Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

0
votes
2answers
28 views

Problems joining to Active Directory

I am having difficulty connecting my laptop to my domain. I have recently set up a domain controller in my flat but, when I try and connect to it using my machine, it says "An attempt to resolve the ...
0
votes
1answer
12 views

Samba 4 - The server is not operational error message

I just went through the Samba 4 setup guide, with no prior domain. I'm using the Internal DNS Server offered by the Samba 4 package. I can connect to see shared folders, and access most features in ...
0
votes
0answers
14 views

How can I automatically import a certificate to a Windows GPO?

I'm looking for a way to import a root certificate into a specific active directory group policy object. I've tried certutil -dspublish but that would only publish it to a global AD store. How can I ...
0
votes
0answers
8 views

Printing Permissions for Guest Users

I have a Windows Active Directory Domain Network that has a print server with 3 printers attached to it. I do not want users to print from computers or devices that are not joined to the active ...
0
votes
0answers
23 views

How to prevent Windows (8/8.1/10) to assume the user want to use the local account on domain joined machine [on hold]

I was wondering if anyone have a solution for this : On a domain joined machine, Windows will assume that any username typed is a domain account except if that same exact user name exist as a local ...
0
votes
1answer
23 views

Which user execute a GPO which is granted to unpriviledged user?

When a unprivileged user (or a machine account) of a AD DS domain is granted to execute a GPO. Which user actually execute it for him? Is it possible to choose the user which execute the GPO, ...
-1
votes
0answers
11 views

Need help locating DC in location

I created a DC and joined a server to that domain. I created a service account in AD, and now I am trying to install an application on that server and use that service account, but I received an ...
0
votes
0answers
21 views

Prevent Office 365 from requesting phone number

I've been using Office 365 (federated against my domain) for several months.  Recently when I login to http://portal.office.com, the site complains I need to Add information to your account so you ...
0
votes
1answer
13 views

When using Agentless Exception Monitoring, do all clients/hosts have to be on the same domain?

I recently set up Agentless Exception Monitoring (AEM) in System Center Operations Manager 2012 R2 (SCOM). It works well when the client is joined to the same domain as the management server -- but ...
-1
votes
0answers
17 views

Can't display user info on computer in Active Directory

I have setup some computers in Active Directory. I now want to add first name, last name and user logon name to it so I can faster manage them. I tried adding the specific user when right click and ...
1
vote
1answer
15 views

Samba 4 Domain controller: authentication from windows client stopped working

I've set up a samba 4 domain controller, we have four Windows 7/8 clients in the domain. This setup worked for the past 6 months. Recently, I've not been able to log in with my credentials from two ...
0
votes
0answers
15 views

Can one decrease the netlogon timeout below 15 seconds (negative ExpectedDialupDelay)?

If I am outside my domain any user login or elevation will have a 15 sec delay because an "AD Ping" or rootDSE query is done using the CLDAP protocol. The server won't answer because (though ...
1
vote
0answers
16 views

Samba AD user with same name as local user

I just started using Samba as a domain controller at home. I have set up so that users who log on to the server have users and home folders created if it's the first time etc. I have one issue ...
1
vote
0answers
13 views

Can I load Powershell AD Module as another user?

I have a script that I use to automate AD and Office 365 account provisioning. Everything is working just fine. The only "problem" is that I have a regular domain account and another account which is ...
0
votes
0answers
9 views

Ubuntu Network > Cross device authentication > Single Login Registration

My firm runs an Ubuntu based developer environment. Recently due to the increase of new interns in our firm the firm asked me to setup a machine independent authentication system such that the users ...
1
vote
0answers
10 views

LDAP custom attribute cannot be searched?

