Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

1
vote
1answer
80 views

Samba 4 Domain controller: authentication from windows client stopped working

I've set up a samba 4 domain controller, we have four Windows 7/8 clients in the domain. This setup worked for the past 6 months. Recently, I've not been able to log in with my credentials from two ...
6
votes
2answers
7k views

How do I use (O365) Exchange Online custom attributes (1 to 15) when I have directory sync enabled and no exchange installed on-premises?

Here is my setup: Active Directory on premises - with no Exchange installed. DirSync tool to sync all users to Office 365 Now, I need to use CustomAttributes in Exchange - here is where the ...
11
votes
4answers
9k views

How can I find out the password complexity policy?

A user tries to change his/her password in a Windows domain and it's not accepted: The password supplied does not meet the minimum complexity requirements How can an end-user find out what the ...
0
votes
0answers
109 views

Can one decrease the netlogon timeout below 15 seconds (negative ExpectedDialupDelay)?

If I am outside my domain any user login or elevation will have a 15 sec delay because an "AD Ping" or rootDSE query is done using the CLDAP protocol. The server won't answer because (though ...
1
vote
0answers
73 views

Samba AD user with same name as local user

I just started using Samba as a domain controller at home. I have set up so that users who log on to the server have users and home folders created if it's the first time etc. I have one issue though....
1
vote
0answers
18 views

Can I load Powershell AD Module as another user?

I have a script that I use to automate AD and Office 365 account provisioning. Everything is working just fine. The only "problem" is that I have a regular domain account and another account which is ...
0
votes
0answers
10 views

Ubuntu Network > Cross device authentication > Single Login Registration

My firm runs an Ubuntu based developer environment. Recently due to the increase of new interns in our firm the firm asked me to setup a machine independent authentication system such that the users ...
1
vote
0answers
14 views

LDAP custom attribute cannot be searched?

I have some special custom attributes with my ldap setup. I have a custom attribute called "GroupCode". I have bunch of entries with this special attribute that I was able to write to the ldap ...
2
votes
1answer
246 views

What will break if I move my Domain Controller machine accounts from the default OU into another OU, assuming the policy is linked?

Background: I've been helping out with a recent G.P. simplification (read overhaul) at work. I'm working from a list of things my supervisor has requested be done with Group Policy to harden our ...
1
vote
1answer
724 views

Domain Controller: Can't Log Into Safe Mode

Today I've removed the DSRM password with PCUnlocker, and I can then boot to Directory Services Restore Mode and logged into the local administrator account with a blank password. But the most strange ...
0
votes
1answer
179 views

Batch file to get the domain name of hundreds of servers in a multi domain environment

In a multi-domain environment, I need to get the "Domain Name" the servers are joined to. I have a list of hundreds of Windows servers with the hostname only (not FQDN). I was wondering if there is ...
1
vote
1answer
3k views

Mac client on AD domain - individual folder redirection

I'm trying to configure a home network with Windows 2008R2 and Windows 7 / Mac Mountain Lion clients. I have a separate NAS drive, which I want to host all home folders as well as a central store of ...
0
votes
1answer
82 views

Active Directory: How do I specify an objectGUID when I create a new entry?

I'm trying to create entries in AD where I know their objectGUIDs up front. AD replies WILL_NOT_PERFORM. Is there an LDAP control or something I can issue that will force it to comply? Here's the ...
0
votes
2answers
2k views

Query site for given ip from AD sites and services

Windows Active Directory maintains a list of subnet to sites assignments (in "Active Directory - Sites and Services" -> Sites -> Subnets). The subnet-to-site associationas ar used, obviously, by ...
0
votes
1answer
35 views

Domain user does not have local rights

The domain controller is running windows server 2003. The workstation in question has a fresh install of windows 7, with only a local administrator account. The workstation is joined to the domain. I ...
1
vote
1answer
151 views

NTFS - Allow only one user

Is it possible to use NTFS to only allow one specific user to a resource? I have a shared folder, where I will put user home directories, which allows the "Domain Users" group full access. I have a ...
0
votes
0answers
41 views

Manage USB Bitlocker Keys through Windows Domain

I have read though many articles including this to figure out how to manage recovery keys for USB drives in a Domain. However this article is mainly detailing how to recover domain attached PC drives ...
0
votes
0answers
20 views

Apache Directory fid= ,sid= ,c= ,o= like objects in Windows Active Directory

I have a Apache Directory service with tree DN like, DN: fid=X,sid=Y,ou=Systems,dc=Z,dc=com OR ou=HeadOffice,c=1,ou=2,o=3,ou=Organizations,dc=Z,dc=com but I cant find any options to replace the ...
2
votes
3answers
3k views

Alternative to Softerra's LDAP Administrator?

