Questions tagged [active-directory]
Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard. Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.
1,093
questions
0
votes
1
answer
55
views
Active directory scheduled job distribution + copy files to remote server
Just I was wondering if it's possible to schedule a job and distribute to all clients on the domain. What we want to do is basically to run that job on clients to copy files from their PCs to a remote ...
1
vote
0
answers
135
views
Administrator being asked for admin password when running admin programs
I have a user that is part of the default 'Administrators' group and the default 'Domain Users' group. When the user tries running a program on Windows 8.1 Industry Pro that requires administrator ...
0
votes
0
answers
471
views
Mandatory Profile Windows 10 Enterprise 64 bit
In my LAB environment all my computers run mandatory profile since windows 7 and i deploy the configuration using GP, recently when i switched to windows 10 mandatory profile was kind of buggy, since ...
0
votes
0
answers
693
views
windows 2012 server gpo for usb access
I face a strange problem...I need to enable usb access to a certain user..The it person responsible before me has restrictred usb access to all users by a group policy which I cannot find or ...
1
vote
1
answer
225
views
Exporting and importing Active Directory users
We need to export all the users (~20000) to newly installed Active Directory 2016 server from our existing Active Directory 2012 server, the problem is that we have not user passwords, and I wonder if ...
2
votes
1
answer
2k
views
How to request (not renew) Kerberos Ticket every 5 days on Ubuntu
I have set up a ubuntu 16.04 machine and integrated it into a windows active directory domain environment using this guide: https://www.unixmen.com/how-to-join-an-ubuntu-desktop-into-an-active-...
1
vote
1
answer
824
views
Windows 10 login error when working outside of corporate network
I get following error when I try to log on to my laptop while not on the corporate network:
there are currently no logon servers to service the logon request
While connected on corporate network, ...
12
votes
1
answer
5k
views
Why my home PC wallpaper updates to my office wallpaper [duplicate]
In my office, they have some server policy that changes the wallpaper every month. I can't change my wallpaper there.
The problem is that my home PC and laptop also get updated, and I dont know why. ...
-1
votes
1
answer
1k
views
Can I sync a single active directory user account?
My main question is in the title. This first part is to shed light on why I'm asking.
I'm writing a PowerShell script that will make it much easier for IT to give End Users a domain admin account to ...
3
votes
1
answer
6k
views
Authentication against LDAP on Apache fails with password mismatch
I want to accomplish LDAP authentication on my Linux machine, but can't get it working. Currently, I get the following error in the Apache log: AH01617: user john.doe: authentication failure for "/": ...
0
votes
1
answer
2k
views
Accounts with same mail Attribute
I have to search AD objects based on mail addresses (from/to/cc). Currently I try to search for all AD objects, with a mail property that matches an address :
([email protected])
As result I ...
0
votes
1
answer
1k
views
What is the correct method to apply various group policy settings to multiple groups of users?
What is the correct method to apply various group policy settings to multiple groups of users?
An example of the scenario:
Windows server 2008, domain "CompanyName".
Presume all users switch between ...
0
votes
0
answers
32
views
Linux clients + Windows server - Assigning computers to users/groups
I have a windows server and ubuntu clients. My clients already joined the active directory but I cannot figure out how I could assign certain users to certain computers. I don't want all the domain ...
0
votes
1
answer
347
views
What are the implications of blocking SMB traffic laterally between servers?
I want to only allow SMB and NBT traffic from servers in the data center to the Domain Controller. I would then like to block any other lateral SMB and NBT traffic.
This is done for security reasons.
...
3
votes
0
answers
2k
views
xrdp authentication using active directory in ubuntu
I used this tutorial to install xrdp on my ubuntu with active directory users: http://eurekamoment.eu/?p=999
Is there a way to specify which user groups from the active directory can connect to the ...
2
votes
2
answers
18k
views
Missing ADUC tabs after RSAT install Windows 10
After a fresh installation of Windows 10.0.10240, I installed RSAT 1.2. All the tools are there, but when opening ADUC the only tab I have is COM+. I'm running the MMC under an account with domain ...
-2
votes
1
answer
2k
views
how to verify whether computer is already exist in AD or not
I am looking for a script which find the machine guid and search in Active directory whether it is exist or not
If exist
provide me their "distinguish name"
I am looking for a powershell script ...
