Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

2
votes
1answer
36 views

more than one AD User on offline Windows 7 Laptop

I have three guys sharing a laptop in a location where they will not have internet. I know that windows 7 will cache the last users credentials but will it cache the two or three? What are my options ...
0
votes
0answers
24 views

Pushing down a file to each Window user's home directory

have a question on how to push down a file into each window user's home directory. I am not a Windows expert. I believe this can be done using the GPO. Can you provide some examples on how to do this? ...
0
votes
0answers
28 views

Joining Active Directory from OS X

We have added a Mac (OS X 10.9) to Active Directory and mapped a uid of 10000 for a user called "Administrator", along with the gid of 80, to allow it to be a member of the administrator's group. ...
0
votes
0answers
57 views

Shared Folder permissions using computer account

Is it possible to use computer account instead of user account in folder permissions? I need PCs using the same user to have different permissions to a folder. I added the computer account on a shared ...
0
votes
0answers
130 views

Change password on AD domain not working from client machines

I have a Windows Server 2008 R2 with AD as primary domain controller. Whenever a user's password expires, he changes it but it is never accepted the next time he tries to login (or from Exchange ...
0
votes
1answer
88 views

Starting the Citrix Desktop Service once a specific user logs in

I am working on a package to be released into an enterprise environment which needs to have the Citrix Desktop Service in a suspended state post deployment from CM. In suspending the service post ...
0
votes
0answers
95 views

Sendmail + Active directory

I've got a freebsd server which has sendmail, dovecot and openldap installed. Let's say it's called name.com I want to integrate it with Active Directory, so sendmail can look up users in AD and if ...
1
vote
0answers
49 views

Issues accessing file shares of certain servers across site to site VPN

We recently had a problem crop up with one of our remote facilities, i'm not a system admin, and we are currently without one, but I will try to explain the best I can. Employees at the remote site ...
4
votes
2answers
2k views

How do I use (O365) Exchange Online custom attributes (1 to 15) when I have directory sync enabled and no exchange installed on-premises?

Here is my setup: Active Directory on premises - with no Exchange installed. DirSync tool to sync all users to Office 365 Now, I need to use CustomAttributes in Exchange - here is where the ...
1
vote
1answer
2k views

Active Directory Domain Controller with pfSense as DHCP and DNS server

I've read some conflicting posts, so hopefully I can get a clear answer. I have pfSense running as a DHCP server and DNS Forwarder. I'd like to try out Active Directory as a Domain Controller at home ...
0
votes
1answer
246 views

Active Directory / Exchange: Convert User + Email into Only Shared Email

I want to convert an exchange user account / email to just a shared email with an access group. Scenario: I have a windows active directory network with a user account called "mydomain\bob". I can ...
0
votes
1answer
36 views

Can you connect to a windows domain from a seperate network?

I was wondering if you can connect to a domain from a separate network... Reason being is because I have a clients laptop here with me and I was wondering if I can join their domain from here at my ...
0
votes
1answer
69 views

Windows 8, 8.1, 2012 R2: Search does not work correctly after joining local AD domain

Scenario: I do a fresh install of e.g. Windows 8.1 on a workstation. Then I create a temporary local user on this system -> searching in the start menu for e.g. "programs and features" (German: ...
0
votes
1answer
97 views

apache got internal error when access ldap module

I'm installed httpd 2.4, and the /etc/httpd/conf.d/ssl.conf like WSGIScriptAlias /wsgi_app /trac/cgi-bin/wsgi_app.py <Directory /trac/cgi-bin> Require all granted ...
0
votes
1answer
147 views

TULEAP - LDAP Plugin & Active Directory

I ve installed Tuleap 7.2 on CentOS and activate the Ldap plugin to auth against an AD running Samba 4.1.9. For the moment I have no success trying to connect to my AD. Here is my ldap.inc : ...
2
votes
1answer
50 views

Active directory sites and services

I have 192.168.1.0/23 subnet for wired connection and 192.168.2.0/24 for wireless connection. Do I need to add 192.168.2.0 in AD Sites & services. Right now I have 192.168.1.0/24 added in the ...
0
votes
2answers
319 views

Active Directory and Mac OS 10.5 - how can I get the GPO's network drive on the Mac, and get the home directory of the user to map correctly?

