are connected via an intermediary VPC that hosts a VPN server, and has routing into each of the individual environments. Let's call these "A", "B" and "Management" VPCs. "A" and…
3
votes
3 answers

Why is the user@domain and cn=user,dc=domain not equivalent?

I've setup a Simple AD on AWS that I can finally authenticate against with LDAP. I don't understand why I was unable to use dc= which is widely suggested everywhere but am able to use @domain. ldap_bind($ldapconn,…
Kit Sunde
  • 946
  • 3
  • 12
  • 31
2
votes
1 answer

My Amazon Directory Service DC is failing certain DNS requests

I have a small, Simple Active Directory domain set up in AWS using their Directory Service. It's been running fine for a year now. However, this morning, certain DNS queries that run through the domain fail mysteriously. C:\>nslookup…
2
votes
1 answer

Preserving AD Configuration (User/Groups/OUs) After Uninstalling "Active Directory Domain Services" Role

I have somewhat of a unique challenge, I'm trying to migrate a old legacy server from a locally installed version of Active Directory Domain Service to a centrally managed AWS Directory Service. As part of this migration I will be replicating the…
1
vote
1 answer

Centos 7 joined to AWS simple ad but can't query users

For the love of all that is holy - been at this for a solid 12 hours straight. I've added my centos machine to my simple AD service in AWS. Following the steps outlined here…
Sim
  • 111
  • 4
1
vote
1 answer

Is it possible to choose which objects get synchronized in AWS Managed AD?

In Azure AD Connect Sync, it is possible to configure filtering. This is described as: By using filtering, you can control which objects appear in Azure Active Directory (Azure AD) from your on-premises directory. The default configuration takes…
1
vote
0 answers

Unable to delete fresh AWS Directory Service instance (MS Active Directory)

I created an AWS-hosted MS Active Directory instance for testing but never actually used it. I've been trying, repeatedly, to delete it but been blocked since "it still has authorized applications". Only problem is I never did anything with this…
bgiles
  • 111
  • 1
1
vote
1 answer

AWS S3 and Route 53: www redirect does not work

I have hosted my static website on AWS S3, like in, http://example.net I have configured two S3 buckets, one for http://example.net, and another one for http://www.example.net, whose 'Static web hosting' has been setup to redirect to…
1
2 3