Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

1
vote
1answer
797 views

User with local admin privileges on a DC Win 2008 AD domain

I have a Windows Server 2008 AD domain, with 2 domain controllers, one with Windows Server 2008, the other with Windows Server 2008 R2. The second is the main DC. I'd like to create a user who is a ...
0
votes
0answers
241 views

RPC server is unavailable 0x800706BA, while updating password for user in active directory

I am using System.DirectoryServices.AccountManagement apis to create a new user/disable an account in Active Directory. When i am trying to create a new user, and set its password, m/c throws an ...
0
votes
1answer
4k views

getent passwd outputs only local users

I want to authenticate via Active Directory on a CentOS 6.4 server. wbinfo -u and wbinfo -g display the domain users/groups. Authentication via wbinfo -a DOMAIN+user works. Authentication via kinit ...
0
votes
1answer
106 views

In OS X 10.8.4 what are the standand user accounts that should be in directory utility

I believe I have some malware or virus on my os x 10.8 computer. I need to know what the list of user accounts and groups are the ones that come on a standard install of Mountain Lion in the Open ...
0
votes
3answers
86 views

Windows 7 Lockout

I just changed my domain password and now my account keeps getting locked out. There must be some process on my machine that attempting to authenticate with incorrect credentials. How can I find out ...
0
votes
1answer
128 views

Permissions assigned to Domain Users do not propagate

We use Microsoft Windows 2008 Server as our DCs, and use group policies to distribute access to network shares, software packages etc. Distribution of software packages is done throught LANDesk ...
0
votes
1answer
75 views

How can I limit an Active Directory user to only use mstsc

I would like to create a domain user with the sole permission to run the MSTSC program, or activate RDP from a desktop icon. I don't want that user to be able to do anything else on the server he ...
0
votes
2answers
311 views

ldapsearch fails with umlaut in base container

I have an ou named München in my LDAP (active directory, to be precise). To search for it, I have to enter the umlaut as \C3\BC of course, but at least the ou exists as this proves: $ ldapsearch -D ...
-1
votes
1answer
127 views

What are the specific names for the various username formats in Windows?

When windows users are prompted to enter their username, they can usually specify it in a variety of formats: username username@activedirectorydomain.example addomain\username What are the ...
0
votes
2answers
1k views

How to block an IP address from a network share

I have to share a set of .docx files from my computer. They are set so that administrators have full control over the shares, and "everyone" has access to read and execute them. I need to find a way ...
1
vote
1answer
70 views

OS X VirtualBox hosting Windows VM as guest: Can the Windows VM be joined to an Active Directory domain?

If so, how? Do I need to do any configuration on OS X itself or should VirtualBox network drivers handle this OOB? I do not have the ability to test this at the moment, which is why I am asking. ...
1
vote
0answers
177 views

Active Directory - Trust Relationship Error

Early in the morning, I have a computer which consistently can't be logged in to. When I try to login, I get the following error message: The trust relationship between this workstation and the ...
0
votes
1answer
442 views

Event ID 91 — AD CS Active Directory Domain Services Connection

I have installed AD CA and I am getting this error(Event ID 91) : A connection to Active Directory Directory Services could not be established. Active Directory Certificate Services will try to ...
0
votes
1answer
1k views

List an AD Group Membership using Power Query / Data Explorer

I'm trying to pull back the members of an AD distribution group using Excel's Power Query tool. Using the Active Directory data source I can query for all users on a domain. Following is the ...
1
vote
2answers
1k views

Find the Distinguished Name from a Bind DN

I don't know if my question title even made sense - but let me explain. When you do an LDAP query, you (apparently) are supposed to specify a DN in the Bind to "login" to the LDAP server. When I do ...
1
vote
1answer
435 views

How was this value of ObjectGUID encoded?

