Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

1
vote
1answer
9k views

Checking if a user account is locked on another domain controller

I'm trying to see if a user account has been locked out, using the command line. I thought that I could do this with the net command, but when I run the command NET USER username /domain it ...
0
votes
1answer
2k views

Mac client on AD domain - individual folder redirection

I'm trying to configure a home network with Windows 2008R2 and Windows 7 / Mac Mountain Lion clients. I have a separate NAS drive, which I want to host all home folders as well as a central store of ...
2
votes
1answer
4k views

Mac OS X 10.8 not binding to Windows domain

I have five iMacs with OSX 10.8.5. Two of the iMacs are binding to Windows domain server (2012) successfully. But I can’t bind remaining three iMac machines, and it is showing authentication error ...
-1
votes
0answers
20 views

How is it possible to set password policy on user level when AD password policy is in place?

I need to check password security settings for AD users and SQL Server users. So, as AD is in place, I simply obtained the AD Password Policy: Here we see that the maximum password age is 42 days. ...
0
votes
0answers
23 views

Windows Server Active Directory API [migrated]

I need to develop a web application that must show a user's directory in Windows Server Active Directory. Does Windows Server Active Directory have some API that I can call to retrive those ...
0
votes
1answer
12 views

Can't change network password from command line

I have a previous question relating to how one can change a password of the 'bottom' client when recursively logged in to multiple RDP clients: Change Windows password when in multiple RDP One ...
1
vote
1answer
32 views

What is the default logs storage time in AD domain controller server?

I do not have this with me to check, as I am not OS administrator. I suppose there is some default time set in Active Directory (AD) for logs storage. I am particularly interested in logs for user ...
1
vote
0answers
18 views

Is it possible to get the date of a user's last login to AD if the user was deleted?

After STTR's very good explanations on how to get the dates of last login of existing (including disabled) AD users and how to retrieve the list of deleted users, One question remains. Provided that ...
0
votes
1answer
2k views

List an AD Group Membership using Power Query / Data Explorer

I'm trying to pull back the members of an AD distribution group using Excel's Power Query tool. Using the Active Directory data source I can query for all users on a domain. Following is the ...
0
votes
1answer
17 views

Active Directory Member user prevent software installation on computer [closed]

I'm part of corporate active directory, so we all login using domains. A lot of times active directory managers decide to install software on all our computers. I have full access on my computer. Can ...
0
votes
1answer
24 views

“Ghost folders” showing up in Windows share

I have an Active Directory domain setup with Samba 4.2. This domain uses roaming profiles for all users, which are stored on a "Profiles" share on the Samba server. Furthermore, it uses folder ...
0
votes
0answers
11 views

Desktop Management with Active Directory

I've been doing some reading on Active Directory Domain Services and i find it really interesting. My question is this: Say i have ADDS installed on my Windows Server 2012 OS (or 2008), is it ...
1
vote
0answers
20 views

Risk behind weak password policy [closed]

I have a bit an unusual setup: I am a bank with systems, that are not accessible from outside (no direct internet access). To get access to those systems, you first have to physically enter the banks ...
0
votes
1answer
53 views

List of setspn service classes and their meanings

I am trying to set up my Java tomcat service to be authenticated using Kerberos (Negotiate SSO) in MS AD. For this it is necessary to create SPN. In the documentation of setspn on ...
1
vote
2answers
25 views

Why I can't see the users that I have created

I have created 4 users on Active Directory Users and Computer: But I can't see the users on my computer management under "local users and groups" nor on my sql server! So, why I does not have "local ...
1
vote
2answers
16 views

Risk involved on installing WDS on Domain Controller

Is there any Risk involved, if we install WDS on Domain Controller ( Windows Server 2008 R2) Thanks & Regards, Param
0
votes
1answer
29 views

Powershell - select and update an attribute “on the fly”

I am trying to look for AD users who have an null attribute ("terminalservicesprofilepath") and to update this attribute in the same command. I can select the users, but how to update the attribute ...
0
votes
0answers
20 views

What data is needed to connect an AC server? Is there any particular format?