I am looking for an alternative to Softerra's LDAP Administrator, simply for the price is over-budget for a small team to test the LDAP credentials. So I really appreciate if someone can point me to ...
4
votes
0answers
597 views

WMI query fails with “A security package specific error occurred.” Exception 80070721

Problem In Powershell after executing the following command ... Get-WmiObject Win32_ComputerSystem -Credential second.nl\administrator -ComputerName srv02.second.nl ... the following exception is ...
2
votes
1answer
12k views

getent passwd outputs only local users

I want to authenticate via Active Directory on a CentOS 6.4 server. wbinfo -u and wbinfo -g display the domain users/groups. Authentication via wbinfo -a DOMAIN+user works. Authentication via kinit ...
2
votes
1answer
424 views

Excel VBA that calls Powershell ActiveDirectory cmdlet, but Module won't load?

I have a powershell script I use to dump user and computer lists to csv files; it works great and I don't want to touch it much. It uses the ActiveDirectory cmdlet, and the Get-ADComputer and Get-...
0
votes
0answers
34 views

Ethernet not working, wireless is

Since I put my computer on my domain at home (AD/DS) and set the security of my wireless access point to RADIUS with NPS, I started experiencing issues. When my laptop is connected via WLAN, it works ...
1
vote
1answer
124 views

DSQuery get lastlogon date in active directory

I need the lastlogon field of my domain computers exported. I used this command: dsquery * domainroot -filter "(&(objectCategory=Computer)( objectClass=User))" -attr distinguishedName ...
0
votes
0answers
15 views

Where is the AD Bitlocker Recovery info found in Excel using Power Query?

I was wondering where do I find the Bitlocker Recovery information in Excel/Power Query if it's stored in Active Directory? That is to say, what is the name and data type of the field, and what do I ...
1
vote
1answer
443 views

How to change samba user SID?

I'm trying to change the SID of various user in Samba 4.1.14 using pdbedit pdbedit --user <username> SID=<SID> I run the command but no message is displayed nor the SID is changed. How ...
2
votes
1answer
45 views

Adding a computer to a server's domain (in windows)

So I have a server and a computer. Server's hostname:(for this example) Name1 On the computer in cmd I do: /netdom join Name1 /domain:W2K8AD1Name1.local and it gives me this error: The network ...
45
votes
5answers
304k views

How can I tell which Domain controller I'm authenticated to?

How can I tell which Domain controller I'm authenticated to? Is there a way to do this without local admin?
0
votes
1answer
92 views

Can I query a different AD domain with the default Win7 install? [duplicate]

Background I work in an Enterprise where our Active Directory is locked down pretty tight and only Info Security has access to administer changes. I'm using a standard Win7 Enterprise x64 Service ...
0
votes
0answers
167 views

Zookeeper vs MS ActiveDirectory or LDAP

I'm currently looking for a good configuration storage, which is quite easy to integrate and maintain. As far as I see, Zookeeper is the most suitable one for Java applications. (It has a very ...
0
votes
0answers
66 views

Error with HTA reading pwdLastSet AD attribute

We have an AD domain that is at 2008 R2 levels. I have written a HTA which I use by right-clicking on a user from within AD Users & Computers and then selecting the HTA from the context menu that ...
2
votes
0answers
929 views

Winbind not enumerating users and groups of trusted domain

I'm using Samba 4.1.6-Ubuntu in Ubuntu 14.04, for authenticating users from two domains with a one-way cross-forest trust between them. Samba machine is joined to DOMAINA, while DOMAINB is the trusted ...
1
vote
2answers
579 views

apache got internal error when access ldap module

I'm installed httpd 2.4, and the /etc/httpd/conf.d/ssl.conf like WSGIScriptAlias /wsgi_app /trac/cgi-bin/wsgi_app.py <Directory /trac/cgi-bin> Require all granted ...
0
votes
1answer
96 views