I have some special custom attributes with my ldap setup. I have a custom attribute called "GroupCode". I have bunch of entries with this special attribute that I was able to write to the ldap ...
0
votes
0answers
5 views

Unable to remove 2003 DC from domain environment [migrated]

I'm testing the upgrade of our a domain environment from 2003 to 2012; Our environment consists of one DC (currently 2003 but will be upgraded to 2012 with this exercise). I've transferred all FSMO ...
0
votes
1answer
41 views

Batch file to get the domain name of hundreds of servers in a multi domain environment

In a multi-domain environment, I need to get the "Domain Name" the servers are joined to. I have a list of hundreds of Windows servers with the hostname only (not FQDN). I was wondering if there is ...
0
votes
1answer
16 views

Domain user does not have local rights

The domain controller is running windows server 2003. The workstation in question has a fresh install of windows 7, with only a local administrator account. The workstation is joined to the domain. I ...
1
vote
1answer
32 views

NTFS - Allow only one user

Is it possible to use NTFS to only allow one specific user to a resource? I have a shared folder, where I will put user home directories, which allows the "Domain Users" group full access. I have a ...
0
votes
1answer
44 views

Active Directory: How do I specify an objectGUID when I create a new entry?

I'm trying to create entries in AD where I know their objectGUIDs up front. AD replies WILL_NOT_PERFORM. Is there an LDAP control or something I can issue that will force it to comply? Here's the ...
0
votes
0answers
19 views

Manage USB Bitlocker Keys through Windows Domain

I have read though many articles including this to figure out how to manage recovery keys for USB drives in a Domain. However this article is mainly detailing how to recover domain attached PC drives ...
0
votes
0answers
14 views

Apache Directory fid= ,sid= ,c= ,o= like objects in Windows Active Directory

I have a Apache Directory service with tree DN like, DN: fid=X,sid=Y,ou=Systems,dc=Z,dc=com OR ou=HeadOffice,c=1,ou=2,o=3,ou=Organizations,dc=Z,dc=com but I cant find any options to replace the ...
0
votes
1answer
31 views

How to convert regular windows 10 account to an active directory account?

I run a Windows 10 Enterprise computer, which I used before I (setup and) joined a domain. Now that I have joined the computer to a domain, I want to use my domain account on my computer but still ...
0
votes
0answers
31 views

Ethernet not working, wireless is

Since I put my computer on my domain at home (AD/DS) and set the security of my wireless access point to RADIUS with NPS, I started experiencing issues. When my laptop is connected via WLAN, it works ...
1
vote
1answer
30 views

DSQuery get lastlogon date in active directory

I need the lastlogon field of my domain computers exported. I used this command: dsquery * domainroot -filter "(&(objectCategory=Computer)( objectClass=User))" -attr distinguishedName ...
3
votes
0answers
118 views

WMI query fails with “A security package specific error occurred.” Exception 80070721

Problem In Powershell after executing the following command ... Get-WmiObject Win32_ComputerSystem -Credential second.nl\administrator -ComputerName srv02.second.nl ... the following exception is ...
0
votes
0answers
11 views

Where is the AD Bitlocker Recovery info found in Excel using Power Query?

I was wondering where do I find the Bitlocker Recovery information in Excel/Power Query if it's stored in Active Directory? That is to say, what is the name and data type of the field, and what do I ...
0
votes
1answer
33 views

Can I query a different AD domain with the default Win7 install? [duplicate]

Background I work in an Enterprise where our Active Directory is locked down pretty tight and only Info Security has access to administer changes. I'm using a standard Win7 Enterprise x64 Service ...
0
votes
0answers
53 views

Zookeeper vs MS ActiveDirectory or LDAP

I'm currently looking for a good configuration storage, which is quite easy to integrate and maintain. As far as I see, Zookeeper is the most suitable one for Java applications. (It has a very ...
0
votes
0answers
35 views

Error with HTA reading pwdLastSet AD attribute

We have an AD domain that is at 2008 R2 levels. I have written a HTA which I use by right-clicking on a user from within AD Users & Computers and then selecting the HTA from the context menu that ...
0
votes
1answer
51 views

Stale Computer Accounts - Active Directory

Deleted versus Disabled: I recently did a scan and found over 300 computer accounts which had not checked in to the domain for the past year or more. dsquery computer -inactive 52 -limit 0 I then ...
0
votes
0answers
21 views

log on to permission not persisting for AD domain users

I'm an active directory novice who's been thrown into the deep end helping out in an all windows environment. I'm sure there's a simple answer to this, but it has me baffled: I just don't know where ...
-1
votes
1answer
29 views