I have a PowerMac G5 computer that I have joined to the Windows domain network successfully. I am able to login successfully with domain credentials. However, it does not include any of the network ...
1
vote
4answers
15k views

How to get Linux users list from LDAP

We've just linked one of our Linux host to LDAP and ActiveDirectory. Now I'm trying to check how I get list of users and their details from within the Linux side.
1
vote
2answers
77 views

Active Directory login

I have a machine with a strange error when logging into ADS. (Local logins work fine.) Profile invalid But when I look through the hard drive I don't even see the account. I know the user has ...
2
votes
0answers
240 views

Task Scheduler program writes to literal folder named %LOCALAPPDATA%

I have a .NET executable (that I created) which uses Microsoft's Active Directory Service Interfaces (via System.DirectoryServices.AccountManagement) to do LDAP queries. Internally to ADSI, it ...
2
votes
1answer
980 views

Active Directory setup with Profile Path and Home Folder

I have roaming profiles turned on. I was wondering what the different was between Profile Path and Home Folder in the Active Directory setup.
1
vote
1answer
34 views

How to Copy a user profile in Active Directoty

Hi I have a user with LOTS of access groups that will take me a very long time to copy across manually. Is there a simple way to copy a users profile (or duplicate it) on AD? I have checked and I ...
2
votes
1answer
56 views

How long until disabling a logged on user takes effect?

I have asked the admin sitting next to me to change my password and disable my account. He did that 15 minutes ago and I am still browsing the network shares. I haven't logged off yet, but I want to ...
0
votes
2answers
183 views

How do I connect to ActiveDirectory from Windows7 running under virtualbox?

I have a MBPr and I have installed virtualbox. I setup Windows7 x64 and I can't connect to the work ActiveDirectory. on a standalone Windows machine, I can run any software as a domain user. But when ...
0
votes
1answer
75 views

Changing AD passwords of local account without being on company network

We've got remote users (who can VPN into our corporate network, but never actually connect to our LAN) who are on Mtn. Lion and Mavericks. If we expire their AD passwords, they can reset them through ...
1
vote
1answer
110 views

Decrypting a BitLocker-ed that uses TPM

I'm looking at Dislocker but i cant figure out if a drive that is locked using TPM, but has those details stored in AD, can be opened using Dislocker. Does anyone know? EDIT: Dislocker is a linux ...
0
votes
1answer
57 views

Run command on every windows workstation

I just found out that I need to add a persistent static route to each and every workstation on my network of 80 Windows XP & Windows 7 Workstations. How do I add a persistent route to every ...
0
votes
1answer
678 views

Execute one batch file on several Windows clients with active directory

For installing programs using an exotic package manager, I would like to execute until it succeed (repeated at each logon until success) a batch command one time on each computer connected to an ...
0
votes
0answers
56 views

keeping local profile a different domain user

My question is about how to log in to a machine with a (newly joined) domain user account, while keeping the local user's settings/profile which have been established by the previous domain user ...
0
votes
0answers
32 views

Disabling EFS recovery domain policy on local account

I would like my personal home folder to be protected by EFS without my domain administrator having access. I setup a separate local account so I can login with my personal microsoft account instead ...
0
votes
1answer
861 views

Login with Microsoft Account instead of Domain Account on Windows 8

Company recently issued me a surface pro 3 with windows 8. I would like to login to my personal microsoft account instead of my company issued domain account. However, after they setup my device, it ...
0
votes
1answer
144 views

Bitlocker disk encryption without admin override

I am a somewhat paranoid CTO exec that just received a Microsoft Surface with Windows 8.1 and I would like to enable disk encryption to protect my information. I know that bitlocker can be enabled to ...
1
vote
1answer
83 views

Minimum rights to access the whole Users directory on another computer

What is the minimum rights required to access the Users directory on another computer via an admin share? I have a batch file that writes some information to a few other computers using a path of ...
1
vote
1answer
75 views

