Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

0
votes
0answers
6 views

AD Account with NOPWD_REQ

I found some AD accounts with the flag NOPWD_REQ. Does this mean these users can just authenticate by typing in their username without their password?
0
votes
1answer
9 views

Win2K8R2 dcpromo DSRM Password causes critical failure

I have a Win2K8R2 domain controller on an ESXi host. I have a second ESXi host on which I have created a new Win2K8R2 Server to be a secondary domain controller. The second server was added to the ...
0
votes
1answer
9 views

Dir command not working on one UNC Share

We have a process that runs in SQL Server which executes a DIR command on the local network using a UNC path to check that the files generated by another system are all there, as part of an audit ...
0
votes
0answers
6 views

How to get Microsoft license authentication for all machines on a network? [migrated]

We have a small network (~150 desktops, ~20 servers) much of which is Linux. MS keeps wanting to audit our MS products every 3 years or so. I really don't have time to go around to 80-90 desktops and ...
-1
votes
0answers
23 views

How is it possible to set password policy on user level when AD password policy is in place?

I need to check password security settings for AD users and SQL Server users. So, as AD is in place, I simply obtained the AD Password Policy: Here we see that the maximum password age is 42 days. ...
0
votes
0answers
23 views

Windows Server Active Directory API [migrated]

I need to develop a web application that must show a user's directory in Windows Server Active Directory. Does Windows Server Active Directory have some API that I can call to retrive those ...
1
vote
2answers
17 views

Can't change network password from command line

I have a previous question relating to how one can change a password of the 'bottom' client when recursively logged in to multiple RDP clients: Change Windows password when in multiple RDP One ...
1
vote
1answer
26 views

Is it possible to get the date of a user's last login to AD if the user was deleted?

After STTR's very good explanations on how to get the dates of last login of existing (including disabled) AD users and how to retrieve the list of deleted users, One question remains. Provided that ...
1
vote
1answer
33 views

What is the default logs storage time in AD domain controller server?

I do not have this with me to check, as I am not OS administrator. I suppose there is some default time set in Active Directory (AD) for logs storage. I am particularly interested in logs for user ...
0
votes
1answer
24 views

“Ghost folders” showing up in Windows share

I have an Active Directory domain setup with Samba 4.2. This domain uses roaming profiles for all users, which are stored on a "Profiles" share on the Samba server. Furthermore, it uses folder ...
0
votes
0answers
11 views

Desktop Management with Active Directory

I've been doing some reading on Active Directory Domain Services and i find it really interesting. My question is this: Say i have ADDS installed on my Windows Server 2012 OS (or 2008), is it ...
1
vote
0answers
21 views

Risk behind weak password policy [closed]

I have a bit an unusual setup: I am a bank with systems, that are not accessible from outside (no direct internet access). To get access to those systems, you first have to physically enter the banks ...
1
vote
2answers
28 views

Why I can't see the users that I have created

I have created 4 users on Active Directory Users and Computer: But I can't see the users on my computer management under "local users and groups" nor on my sql server! So, why I does not have "local ...
1
vote
2answers
18 views

Risk involved on installing WDS on Domain Controller

Is there any Risk involved, if we install WDS on Domain Controller ( Windows Server 2008 R2) Thanks & Regards, Param
0
votes
1answer
30 views

Powershell - select and update an attribute “on the fly”

I am trying to look for AD users who have an null attribute ("terminalservicesprofilepath") and to update this attribute in the same command. I can select the users, but how to update the attribute ...
0
votes
0answers
20 views

What data is needed to connect an AC server? Is there any particular format?

I'm trying to create a simple active directory instance for testing. Firstly, I turned on 'Active Directory Lightweight Directory Services" feature (my os is Win8.1). Then using "Active Directory ...
0
votes
0answers
26 views

OS X Script to delete all non admins with launchd or logout script

I've found a number of articles that touch on this subject but they are not running for me or perhaps because they are years old they do not work OS X 10.10 Yosemite. In short we run Deep Freeze but ...
0
votes
1answer
36 views

Domain authentication without joining the domain

I am DBA in an Active Directory environment. I often work from home using my private PC (I connect via VPN). My private PC is not joined to the Active Directory domain. Is it possible to use domain ...
0
votes
1answer
27 views

Point a Windows Server to one specific AD Server?