Stale Computer Accounts - Active Directory

Deleted versus Disabled: I recently did a scan and found over 300 computer accounts which had not checked in to the domain for the past year or more. dsquery computer -inactive 52 -limit 0 I then ...
0
votes
0answers
25 views

log on to permission not persisting for AD domain users

I'm an active directory novice who's been thrown into the deep end helping out in an all windows environment. I'm sure there's a simple answer to this, but it has me baffled: I just don't know where ...
-1
votes
1answer
32 views

BitLocker and Active Directory

I routinely bring in my encrypted file drive to work, but the IT department seems rather incompetent here. The security policies are very lax, and I'm paranoid about the domain controller being hacked ...
0
votes
0answers
158 views

Clients have problems sending DNS requests

Some of my clients can't use internal DNS server to resolve internal addresses. All IP addresses can be pinged, but I can't ping name or name.domain.com. Restart DNS client service or ipconfig /...
4
votes
1answer
29k views

How to add Active Directory module in PowerShell in Windows 8?

I use Windows 8.1 and I try use Import-Module ActiveDirectory, but I get the following error: PS C:\Windows\system32> Import-Module ActiveDirectory Import-Module : No se cargó el módulo '...
1
vote
0answers
24 views

Windows server still reboot after recover active directory folders

My Problem: Windows server is not starting up and restart when shows the win logo. After that, i reinstall windows, reoconfigured again and execute this steps: Perform a fresh installation of ...
1
vote
0answers
168 views

samba4 acl for allowing group access to files created by a user

I've just setup samba4 as an Active Directory domain controller. (samba v4.3.0, installed on ubuntu x64) It's used in a small accounting office. The office has a number of file shares. I've given ...
1
vote
1answer
334 views

PowerShell: Automatic Join-Domain with Secure String - 'Encryption Key' Usage

I work in an enterprise environment, where I manage a lab of 75 computers. I use Ghost to image and then I walk the computers afterwards to change the PC names and SIDs. I am implementing a script ...
0
votes
0answers
74 views

Service account being used on a specific computer

We're using Active Directory at our company and is there a way to get the service account used by checking on the computer? I don't really know which service account being used so is there a way for ...
0
votes
0answers
210 views

Figure out what is locking my AD account

Some process on my machine is locking out my active directory account due to it using the old password. I've searched all the normal things (services, IIS app pool, RDP sessions, credential vault) and ...
0
votes
0answers
5 views

Automatically create Azure ADs using a list of usernames

I have a huge list of usernames to which I need to create Azure ADs, is there a way I can do this automatically instead of doing them one by one?
0
votes
1answer
369 views

file locked on shared drive by user who no longer exists

I'm really banging my head against the wall with investigating this issue, we have a shared drive with a number of documents, one such document was created in 2015 and User1 attempted to access this ...
0
votes
0answers
45 views

Windows Server DNS Configuration on Multiple Controllers and Zone Transfer

Let's assume I have two domain controllers running Windows Server 2012 in different subnets. As far as I know that version of Windows Server assume them as two masters with equal rights, so any change ...
-2
votes
3answers
7k views

LDAP query in Active directory

I am writing a LDAP query in Active Directory. I want to search a user in Active Directory in Specific OU. I run LDAP Query (&(&(objectCategory=organizationalUnit)(objectClass=...
0
votes
0answers
15 views

Active directory administrator access

Allowing hard drive C sharing is a very risky and dangerous practise How to stop administrator from accessing the shared drive $C of other users ?
1
vote
1answer
80 views

Connecting to MS SQLServer from a Linux box

I am trying to connect to MS SQLServer from an application that I have written (using Qt) which runs on Linux. Here are some details of the setup: The SQLServer box (SQLBox) is part of my domain (...
1
vote
1answer
124 views

Remote access users with passwords with active directory

We are changing our active directory policy for our users to finally have passwords. Which is good because they don't have any passwords yet. But with passwords there arises a problem with remote ...