An application stores the objectGUID of a user's MSAD entry internally as: msad://OBJECTGUID=\5c\78\33\6d\77\d8\df\44\80\07\d2\77\da\d5\c5\69?USER Below are the Uids I see when I pull the user's ...
0
votes
0answers
609 views

One user on our domain cannot login on his original PC only;

So a user says he went out to lunch and afterwards could not log into his PC. It just hangs whereas it actually does log in in safe mode and other accounts like my admin on the domain also can log in. ...
0
votes
1answer
419 views

How to enable the WMI service on many machines to find MS-Office licenses using the Volume Activation Management Tool 2.0 using Active Directory?

I installed the Volume Activation Management Tool 2.0 from Microsoft to scan all the computers on my network to find out how many valid MS Office licenses we have installed on all of the machines. ...
0
votes
0answers
132 views

Is it possible to set up a raspberry pi with an Active Directory account?

We are looking at various ways of giving our raspberry pis access to our network and I was wondering if it was possible to give a Pi an active directory account so it can log on to a windows network?
0
votes
1answer
162 views

How long can a workstation be not connect to domain before getting locked out?

I used a personal laptop at a company for a while and the laptop was joined to their domain. I have since left the company and the laptop is home with me. I heavily use the domain profile that was ...
1
vote
1answer
36 views

Is it possible to set an SPN with a path?

I'd like to know, if it is possible to set an SPN with non root url as something like that: setspn -U -A http/www.example.com/someApp/path/ someServiceUser So that different applications running in ...
2
votes
1answer
129 views

Default trust relationship between domains in a forest?

Can somebody clarify that all domains, child domains, subsubdomain all trust each other two way if in the same forest by default?
1
vote
0answers
736 views

Windows Azure Directory Sync Generic Failure

Ok so I have a domain that I want to sync to Office365 but when I start the Windows Azure Active Directory Sync tool Configuration Wizard I get an error with the following details: ...
1
vote
0answers
247 views

Windows Azure AD Sync Tool - Credentials of the supplied user do not map to a forest

I'm having problems with the Windows Azure Active Directory Sync Tool and Office 365. We did have it set up correctly and was working for about 2 months. Today, the VM it was running on destroyed ...
7
votes
1answer
20k views

How can I find out which user groups my domain user belongs to? [duplicate]

Running Windows 7 on my work PC, how can I check which groups I am a part of on the domain from my PC? I know how to check the local groups using MMC (Microsoft Management Console), just not the ...
1
vote
0answers
99 views

Active Directory Auto Logoff Timer

I'm experimenting with an Active Directory Domain at home (Win Server 2012 Domain Controller). After joining my Windows 8 Pro (x64) PC to my domain, I am getting automatically logged off after being ...
0
votes
1answer
57 views

How can I add a computer to a local AD?

I have AD running on a box in my network, its setup with foo.local AD (locally). Im now trying to add another computer (running win7 ult) but when I try to add the computer to domain it shows an error ...
2
votes
2answers
255 views

How can I tell if an active directory group is a security or distribution group?

I need to check if an active directory group is a security or distribution group. As somebody who doesn't know much about active directory - how do I go about doing this?
0
votes
1answer
242 views

How to force a virtual machine to uncache windows domain credentials

I have a Windows 8 host (latest patches) in an AD domain. a windows 7 (latest patches) virtualbox VM also within the the same domain The issue is that I've been through 2 password change cycles ...
0
votes
1answer
207 views

Cannot Find A Group Policy That I'd Like To Disable

There's an Active Directory group policy specific to Google Chrome in place to enforce: startup URLs blocking auto-updating (locking to a particular version) This policy writes entries to ...
0
votes
0answers
1k views

Disable USB mass storage via group policy based on the time of day?

I would like to disable USB mass storage for a group of users during specific hours of the day (lets say, 9AM to 5PM). I know that with Windows Server 2008, there is a group policy that will disable ...
-1
votes
1answer
40 views

How to control replication?

I want to disable replication of the user's first name attribute. That is Whenever I change its value, it should not be replicated. How can I do that?
1
vote
2answers
455 views

find number of groups assigned to a user

Is there a way to find the number of groups assigned to a user in linux? as of right now i have: foo : foo bar apple users An app I use may have given a user a group of "apple users" but I cant ...
0
votes
1answer
325 views

Active Directory - Unlock Timer

If a user types in the wrong password 3 times and manages to lock themselves out of their account, how long by default does that user need to wait before they can try again? Can an admin change the ...
0
votes
1answer
318 views

Will nslookup work without configuring reverse lookup?