BitLocker and Active Directory

I routinely bring in my encrypted file drive to work, but the IT department seems rather incompetent here. The security policies are very lax, and I'm paranoid about the domain controller being hacked ...
0
votes
0answers
61 views

Clients have problems sending DNS requests

Some of my clients can't use internal DNS server to resolve internal addresses. All IP addresses can be pinged, but I can't ping name or name.domain.com. Restart DNS client service or ipconfig ...
1
vote
0answers
22 views

Windows server still reboot after recover active directory folders

My Problem: Windows server is not starting up and restart when shows the win logo. After that, i reinstall windows, reoconfigured again and execute this steps: Perform a fresh installation of ...
1
vote
0answers
74 views

samba4 acl for allowing group access to files created by a user

I've just setup samba4 as an Active Directory domain controller. (samba v4.3.0, installed on ubuntu x64) It's used in a small accounting office. The office has a number of file shares. I've given ...
2
votes
1answer
36 views

Adding a computer to a server's domain (in windows)

So I have a server and a computer. Server's hostname:(for this example) Name1 On the computer in cmd I do: /netdom join Name1 /domain:W2K8AD1Name1.local and it gives me this error: The network ...
0
votes
1answer
36 views

dns domains, active directory domains and domain controller

I know these are big topics but i am just several questions i wish to clarify. q1) are dns internet domains and active directory domains referring to the same thing or are related ? Reason for ...
0
votes
0answers
40 views

Service account being used on a specific computer

We're using Active Directory at our company and is there a way to get the service account used by checking on the computer? I don't really know which service account being used so is there a way for ...
0
votes
0answers
120 views

Figure out what is locking my AD account

Some process on my machine is locking out my active directory account due to it using the old password. I've searched all the normal things (services, IIS app pool, RDP sessions, credential vault) and ...
1
vote
1answer
514 views

'net ads join -U username' failing with an error 'NT_STATUS_IO_TIMEOUT'

I am attempting to provide access to Ubuntu shared directories using Active Directory users and group using Samba. I am following this article to install and configure AD and Unix so that access can ...
0
votes
0answers
4 views

Automatically create Azure ADs using a list of usernames

I have a huge list of usernames to which I need to create Azure ADs, is there a way I can do this automatically instead of doing them one by one?
0
votes
1answer
120 views

file locked on shared drive by user who no longer exists

I'm really banging my head against the wall with investigating this issue, we have a shared drive with a number of documents, one such document was created in 2015 and User1 attempted to access this ...
1
vote
1answer
697 views

How do I add Azure Active Directory User to Local Administrators Group

With Windows 10 you can join an organisation (=Azure Active Directory) and login with your cloud credentials. Based on the information provided here the first account per computer that joins the ...
0
votes
0answers
33 views

Windows Server DNS Configuration on Multiple Controllers and Zone Transfer

Let's assume I have two domain controllers running Windows Server 2012 in different subnets. As far as I know that version of Windows Server assume them as two masters with equal rights, so any change ...
0
votes
0answers
11 views

Active directory administrator access

Allowing hard drive C sharing is a very risky and dangerous practise How to stop administrator from accessing the shared drive $C of other users ?
1
vote
1answer
41 views

Connecting to MS SQLServer from a Linux box

I am trying to connect to MS SQLServer from an application that I have written (using Qt) which runs on Linux. Here are some details of the setup: The SQLServer box (SQLBox) is part of my domain ...
1
vote
1answer
56 views

Remote access users with passwords with active directory

We are changing our active directory policy for our users to finally have passwords. Which is good because they don't have any passwords yet. But with passwords there arises a problem with remote ...
0
votes
1answer
192 views

What characters are valid for Active Directory groups?

My software program is going to auto-generate Active Directory group names. We need to know which characters aren't allowed in an AD Group name (i.e. /, \, [, \, |, etc.). I found this link from ...