It is possible to point a server/client to one specific AD Server? Is a host entry the solution? Environment: domain.local running on Server A and B Edit This is my problem:
0
votes
1answer
89 views

How to get user last logon date on a specific server?

Need to export a table with user names (samAcountNames) along with their last logon date\time on to specific server on network (who is a member of a domain). According to google search, i can do it ...
0
votes
0answers
42 views

Active Directory - Export an OU and sub objects

I would like to export a container and everything it contains with ldifde tool. How can I do that, especially if the container is in Namin Context : Configuration ? I want to export and then import ...
0
votes
0answers
32 views

How to know if a company uses User Logon Name Pre-windows 2000 (SamAccount) or the new User Logon name , to authenticate their users

If users login to their windows machines by entering the following on the Windows login screen: Domainname\username Password Does this mean that the company uses the User Logon Name format ...
1
vote
0answers
73 views

Excel VBA that calls Powershell ActiveDirectory cmdlet, but Module won't load?

I have a powershell script I use to dump user and computer lists to csv files; it works great and I don't want to touch it much. It uses the ActiveDirectory cmdlet, and the Get-ADComputer and ...
2
votes
2answers
37 views

Temporary Password for Domain Admin

A small non-profit company handling confidential information must grant remote domain admin access to their external IT services provider who manages the entire network, including new PCs, etc... ...
1
vote
1answer
65 views

Can't Use Powershell Active Directory Cmdlets Even With RSAT Installed

A while back I wrote a simple .ps1 that let me look up the name of a user or the hostname of a computer and tell me which OU of my AD it resided in. I don't recall having any difficulty running the ...
0
votes
0answers
136 views

How to set the correct Samba chmod permissions for shared folders in ext4 file system?

I am build another Samba server as an Active Directory Domain Controller to replace an old and buggy one. Every night I rsync the old one with the new one. Now I am only changing the shares names in ...
0
votes
0answers
39 views

Smart card setup - Gemalto Cryptoflex 64K V2c

I have recently acquired a few Gemalto Cryptoflexes (as above) and I'm trying to get them to work for smart card login. The card has a minidriver which is ActivIdentity Mini Driver (Gemalto ...
0
votes
1answer
138 views

Likewise open aka powerbroker open, dns error when joining domain

When joining the domain using powerbroker open on a machine which is a bind dns server, i'm running into an issue. I'm not totally sure what powerbroker is trying to do at this point exactly ...
1
vote
1answer
29 views

Trouble with certificate checking on a closed network

I'm managing a Active Directory domain with about a hundred Windows 7 clients running IE9. The network does not have access to the Internet, but do have the ability to access a vendor web application. ...
0
votes
0answers
29 views

cannot login with with ad credentials

I cannot login on my laptop with my AD account, only with my smart card. This happened only after I changed my AD account password. If i lock my laptop while I'm logged with my smart card, I can ...
0
votes
0answers
50 views

Active Directory: global security group

In Active Directory (Win Server 2008 SP1) we have several global security groups (representing different departments) defined under the same path. They all have EMail addresses assigned to them and ...
0
votes
1answer
464 views

How to add Active Directory module in PowerShell in Windows 8?

I use Windows 8.1 and I try use Import-Module ActiveDirectory, but I get the following error: PS C:\Windows\system32> Import-Module ActiveDirectory Import-Module : No se cargó el módulo ...
0
votes
0answers
9 views

Issues With Nested PDLs in Outlook

I am looking to create a new Outlook PDL in my company's directory, and this PDL would have nested PDLs inside it. Are there any potential issues / bugs with using this approach? I've been warned to ...
0
votes
1answer
108 views

