Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

1
vote
1answer
20 views

How can I automatically import a certificate to a Windows GPO?

I'm looking for a way to import a root certificate into a specific active directory group policy object. I've tried certutil -dspublish but that would only publish it to a global AD store. How can I ...
-3
votes
0answers
18 views

Server Won't Join my Domain Controller [duplicate]

So my server won't join my Domain... I'm fairly sure this is because of issues with my wired D-Link router... as my virtualized Windows 7 machines can join with no issues. Error: Note: This ...
-1
votes
0answers
27 views

Server Can't Join Domain Controller

So my server won't join my Domain... I'm fairly sure this is because of issues with my wired D-Link router... as my virtualized Windows 7 machines can join with no issues. Error: Note: This ...
1
vote
1answer
5 views

Omit domain part from username using realmd

I'm experimenting with joining my Linux machine to an AD domain, using realmd. Everything went very well (after enabling automatic home directory creation). Now I can login as jreinhart@domain.com ...
0
votes
0answers
16 views

Samba 4 Active Directory in Slackware 14.1

While trying to setup Samba 4 Active Directory in Slackware 14.1 32 bits I did (just after a fresh install): # samba-tool domain provision --use-rfc2307 --use-xattrs=yes --interactive Realm: ...
0
votes
0answers
4 views

LDAPS with openssl

I have generated ssl certificated on my Linux machine with openssl, how can I enable Secure LDAP on Windows AD with that certificates? I do not want to use Microsoft's tools to generate new ...
0
votes
2answers
25 views

home and vmware lab on same subnet (AD)

I have a question about network topology. Namely, I wanted to set up a cluster vmware for testing SQL Server: fail over, always-on etc ... But I do not know how to reconcile this with your home ...
1
vote
1answer
532 views

'net ads join -U username' failing with an error 'NT_STATUS_IO_TIMEOUT'

I am attempting to provide access to Ubuntu shared directories using Active Directory users and group using Samba. I am following this article to install and configure AD and Unix so that access can ...
0
votes
2answers
36 views

Problems joining to Active Directory

I am having difficulty connecting my laptop to my domain. I have recently set up a domain controller in my flat but, when I try and connect to it using my machine, it says "An attempt to resolve the ...
1
vote
1answer
40 views

dns domains, active directory domains and domain controller

I know these are big topics but i am just several questions i wish to clarify. q1) are dns internet domains and active directory domains referring to the same thing or are related ? Reason for ...
0
votes
1answer
13 views

Samba 4 - The server is not operational error message

I just went through the Samba 4 setup guide, with no prior domain. I'm using the Internal DNS Server offered by the Samba 4 package. I can connect to see shared folders, and access most features in ...
5
votes
1answer
13k views

Enable SMB file sharing on OS X - “Incorrect Password”

I have a Mac running Snow Leopard connected to an Active Directory domain. I can share folders on the Mac and view files from Windows without problems. When I try to enable my Mac account for write ...
0
votes
1answer
3k views

Re-add computer to domain without local admin

I have this problem that I can't get a Windows 7 computer to re-join a domain. I have no local account enabled on the machine, so I'm trying to re-add it from the domain controller. I add the computer ...
3
votes
1answer
8k views

Mac OS X 10.8 not binding to Windows domain

I have five iMacs with OSX 10.8.5. Two of the iMacs are binding to Windows domain server (2012) successfully. But I can’t bind remaining three iMac machines, and it is showing authentication error ...
0
votes
0answers
8 views

Printing Permissions for Guest Users

I have a Windows Active Directory Domain Network that has a print server with 3 printers attached to it. I do not want users to print from computers or devices that are not joined to the active ...
2
votes
1answer
4k views

Use Office 365 account to login to Windows 10

Windows 10 has a new feature where you should be able to use our Office 365 Active Directory account to login. This is the feature: ...
0
votes
0answers
24 views

How to prevent Windows (8/8.1/10) to assume the user want to use the local account on domain joined machine [closed]

I was wondering if anyone have a solution for this : On a domain joined machine, Windows will assume that any username typed is a domain account except if that same exact user name exist as a local ...
0
votes
1answer
23 views

Which user execute a GPO which is granted to unpriviledged user?