0
votes
3
answers
418
views
User group in AD to be able to remotely access a certain computer inside the network
I have a Windows Server 2008 and I want to allow a user group in AD to be able to remotely access a certain computer inside the network (not the server). Is that even possible? Or I can only specify ...
3
votes
4
answers
90k
views
How do I find out containing OU in results of “Find Users, Contacts, and Groups"?
After a search, how do I get to know in which OU (Organizational Unit) a given result is?
0
votes
1
answer
3k
views
Restrict user to only run programs on Windows server 2012 R2
I have a situation here I hope You can help me with.
I have a Database running on a Windows Server 2012 R2 with a specific user account. Same user account is running a Windows Service.
This Service ...
0
votes
1
answer
2k
views
Duplicate user "cryptoPolicy" in active directory 2012
Im moving Windows Server 2012 Essentials to a new hardware using this tutorial , in the best practice analyzer i found that i have 2 usernames with the same CN "CryptoPolicy" one inside Program Data/...
1
vote
1
answer
3k
views
SSH using Active Directory credentials
I am using AWS, I can ssh using .pem file, I have also enabled password login by modifying /etc/sshd/sshd_config. I can create a new user and login with that user using password.
However, instead of ...
2
votes
0
answers
52
views
Active directory home folder misreporting its used space on Windows 10 client
The server shows the actual used space (a few KB) but the users Windows 10 desktop shows they have used 4.99 GB of their 5 GB quota and won't allow them to save anything. How do I force Windows 10 re-...
0
votes
2
answers
325
views
Active Directory GPO excluding users
I want to set a rule for all users in a domain. The rule turns on the screensaver after 15 minutes and then the user must use a password to login again.
Everything works, but I need to exclude one ...
5
votes
1
answer
4k
views
Windows 10 64 domain computer cannot access Linux (Raspberry Pi3) samba share
Samba server:
Raspberry Pi3, running osmc media server (I believe this is a down-scaled Raspbian version).
Samba version: 4.2.10
Domain controller:
Windows 2012
Windows client:
Windows 10 Evt. 64-...
1
vote
0
answers
175
views
Can browser Windows logon prompt warn to change password first time
When a user tries to connect via remote desktop, there's a clear error message telling them they first need to change their password before first logon.
When they try to run an application, there's ...
1
vote
1
answer
647
views
Tuleap - LDAP Plugin - Active Directory Issues
I've used the instructions from the tuleap documentation (http://tuleap-documentation.readthedocs.io/en/latest/administration-guide/services.html#ldap) to install the LDAP/Active Directory plugin and ...
0
votes
1
answer
4k
views
How do I get a powershell query to show attribute values instead of just their names?
I am using powershell to query an Active Directory. I want to list user's names and their citizenship (e.g. US, AS, CA...). However, when I run the query, the results show the name and value for the ...
2
votes
0
answers
169
views
Prevent USMT 5 from migrating deleted AD profiles
I'm working on a project to replace desktops and laptops.
Some shared desktops have dozens of profiles, some of which are users that have left the organisation and should not be migrated to the new ...
0
votes
1
answer
8k
views
Is there any way to query a list of users who can access a VPN connection in Windows Server 2008 R2
I was wondering if it is possible to query (powershell, ADUC, etc) and generate a list of users who are able to login to a VPN server running on Windows Server 2008 R2?
Is the main thing that ...
0
votes
0
answers
131
views
Administrator accounts cannot change their password
I have the issue at one of my customers that some of their AD-accounts are not allowed to change their password via ctrl+alt+del.
The error they get: 'Permission denied'
What I found out about the ...
3
votes
1
answer
1k
views
Create Vagrant Windows Server 2012 box with Active Directory + Forest breaking WinRM
I followed the instructions on this blog post to get a Vagrant box with Windows Server 2012 R2 eval. Then I tried to install Active Directory Domain Controller and an Active Directory Forest (with ...
0
votes
1
answer
142
views
How to find all machines with a username via command prompt
I know my user credentials, they are User:Johannes, Passwort:Pass12345.
