Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

1
vote
1answer
67 views

How can I automatically import a certificate to a Windows GPO?

I'm looking for a way to import a root certificate into a specific active directory group policy object. I've tried certutil -dspublish but that would only publish it to a global AD store. How can I ...
0
votes
0answers
15 views

Printing Permissions for Guest Users

I have a Windows Active Directory Domain Network that has a print server with 3 printers attached to it. I do not want users to print from computers or devices that are not joined to the active ...
0
votes
1answer
27 views

Which user execute a GPO which is granted to unpriviledged user?

When a unprivileged user (or a machine account) of a AD DS domain is granted to execute a GPO. Which user actually execute it for him? Is it possible to choose the user which execute the GPO, ...
0
votes
0answers
92 views

Prevent Office 365 from requesting phone number

I've been using Office 365 (federated against my domain) for several months.  Recently when I login to http://portal.office.com, the site complains I need to Add information to your account so you ...
0
votes
1answer
37 views

When using Agentless Exception Monitoring, do all clients/hosts have to be on the same domain?

I recently set up Agentless Exception Monitoring (AEM) in System Center Operations Manager 2012 R2 (SCOM). It works well when the client is joined to the same domain as the management server -- but ...
1
vote
1answer
62 views

Samba 4 Domain controller: authentication from windows client stopped working

I've set up a samba 4 domain controller, we have four Windows 7/8 clients in the domain. This setup worked for the past 6 months. Recently, I've not been able to log in with my credentials from two ...
0
votes
0answers
87 views

Can one decrease the netlogon timeout below 15 seconds (negative ExpectedDialupDelay)?

If I am outside my domain any user login or elevation will have a 15 sec delay because an "AD Ping" or rootDSE query is done using the CLDAP protocol. The server won't answer because (though ...
1
vote
0answers
49 views

Samba AD user with same name as local user

I just started using Samba as a domain controller at home. I have set up so that users who log on to the server have users and home folders created if it's the first time etc. I have one issue ...
1
vote
0answers
15 views

Can I load Powershell AD Module as another user?

I have a script that I use to automate AD and Office 365 account provisioning. Everything is working just fine. The only "problem" is that I have a regular domain account and another account which is ...
0
votes
0answers
10 views

Ubuntu Network > Cross device authentication > Single Login Registration

My firm runs an Ubuntu based developer environment. Recently due to the increase of new interns in our firm the firm asked me to setup a machine independent authentication system such that the users ...
1
vote
0answers
12 views

LDAP custom attribute cannot be searched?

I have some special custom attributes with my ldap setup. I have a custom attribute called "GroupCode". I have bunch of entries with this special attribute that I was able to write to the ldap ...
0
votes
1answer
105 views

Batch file to get the domain name of hundreds of servers in a multi domain environment

In a multi-domain environment, I need to get the "Domain Name" the servers are joined to. I have a list of hundreds of Windows servers with the hostname only (not FQDN). I was wondering if there is ...
0
votes
1answer
30 views

Domain user does not have local rights

The domain controller is running windows server 2003. The workstation in question has a fresh install of windows 7, with only a local administrator account. The workstation is joined to the domain. I ...
1
vote
1answer
88 views

NTFS - Allow only one user

Is it possible to use NTFS to only allow one specific user to a resource? I have a shared folder, where I will put user home directories, which allows the "Domain Users" group full access. I have a ...
0
votes
1answer
60 views

Active Directory: How do I specify an objectGUID when I create a new entry?

I'm trying to create entries in AD where I know their objectGUIDs up front. AD replies WILL_NOT_PERFORM. Is there an LDAP control or something I can issue that will force it to comply? Here's the ...
0
votes
0answers
33 views

Manage USB Bitlocker Keys through Windows Domain

I have read though many articles including this to figure out how to manage recovery keys for USB drives in a Domain. However this article is mainly detailing how to recover domain attached PC drives ...
0
votes
0answers
19 views

Apache Directory fid= ,sid= ,c= ,o= like objects in Windows Active Directory

I have a Apache Directory service with tree DN like, DN: fid=X,sid=Y,ou=Systems,dc=Z,dc=com OR ou=HeadOffice,c=1,ou=2,o=3,ou=Organizations,dc=Z,dc=com but I cant find any options to replace the ...
0
votes
1answer
69 views

How to convert regular windows 10 account to an active directory account?