When a unprivileged user (or a machine account) of a AD DS domain is granted to execute a GPO. Which user actually execute it for him? Is it possible to choose the user which execute the GPO, ...
0
votes
1answer
13 views

When using Agentless Exception Monitoring, do all clients/hosts have to be on the same domain?

I recently set up Agentless Exception Monitoring (AEM) in System Center Operations Manager 2012 R2 (SCOM). It works well when the client is joined to the same domain as the management server -- but ...
-1
votes
0answers
11 views

Need help locating DC in location

I created a DC and joined a server to that domain. I created a service account in AD, and now I am trying to install an application on that server and use that service account, but I received an ...
0
votes
0answers
24 views

Prevent Office 365 from requesting phone number

I've been using Office 365 (federated against my domain) for several months.  Recently when I login to http://portal.office.com, the site complains I need to Add information to your account so you ...
-1
votes
0answers
17 views

Can't display user info on computer in Active Directory

I have setup some computers in Active Directory. I now want to add first name, last name and user logon name to it so I can faster manage them. I tried adding the specific user when right click and ...
1
vote
1answer
16 views

Samba 4 Domain controller: authentication from windows client stopped working

I've set up a samba 4 domain controller, we have four Windows 7/8 clients in the domain. This setup worked for the past 6 months. Recently, I've not been able to log in with my credentials from two ...
0
votes
1answer
4k views

List an AD Group Membership using Power Query / Data Explorer

I'm trying to pull back the members of an AD distribution group using Excel's Power Query tool. Using the Active Directory data source I can query for all users on a domain. Following is the ...
6
votes
2answers
5k views

How do I use (O365) Exchange Online custom attributes (1 to 15) when I have directory sync enabled and no exchange installed on-premises?

Here is my setup: Active Directory on premises - with no Exchange installed. DirSync tool to sync all users to Office 365 Now, I need to use CustomAttributes in Exchange - here is where the ...
9
votes
4answers
7k views

How can I find out the password complexity policy?

A user tries to change his/her password in a Windows domain and it's not accepted: The password supplied does not meet the minimum complexity requirements How can an end-user find out what the ...
0
votes
0answers
18 views

Can one decrease the netlogon timeout below 15 seconds (negative ExpectedDialupDelay)?

If I am outside my domain any user login or elevation will have a 15 sec delay because an "AD Ping" or rootDSE query is done using the CLDAP protocol. The server won't answer because (though ...
1
vote
0answers
16 views

Samba AD user with same name as local user

I just started using Samba as a domain controller at home. I have set up so that users who log on to the server have users and home folders created if it's the first time etc. I have one issue ...
1
vote
0answers
13 views

Can I load Powershell AD Module as another user?

I have a script that I use to automate AD and Office 365 account provisioning. Everything is working just fine. The only "problem" is that I have a regular domain account and another account which is ...
0
votes
0answers
9 views

Ubuntu Network > Cross device authentication > Single Login Registration

My firm runs an Ubuntu based developer environment. Recently due to the increase of new interns in our firm the firm asked me to setup a machine independent authentication system such that the users ...
1
vote
0answers
10 views

LDAP custom attribute cannot be searched?

I have some special custom attributes with my ldap setup. I have a custom attribute called "GroupCode". I have bunch of entries with this special attribute that I was able to write to the ldap ...
0
votes
2answers
3k views

Windows 10 can't rejoin domain to Windows Server 2003

I have problems with joining domain. Is one computer which is upgraded from Windows 8.1 Pro to Windows 10 Pro. All existing profiles and settings worked. But today I needed log in with user account ...
0
votes
0answers
5 views

Unable to remove 2003 DC from domain environment [migrated]

I'm testing the upgrade of our a domain environment from 2003 to 2012; Our environment consists of one DC (currently 2003 but will be upgraded to 2012 with this exercise). I've transferred all FSMO ...
1
vote
1answer
191 views

What will break if I move my Domain Controller machine accounts from the default OU into another OU, assuming the policy is linked?