I'm trying to create a simple active directory instance for testing. Firstly, I turned on 'Active Directory Lightweight Directory Services" feature (my os is Win8.1). Then using "Active Directory ...
0
votes
2answers
1k views

One AD-account two computers - never logged in at the same time

Mission I have one AD account that I, at different times, want to use at two phyiscal computers (referred to as computer1 & computer2). To be clear about the time aspeact, I never want to be ...
0
votes
0answers
22 views

OS X Script to delete all non admins with launchd or logout script

I've found a number of articles that touch on this subject but they are not running for me or perhaps because they are years old they do not work OS X 10.10 Yosemite. In short we run Deep Freeze but ...
0
votes
1answer
34 views

Domain authentication without joining the domain

I am DBA in an Active Directory environment. I often work from home using my private PC (I connect via VPN). My private PC is not joined to the Active Directory domain. Is it possible to use domain ...
2
votes
1answer
1k views

QNAP TS-809U: Domain Users / Groups disappear and the server has to be rejoined to the AD Domain

We have a TS809U that we have joined to the domain. Shares and access rights works as the should with the domain users and everything is just the way it should be. But after a couple of weeks/a month ...
0
votes
1answer
26 views

Point a Windows Server to one specific AD Server?

It is possible to point a server/client to one specific AD Server? Is a host entry the solution? Environment: domain.local running on Server A and B Edit This is my problem:
0
votes
0answers
843 views

Powershell script to add user to active directory and set static IP

I have seen other similar questions but I am looking to fully automate the process and all of the examples I have found up until now are missing pieces that I need. Also, this is the first poweshell ...
0
votes
1answer
80 views

How to get user last logon date on a specific server?

Need to export a table with user names (samAcountNames) along with their last logon date\time on to specific server on network (who is a member of a domain). According to google search, i can do it ...
6
votes
7answers
17k views

Re-joining a computer to domain

I have a problem with a Windows 7 PC that had been a member of the domain. When I try to logon to this PC with domain credentials I get a message similar to The trust relationship between this ...
0
votes
0answers
41 views

Active Directory - Export an OU and sub objects

I would like to export a container and everything it contains with ldifde tool. How can I do that, especially if the container is in Namin Context : Configuration ? I want to export and then import ...
0
votes
1answer
762 views

Do I need to set up a HomeGroup, a Workgroup or Domain?

I have 6 PCs. All 6 PCs have Windows 7 Ultimate OS Installed. I want to create a Network and have control on all systems. It should be 1+5. i.e. One should be the Main system. The rest of the 5 PCs ...
0
votes
0answers
32 views

How to know if a company uses User Logon Name Pre-windows 2000 (SamAccount) or the new User Logon name , to authenticate their users

If users login to their windows machines by entering the following on the Windows login screen: Domainname\username Password Does this mean that the company uses the User Logon Name format ...
1
vote
0answers
69 views

Excel VBA that calls Powershell ActiveDirectory cmdlet, but Module won't load?

I have a powershell script I use to dump user and computer lists to csv files; it works great and I don't want to touch it much. It uses the ActiveDirectory cmdlet, and the Get-ADComputer and ...
2
votes
2answers
36 views

Temporary Password for Domain Admin

A small non-profit company handling confidential information must grant remote domain admin access to their external IT services provider who manages the entire network, including new PCs, etc... ...
3
votes
2answers
7k views

How to run the “runas” command without writing the password

I need to run the "runas" command for log on automatically an Application User, on an Active Directory. Then I need run an executable file. Can I do this in some way or work around to do not type the ...
1
vote
1answer
58 views

Can't Use Powershell Active Directory Cmdlets Even With RSAT Installed

A while back I wrote a simple .ps1 that let me look up the name of a user or the hostname of a computer and tell me which OU of my AD it resided in. I don't recall having any difficulty running the ...
0
votes
0answers
130 views

How to set the correct Samba chmod permissions for shared folders in ext4 file system?