I have empty reverse lookup entries in my active directory DNS server. But nslookup is working fine even if i give "*nslookup ip_address*". How can it resolve the ip_address to Some FQN without ...
2
votes
1answer
604 views

I don't understand groups and permissions in Active Directory

I'm playing with permissions and noticed the following situation I don't understand. The PC PC-EXAMPLE is a part of a domain, let's say DOMAIN (domain.com) and the currently logged on user is ...
1
vote
2answers
123 views

Password Expiration in active directory

In the domain of our organisation there is a server, which has "password max age" enabled, which forces the users to regulary change their passswords. The Server seems to cache the old passwords, so ...
3
votes
1answer
8k views

Query Members of an Active Directory Group

So in active directory, there is a group called WebSiteUsers that is being used to permit access to a folder I am hosting via IIS. I was wondering (using DSQuery, ADFind or any freely available ...
0
votes
1answer
827 views

Does Microsoft Virtual Desktop Infrastructure (VDI) require Active Directory (AD) to run?

Can I set up a VDI with 1 server and many thin clients without setting up Active Directory with a domain controller? I want to make the thin client setup as easy as possible, i.e. get any Windows PC ...
1
vote
2answers
273 views

Where does MSAD LDAP store the credentials used to authenticate users?

I can browse the user details of an existing LDAP directory using a bind DN and bind password. I cannot find any entry storing the users password. Is it possible that password attributes are hidden ...
-1
votes
3answers
195 views

Binding Outlook to Active Directory users [closed]

I currently have a small business network set up. Running SBS 2011, and Windows 7. I apologize for my minimal knowledge of the subject, but I am looking for a way to have Outlook connected to each ...
1
vote
1answer
85 views

Running Network-Reliant Processes on Startup

I'm in charge of deploying and modifying a bit of in-house software that is meant to run on end-user workstations, which run either Windows 7 or XP SP3. The goal is to maximize the amount of time the ...
0
votes
2answers
29 views

How to PreStore Active Directory Profiles

As commonly known, on a Windows computer connected to a domain, when a user logs into a workstation their profile is stored on the local machine in case connectivity to all domain controllers is lost ...
0
votes
0answers
56 views

Local System Restricted via GPO in Microsoft OS

If there is a way, to deny local-system on a client machine to stop services with GPO?. The client is in a domain. Example, making a anti-virus service that can't be disabled by local-system. I ...
0
votes
1answer
2k views

How do I change the username and the userprofile path of a domain user?

I have run into an issue with a piece of software we are using where users with a single quote ' in their name is causing the application to crash. I contacted support for the application and they ...
1
vote
0answers
139 views

Configuration of mod_authnz_ldap to work with Active Directory

Please help to find a good tutorial / step by step instructions how to configure mod_authnz_ldap to work with Active Directory (I use Apache 2.2). Apache provides good documentation, but I want to ...
0
votes
2answers
1k views

Windows 7 user profile resetted at each login

After uninstalling and reinstalling a (buggy) software I'm working on, the following has happened: When I rebooted and logged in the first time, the whole of my Users folder was wiped out: ...
2
votes
1answer
2k views

Find out my bind DN in a Windows network

I am in a windows network and want to use Linux' LDAP search. For this I need to find out my DN. I am already logged in on a Windows computer using Outlook to the exchange server and this one seems ...
1
vote
1answer
197 views

X-Terminals don't show UTF-8 character correctly when using Likewise-Open authentification

I have this really weird problem with X terminal emulators. I want to use UTF-8 and it works everywhere else in my system, but not in graphical terminals. When I start e.g. Urxvt and press öäå-keys it ...
0
votes
1answer
130 views

If I virtualise my work laptop can I use both the virtualised and physical instances [closed]

I'm quite keen to virtualise my work laptop so that I can leave my work device in my bag when I get home and fire up my much nicer and more powerful home PC to continue my work. I know this isn't a ...