I run a Windows 10 Enterprise computer, which I used before I (setup and) joined a domain. Now that I have joined the computer to a domain, I want to use my domain account on my computer but still ...
0
votes
0answers
33 views

Ethernet not working, wireless is

Since I put my computer on my domain at home (AD/DS) and set the security of my wireless access point to RADIUS with NPS, I started experiencing issues. When my laptop is connected via WLAN, it works ...
1
vote
1answer
91 views

DSQuery get lastlogon date in active directory

I need the lastlogon field of my domain computers exported. I used this command: dsquery * domainroot -filter "(&(objectCategory=Computer)( objectClass=User))" -attr distinguishedName ...
4
votes
0answers
402 views

WMI query fails with “A security package specific error occurred.” Exception 80070721

Problem In Powershell after executing the following command ... Get-WmiObject Win32_ComputerSystem -Credential second.nl\administrator -ComputerName srv02.second.nl ... the following exception is ...
0
votes
0answers
14 views

Where is the AD Bitlocker Recovery info found in Excel using Power Query?

I was wondering where do I find the Bitlocker Recovery information in Excel/Power Query if it's stored in Active Directory? That is to say, what is the name and data type of the field, and what do I ...
0
votes
1answer
72 views

Can I query a different AD domain with the default Win7 install? [duplicate]

Background I work in an Enterprise where our Active Directory is locked down pretty tight and only Info Security has access to administer changes. I'm using a standard Win7 Enterprise x64 Service ...
0
votes
0answers
130 views

Zookeeper vs MS ActiveDirectory or LDAP

I'm currently looking for a good configuration storage, which is quite easy to integrate and maintain. As far as I see, Zookeeper is the most suitable one for Java applications. (It has a very ...
0
votes
0answers
54 views

Error with HTA reading pwdLastSet AD attribute

We have an AD domain that is at 2008 R2 levels. I have written a HTA which I use by right-clicking on a user from within AD Users & Computers and then selecting the HTA from the context menu that ...
0
votes
1answer
82 views

Stale Computer Accounts - Active Directory

Deleted versus Disabled: I recently did a scan and found over 300 computer accounts which had not checked in to the domain for the past year or more. dsquery computer -inactive 52 -limit 0 I then ...
0
votes
0answers
25 views

log on to permission not persisting for AD domain users

I'm an active directory novice who's been thrown into the deep end helping out in an all windows environment. I'm sure there's a simple answer to this, but it has me baffled: I just don't know where ...
-1
votes
1answer
32 views

BitLocker and Active Directory

I routinely bring in my encrypted file drive to work, but the IT department seems rather incompetent here. The security policies are very lax, and I'm paranoid about the domain controller being hacked ...
0
votes
0answers
138 views

Clients have problems sending DNS requests

Some of my clients can't use internal DNS server to resolve internal addresses. All IP addresses can be pinged, but I can't ping name or name.domain.com. Restart DNS client service or ipconfig ...
1
vote
0answers
24 views

Windows server still reboot after recover active directory folders

My Problem: Windows server is not starting up and restart when shows the win logo. After that, i reinstall windows, reoconfigured again and execute this steps: Perform a fresh installation of ...
1
vote
0answers
144 views

samba4 acl for allowing group access to files created by a user

I've just setup samba4 as an Active Directory domain controller. (samba v4.3.0, installed on ubuntu x64) It's used in a small accounting office. The office has a number of file shares. I've given ...
2
votes
1answer
45 views

Adding a computer to a server's domain (in windows)

So I have a server and a computer. Server's hostname:(for this example) Name1 On the computer in cmd I do: /netdom join Name1 /domain:W2K8AD1Name1.local and it gives me this error: The network ...
1
vote
1answer
125 views

dns domains, active directory domains and domain controller

I know these are big topics but i am just several questions i wish to clarify. q1) are dns internet domains and active directory domains referring to the same thing or are related ? Reason for ...
0
votes
0answers
64 views