I am build another Samba server as an Active Directory Domain Controller to replace an old and buggy one. Every night I rsync the old one with the new one. Now I am only changing the shares names in ...
0
votes
0answers
49 views

Active Directory: global security group

In Active Directory (Win Server 2008 SP1) we have several global security groups (representing different departments) defined under the same path. They all have EMail addresses assigned to them and ...
0
votes
0answers
37 views

Smart card setup - Gemalto Cryptoflex 64K V2c

I have recently acquired a few Gemalto Cryptoflexes (as above) and I'm trying to get them to work for smart card login. The card has a minidriver which is ActivIdentity Mini Driver (Gemalto ...
0
votes
1answer
130 views

Likewise open aka powerbroker open, dns error when joining domain

When joining the domain using powerbroker open on a machine which is a bind dns server, i'm running into an issue. I'm not totally sure what powerbroker is trying to do at this point exactly ...
1
vote
1answer
29 views

Trouble with certificate checking on a closed network

I'm managing a Active Directory domain with about a hundred Windows 7 clients running IE9. The network does not have access to the Internet, but do have the ability to access a vendor web application. ...
1
vote
0answers
1k views

Windows Azure Directory Sync Generic Failure

Ok so I have a domain that I want to sync to Office365 but when I start the Windows Azure Active Directory Sync tool Configuration Wizard I get an error with the following details: ...
0
votes
1answer
403 views

How to add Active Directory module in PowerShell in Windows 8?

I use Windows 8.1 and I try use Import-Module ActiveDirectory, but I get the following error: PS C:\Windows\system32> Import-Module ActiveDirectory Import-Module : No se cargó el módulo ...
0
votes
0answers
29 views

cannot login with with ad credentials

I cannot login on my laptop with my AD account, only with my smart card. This happened only after I changed my AD account password. If i lock my laptop while I'm logged with my smart card, I can ...
0
votes
0answers
9 views

Issues With Nested PDLs in Outlook

I am looking to create a new Outlook PDL in my company's directory, and this PDL would have nested PDLs inside it. Are there any potential issues / bugs with using this approach? I've been warned to ...
0
votes
1answer
103 views

Restrict Active Directory user by IP Address or Machine Name

I am needing to create a Windows Active Directory account for use with a Microsoft Dynamics CRM system to a set of SQL Server 2008 R2 servers. This user is requiring elevated privileges in my SQL ...
0
votes
0answers
21 views

apache 2.0 ldap configuration to search subtree in Active Directory

Right now ldap is searching for a user in specified organizational unit (OU) in Active Directory (e.g. cn=apld,ou=Users,ou=_bbb). I need to find a way how to search for ldap user in all sub-OUs of a ...
0
votes
1answer
171 views

Removing DHCP and DNS from Windows AD Domain

This is my first time posting here, so please bear with me. I have been searching for this answer for a few days now with no luck. Maybe my google-fu is not strong enough. I am a software engineer ...
0
votes
0answers
13 views

Is there a way to know what version of Exchange a users mailbox is on

In Active Directory there is a property against a user called "homeMDB" That will give me the users exchange database, but is there a way to know if the user is on exchange 2013 through Active ...
0
votes
1answer
47 views

Load thumbnail photos of Active Directory users as a domain user (not controller) to Outlook

Is it possible, as a user in a domain (without administrative rights), to add thumbnail photos of my co-workers so they'll appear in the thumbnail photo cube in Outlook?
0
votes
0answers
52 views

How to change samba user SID?

I'm trying to change the SID of various user in Samba 4.1.14 using pdbedit pdbedit --user <username> SID=<SID> I run the command but no message is displayed nor the SID is changed. How ...
1
vote
1answer
89 views

'net user <username> <password> /domain' seems to momentarily allow multiple good passwords

So, let me preface this question by saying that I am not a domain administration expert. I'm a programmer who writes custom applications for the web. My company wants to add a password reset feature ...
0
votes
0answers
37 views

Which Active Directory fields are displayed for iPhone contacts?

When connecting iPhones to Exchange servers, the menu Groups > Exchange global address list gives access to other users on the Exchange server. My question is which Active Directory attributes are ...