Known issues with Active Directory at IU

Following is continually updated information about the status of known issues with Active Directory at Indiana University.

Issue Description Status Last updated
Older versions of Active Directory User and Computer (ADUC) will display the wrong server version.
Older ADUC clients (Windows 7 and Server 2008 R2) will display the 2012 domain controller as "Windows 2000.??". New versions of the Remote Server Administration Tools might be available for older operating systems.
No fix is needed. April 5, 2013

Kerberos on Windows 2012 domain controllers could cause authentication issues with network attached storage (NAS) devices.

When accessing file shares hosted on NAS devices after deploying Windows Server 2012 domain controllers, you may observe the following symptoms:

  • Connections to mapped network drives using the format \\servername\sharename\subfolder fail with "Access Denied".
  • Connecting to the same path by using the IP address will always work.

This problem occurs under the following conditions:

  • Kerberos is used to authenticate the user's session to the NAS device.
  • The Kerberos ticket used in the session setup was issued by a KDC running Windows Server 2012.
  • The NAS device does not understand Resource SID Compression, which is a new feature for Kerberos in Windows Server 2012.
April 5, 2013

This is document bdel in the Knowledge Base.
Last modified on 2018-11-07 12:29:34.

Contact us

For help or to comment, email the UITS Support Center.