Service account being used on a specific computer

We're using Active Directory at our company and is there a way to get the service account used by checking on the computer? I don't really know which service account being used so is there a way for ...
0
votes
0answers
193 views

Figure out what is locking my AD account

Some process on my machine is locking out my active directory account due to it using the old password. I've searched all the normal things (services, IIS app pool, RDP sessions, credential vault) and ...
1
vote
1answer
1k views

'net ads join -U username' failing with an error 'NT_STATUS_IO_TIMEOUT'

I am attempting to provide access to Ubuntu shared directories using Active Directory users and group using Samba. I am following this article to install and configure AD and Unix so that access can ...
0
votes
0answers
5 views

Automatically create Azure ADs using a list of usernames

I have a huge list of usernames to which I need to create Azure ADs, is there a way I can do this automatically instead of doing them one by one?
0
votes
1answer
276 views

file locked on shared drive by user who no longer exists

I'm really banging my head against the wall with investigating this issue, we have a shared drive with a number of documents, one such document was created in 2015 and User1 attempted to access this ...
1
vote
2answers
2k views

How do I add Azure Active Directory User to Local Administrators Group

With Windows 10 you can join an organisation (=Azure Active Directory) and login with your cloud credentials. Based on the information provided here the first account per computer that joins the ...
0
votes
0answers
45 views

Windows Server DNS Configuration on Multiple Controllers and Zone Transfer

Let's assume I have two domain controllers running Windows Server 2012 in different subnets. As far as I know that version of Windows Server assume them as two masters with equal rights, so any change ...
0
votes
0answers
13 views

Active directory administrator access

Allowing hard drive C sharing is a very risky and dangerous practise How to stop administrator from accessing the shared drive $C of other users ?
1
vote
1answer
68 views

Connecting to MS SQLServer from a Linux box

I am trying to connect to MS SQLServer from an application that I have written (using Qt) which runs on Linux. Here are some details of the setup: The SQLServer box (SQLBox) is part of my domain ...
1
vote
1answer
98 views

Remote access users with passwords with active directory

We are changing our active directory policy for our users to finally have passwords. Which is good because they don't have any passwords yet. But with passwords there arises a problem with remote ...
0
votes
1answer
663 views

What characters are valid for Active Directory groups?

My software program is going to auto-generate Active Directory group names. We need to know which characters aren't allowed in an AD Group name (i.e. /, \, [, \, |, etc.). I found this link from ...
2
votes
1answer
38 views

How can I join a Slackware desktop to an AD network?

It's been a long time since I last used Slackware professionally and the opportunity arose once more. How can I join it to my company's network that's using Microsoft AD?
1
vote
0answers
36 views

Linux + AD + mount = problems writing files

I have 2 Linux servers + 1 Active Directory There's a NFS disk mounted from the Linux 2 to Linux 1. Users can access and write files from their Windows session on directories of Linux 1, and on ...
2
votes
1answer
131 views

How do i get a list (in txt file) of every computer on the domain without being a domain admin?

I am trying to get a list of every computer. we have a catalog but we had a lot of renaming and moving that nobody documented. (i know we renamed them right, just nobody put it on paper) I need a way ...
-1
votes
1answer
110 views

Justification for running Active Directory in a development environment [closed]

I currently work in a department focusing on developing software on the .Net platform. They come from a linux/php setting and have moved as a team onto the Windows world. The team have set up a nice ...
0
votes
0answers
24 views

Sharing NAS with local permissions amongst domain users

I have a NAS which can't deal with the size of my location's AD (limited to 800 users). I'm looking for a workaround which still allows me to use current AD accounts for R/W permission. I'm currently ...
1
vote
1answer
141 views

Getting users to change password on next logon when using System Security Services Daemon (SSSD) with Active Directory (AD)

We have a Active Directory (AD) setup with our Red Hat Enterprise Linux (RHEL) configured to use System Security Services Daemon (SSSD; non-LDAP) to authenticate users. We need to be able to force our ...