UPN vs DOMAIN\USER signin

What is the difference between using user@zone.domain.tld over DOMAIN\USER? Does the difference come in to play the bigger the AD/business network is? For my setup I have now I can use either/or and ...
0
votes
0answers
357 views

GPO to configure “Ignore other applications that use Dynamic Data Exchange (DDE)”

Using excel 2013 (office 2013 32-bit per MS recommendation) on Win7Pro 64bit in a 2008R2 64bit AD domain. When trying to open an excel 2013 document getting the errorbox "There was a problem sending ...
0
votes
0answers
24 views

Should we load smaller subnets into Active Directory

Our network team is splitting up the subnets in each of our offices from /16 and /18 subnets to multiple /24 subnets. Our systems team is not changing Active Directory sites and services to replicate ...
0
votes
1answer
225 views

Query site for given ip from AD sites and services

Windows Active Directory maintains a list of subnet to sites assignments (in "Active Directory - Sites and Services" -> Sites -> Subnets). The subnet-to-site associationas ar used, obviously, by ...
0
votes
1answer
153 views

Cache Group Policies for AD Group

I administrate number of Windows 7 machines frozen using Faronics Deep Freeze. Because these machines are kept frozen they do not cache group policies. So every time a user logs in after a reboot ...
0
votes
0answers
77 views

error when trying to join AD with linux mint

I am trying to join Active Directory with mint MATE 64-bit, using likewise open gui. I get the following error: "Network name not found.. Failure to lookup a domain name ending in ".local" may be the ...
1
vote
1answer
38 views

Automatically log in a user once after connecting to a domain

I am using a script to connect 140+ workstations to a domain. These workstations are primarily Windows 7 but there are a few XP stations thrown into the mix. They were previously part of a workgroup ...
0
votes
1answer
383 views

Piping with PowerShell in Office 365 Exchange and on-premises AD

We have a local AD domain synced with Exchange Online in Office 365. I am trying to use PowerShell to get information that I need but keep getting an error and can’t seem to get the commands to work ...
0
votes
0answers
41 views

How can I restrict a user in an AD environment only to have vpn access but no directory share rights?

I'm trying to restrict an AD account to only have vpn access rights but no domain user rights. Can it be done or should I try something out of windows server's boundaries? We are using a Fortigate ...
0
votes
0answers
409 views

Powershell - Test user credentials in AD, with password reset

I can successfully use Powershell to tell if a user authenticates in Active Directory: Function Test-ADAuthentication { param($username,$password) (new-object directoryservices.directoryentry ...
0
votes
1answer
219 views

Customizing AD Users and Computers snap-in

We are looking at using the departmentNumber attribute for our users in Active Directory. Easy enough for admins to edit this attribute using the Attribute Editor tab with AD Users and Computers ...
1
vote
0answers
285 views

How to enable entering username in Zorin OS

I have joined my zorin os (v8) to a domain. But I can not find how to enable entering usernames on the logon screen. How do you enable this feature?
1
vote
1answer
65 views

Terminal command to include currently logged on user

I am trying to write a script that makes our network (active directory) users local administrator on their macs. I have the script that will do this: dseditgroup -o edit -n /Local/Default -a ...
0
votes
1answer
2k views

Active Directory Allow User to Install Only

On my active directory network, I want to satisfy my boss by giving him semi-administrative permissions that will allow him to Install programs as administrator in emergency situations on all ...
1
vote
2answers
189 views

Active Directory - Deploying Wallpaper / GPO “Files” Permissions

I have tried to deploy wallpaper with active directory and it seems everything is working, up until the point where the image seems to have permission issues. At first I thought it was the image, but ...
1
vote
3answers
67 views

Active Directory - GPO Will Not Apply to Group of Machines

I created a GPO to create a few rules for a set of computers, but no matter what I do, running "gpresult /r" yields "Filtering: Denied (Security)" as admin, or if I'm a regular user, it just doesn't ...
0
votes
1answer
27 views

Share a folder without admin credential

In our domain, users have "User" permission level, every time some user want to share a folder it will be prompt admin credential to finish, is there a way to allow domain users to freely share ...