Background: I've been helping out with a recent G.P. simplification (read overhaul) at work. I'm working from a list of things my supervisor has requested be done with Group Policy to harden our ...
1
vote
1answer
442 views

Domain Controller: Can't Log Into Safe Mode

Today I've removed the DSRM password with PCUnlocker, and I can then boot to Directory Services Restore Mode and logged into the local administrator account with a blank password. But the most strange ...
0
votes
1answer
41 views

Batch file to get the domain name of hundreds of servers in a multi domain environment

In a multi-domain environment, I need to get the "Domain Name" the servers are joined to. I have a list of hundreds of Windows servers with the hostname only (not FQDN). I was wondering if there is ...
1
vote
1answer
3k views

Mac client on AD domain - individual folder redirection

I'm trying to configure a home network with Windows 2008R2 and Windows 7 / Mac Mountain Lion clients. I have a separate NAS drive, which I want to host all home folders as well as a central store of ...
0
votes
1answer
44 views

Active Directory: How do I specify an objectGUID when I create a new entry?

I'm trying to create entries in AD where I know their objectGUIDs up front. AD replies WILL_NOT_PERFORM. Is there an LDAP control or something I can issue that will force it to comply? Here's the ...
0
votes
2answers
1k views

Query site for given ip from AD sites and services

Windows Active Directory maintains a list of subnet to sites assignments (in "Active Directory - Sites and Services" -> Sites -> Subnets). The subnet-to-site associationas ar used, obviously, by ...
0
votes
1answer
16 views

Domain user does not have local rights

The domain controller is running windows server 2003. The workstation in question has a fresh install of windows 7, with only a local administrator account. The workstation is joined to the domain. I ...
1
vote
1answer
33 views

NTFS - Allow only one user

Is it possible to use NTFS to only allow one specific user to a resource? I have a shared folder, where I will put user home directories, which allows the "Domain Users" group full access. I have a ...
0
votes
0answers
19 views

Manage USB Bitlocker Keys through Windows Domain

I have read though many articles including this to figure out how to manage recovery keys for USB drives in a Domain. However this article is mainly detailing how to recover domain attached PC drives ...
0
votes
0answers
14 views

Apache Directory fid= ,sid= ,c= ,o= like objects in Windows Active Directory

I have a Apache Directory service with tree DN like, DN: fid=X,sid=Y,ou=Systems,dc=Z,dc=com OR ou=HeadOffice,c=1,ou=2,o=3,ou=Organizations,dc=Z,dc=com but I cant find any options to replace the ...
2
votes
3answers
3k views

Alternative to Softerra's LDAP Administrator?

I am looking for an alternative to Softerra's LDAP Administrator, simply for the price is over-budget for a small team to test the LDAP credentials. So I really appreciate if someone can point me to ...
0
votes
1answer
32 views

How to convert regular windows 10 account to an active directory account?

I run a Windows 10 Enterprise computer, which I used before I (setup and) joined a domain. Now that I have joined the computer to a domain, I want to use my domain account on my computer but still ...
3
votes
0answers
127 views

WMI query fails with “A security package specific error occurred.” Exception 80070721

Problem In Powershell after executing the following command ... Get-WmiObject Win32_ComputerSystem -Credential second.nl\administrator -ComputerName srv02.second.nl ... the following exception is ...
1
vote
1answer
10k views

getent passwd outputs only local users

I want to authenticate via Active Directory on a CentOS 6.4 server. wbinfo -u and wbinfo -g display the domain users/groups. Authentication via wbinfo -a DOMAIN+user works. Authentication via kinit ...
2
votes
1answer
328 views

Excel VBA that calls Powershell ActiveDirectory cmdlet, but Module won't load?

I have a powershell script I use to dump user and computer lists to csv files; it works great and I don't want to touch it much. It uses the ActiveDirectory cmdlet, and the Get-ADComputer and ...
0
votes
0answers
31 views

Ethernet not working, wireless is

Since I put my computer on my domain at home (AD/DS) and set the security of my wireless access point to RADIUS with NPS, I started experiencing issues. When my laptop is connected via WLAN, it works ...
1
vote
1answer
30 views

DSQuery get lastlogon date in active directory

I need the lastlogon field of my domain computers exported. I used this command: dsquery * domainroot -filter "(&(objectCategory=Computer)( objectClass=User))" -attr distinguishedName ...