Restrict Active Directory user by IP Address or Machine Name

I am needing to create a Windows Active Directory account for use with a Microsoft Dynamics CRM system to a set of SQL Server 2008 R2 servers. This user is requiring elevated privileges in my SQL ...
0
votes
0answers
21 views

apache 2.0 ldap configuration to search subtree in Active Directory

Right now ldap is searching for a user in specified organizational unit (OU) in Active Directory (e.g. cn=apld,ou=Users,ou=_bbb). I need to find a way how to search for ldap user in all sub-OUs of a ...
0
votes
1answer
55 views

List of setspn service classes and their meanings

I am trying to set up my Java tomcat service to be authenticated using Kerberos (Negotiate SSO) in MS AD. For this it is necessary to create SPN. In the documentation of setspn on ...
0
votes
1answer
184 views

Removing DHCP and DNS from Windows AD Domain

This is my first time posting here, so please bear with me. I have been searching for this answer for a few days now with no luck. Maybe my google-fu is not strong enough. I am a software engineer ...
0
votes
0answers
13 views

Is there a way to know what version of Exchange a users mailbox is on

In Active Directory there is a property against a user called "homeMDB" That will give me the users exchange database, but is there a way to know if the user is on exchange 2013 through Active ...
0
votes
1answer
48 views

Load thumbnail photos of Active Directory users as a domain user (not controller) to Outlook

Is it possible, as a user in a domain (without administrative rights), to add thumbnail photos of my co-workers so they'll appear in the thumbnail photo cube in Outlook?
0
votes
0answers
58 views

How to change samba user SID?

I'm trying to change the SID of various user in Samba 4.1.14 using pdbedit pdbedit --user <username> SID=<SID> I run the command but no message is displayed nor the SID is changed. How ...
0
votes
0answers
37 views

Which Active Directory fields are displayed for iPhone contacts?

When connecting iPhones to Exchange servers, the menu Groups > Exchange global address list gives access to other users on the Exchange server. My question is which Active Directory attributes are ...
1
vote
1answer
94 views

'net user <username> <password> /domain' seems to momentarily allow multiple good passwords

So, let me preface this question by saying that I am not a domain administration expert. I'm a programmer who writes custom applications for the web. My company wants to add a password reset feature ...
1
vote
1answer
74 views

Does Windows active directory sync data from user's profile?

Does Windows active directory sync data from user's profile? I mean Desktop, Downloads, outlook or whatever in the profile. I want my windows client's outlook data to automatically sync to my windows ...
0
votes
2answers
259 views

Connecting two domain controllers in Active Directory Server 2012

I want to setup virtual test enviroment at home using windows server 2012 r2. What I did so far: Installed two virtual boxes of win server 2012. Promoted both to Domain Controllers, installed AD DS, ...
0
votes
0answers
29 views

external domain controller for multiple LAN merging

my home network consists of two pcs and one laptop all behind one DSL Router. Simple Question: Is it possible to set up a Windows Domain Controller on a V-Server (hosted in the Internet) in such way ...
0
votes
3answers
381 views

Active Directory Force Logoff After 8 Hours

We are a 24/7 company and we have an active directory network of approximately 80 workstations. Our employees do not seem to be logging off when they leave their shift and others are using their ...
0
votes
0answers
23 views

How do I regain connectivity to a Windows Server after calling Powershell cmdlet Remove-NetFirewallRule?

I have some servers on AWS cloud. I accidentally invoked the PowerShell command Remove-NetFirewallRule and this has completely locked me out of the server. The server is joined to a domain. I have ...
0
votes
0answers
35 views

When an Active Directory User Logs in to Local Windows 2012 Server Launch a Virtual Machine; Possible?

I won't get into the reasons why this needs to happen, however, is this possible. I have a Windows Server 2012 R2 box that needs to be used as a daily driver for a few of a clients employees. Ideal ...
0
votes
1answer
23 views

Prevent windows computers from remembering last account with group policy

I have computers joined to an active directory domain. My users have roaming profiles because they will be using different computers in the office. Currently the computers will default the username to ...
0
votes
0answers
15 views

Domains and shares(Share a DVD-ROM drive?)

As a part of my college studies, I configured an AD DS for me to put around and enjoy while my review license lasts. My wife had recently purchased a laptop with out a DVD-ROM and with a puny 32 GB ...