I can find the groups that I am part of with net.
net user /domain Johannes
This gives me the groups I am in.
*BELIEVER51
*...
-1
votes
1
answer
936
views
Get Event Log Over Network with PowerShell
I am trying to write a command that pulls an event log from another workstation on the same local network.
I currently am using the command below but it only works on the local machine I am currently ...
2
votes
0
answers
592
views
Mac user is able to login, but sudo doesn't work
We have a strange problem with a Mac OSX El Capitan. The Mac is joined to an active directory domain and the user is able to log in with his domain password.
In the settings, the user is listed and ...
0
votes
1
answer
667
views
AD Account Got Locked Out
We have a service account in our AD environment (Windows 2003) got locked out frequently.
some background information:
Windows 2003 domain
the account is set to never expire
we never changed the ...
1
vote
0
answers
2k
views
Ubuntu - unable to ID AD Accounts
After following this guide,
I got to the point were it tells me to verify using ID "username"
which just straight up tells me this account does not exist.
I have been adding debian machines to the ...
1
vote
1
answer
183
views
In Windows Adding a domain account to the local administrators group. What problems can arise?
I work as an IT and every employee in my company has a domain account (Windows server 2003). Many people want to install new software for their professional needs and I have to be there just to write ...
-2
votes
1
answer
3k
views
Windows server 2012 r2 x64 turn black screen after login
I'm new to windows server anyway especially windows 2012s, actually server was there for only Ncomputing devices,so i messed-up with it by installing AD and
Hyper- V, after seeing those feature ...
3
votes
1
answer
20k
views
GPO only works on authenticated users
I am trying to apply a group policy to select users. All of the select users are in a security group. The group policy includes user settings
I am applying the policy to an OU that includes the ...
1
vote
0
answers
783
views
VisualStudio won't accept credentials in enterprise environment - StatusCode: 0x80090308
I'm currently using Visual Studio Community 2015, Version 14.0 Update 3.
My problem is, that I can't connect to my own MS TeamFoundationServer 2015 from my workplace. The problem is definitely not ...
1
vote
2
answers
175
views
Active Directory Password Change Issue
We have a password issue here. The security policy requieres to change user's password in every 90 days (so the 'Password never experies' solution is not working now). They got a automatic warning ...
0
votes
0
answers
552
views
Does whoami /groups query the DC?
How does whoami /groups work? Does it connect to the DC and get the information from there or is that information cached on the computer somewhere and retrieved by the command? If it is stored ...
0
votes
1
answer
1k
views
Showing two domain controller DC and GC on AD server, Need to remove old DC
I was abc AD server 2008 r2 with single domain controller on it and its working fine but due to issues in some roles on abc, I have create another xyz server and replicate with abc.
Now I've remove ...
-1
votes
1
answer
136
views
How-to represent/add devices like IP-Cams, Printers, VoIP-Phones etc. in Active Directory
I have a number of devices neither fitting the category "Human" nor "Computer", but needing some of their characteristics, like "email-address", or MAC.
e.g.
IP-Cams: They need an email-address, and ...
-1
votes
1
answer
33
views
Changing IP of DNS Server machine
I am in windows server 2012R2 machine environment and there I am having my Active Directory and DNS server(local LAN) configured.
Now due to some requirement I want to change IP of this machine and ...
0
votes
0
answers
145
views
.NET deny anonymous access blocking domain user too
We have installed the same .net web app to a few of our servers but one of the server is blocking access for domain users despite only set to deny anonymous access. We used the following web.config to ...
1
vote
0
answers
649
views
Import schema into Samba/AD domain?
I have set up a Samba4 domain controller to serve as my Active Directory PDC. It works flawlessly in that respect. My next challenge is to install FusionDirectory to make managing it easier and to ...
0
votes
1
answer
52
views
Flipping names of the two server machines
Following is my scenario.
I have maintained two servers machines.On one machine(lets call it machine-1) I have installed SharePoint Server 2013 which is using Active Directory Installed with users ...
0
votes
1
answer
238
views
Windows offline domain join
Apparently administrators can join the machine to the domain without a reboot according to this article:
https://technet.microsoft.com/en-us/library/offline-domain-join-djoin-step-by-step%28v=ws.10%...