Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

0
votes
2answers
317 views

How do I connect to ActiveDirectory from Windows7 running under virtualbox?

I have a MBPr and I have installed virtualbox. I setup Windows7 x64 and I can't connect to the work ActiveDirectory. on a standalone Windows machine, I can run any software as a domain user. But when ...
1
vote
1answer
196 views

Decrypting a BitLocker-ed that uses TPM

I'm looking at Dislocker but i cant figure out if a drive that is locked using TPM, but has those details stored in AD, can be opened using Dislocker. Does anyone know? EDIT: Dislocker is a linux ...
0
votes
1answer
94 views

Run command on every windows workstation

I just found out that I need to add a persistent static route to each and every workstation on my network of 80 Windows XP & Windows 7 Workstations. How do I add a persistent route to every ...
0
votes
1answer
135 views

Changing AD passwords of local account without being on company network

We've got remote users (who can VPN into our corporate network, but never actually connect to our LAN) who are on Mtn. Lion and Mavericks. If we expire their AD passwords, they can reset them through ...
0
votes
1answer
1k views

Execute one batch file on several Windows clients with active directory

For installing programs using an exotic package manager, I would like to execute until it succeed (repeated at each logon until success) a batch command one time on each computer connected to an ...
0
votes
0answers
73 views

keeping local profile a different domain user

My question is about how to log in to a machine with a (newly joined) domain user account, while keeping the local user's settings/profile which have been established by the previous domain user ...
0
votes
0answers
51 views

Disabling EFS recovery domain policy on local account

I would like my personal home folder to be protected by EFS without my domain administrator having access. I setup a separate local account so I can login with my personal microsoft account instead ...
1
vote
1answer
2k views

Login with Microsoft Account instead of Domain Account on Windows 8

Company recently issued me a surface pro 3 with windows 8. I would like to login to my personal microsoft account instead of my company issued domain account. However, after they setup my device, it ...
0
votes
1answer
230 views

Bitlocker disk encryption without admin override

I am a somewhat paranoid CTO exec that just received a Microsoft Surface with Windows 8.1 and I would like to enable disk encryption to protect my information. I know that bitlocker can be enabled to ...
1
vote
1answer
138 views

Minimum rights to access the whole Users directory on another computer

What is the minimum rights required to access the Users directory on another computer via an admin share? I have a batch file that writes some information to a few other computers using a path of ...
1
vote
1answer
155 views

UPN vs DOMAIN\USER signin

What is the difference between using user@zone.domain.tld over DOMAIN\USER? Does the difference come in to play the bigger the AD/business network is? For my setup I have now I can use either/or and ...
0
votes
0answers
403 views

GPO to configure “Ignore other applications that use Dynamic Data Exchange (DDE)”

Using excel 2013 (office 2013 32-bit per MS recommendation) on Win7Pro 64bit in a 2008R2 64bit AD domain. When trying to open an excel 2013 document getting the errorbox "There was a problem sending ...
0
votes
0answers
24 views

Should we load smaller subnets into Active Directory

Our network team is splitting up the subnets in each of our offices from /16 and /18 subnets to multiple /24 subnets. Our systems team is not changing Active Directory sites and services to replicate ...
0
votes
1answer
506 views

Query site for given ip from AD sites and services

Windows Active Directory maintains a list of subnet to sites assignments (in "Active Directory - Sites and Services" -> Sites -> Subnets). The subnet-to-site associationas ar used, obviously, by ...
0
votes
0answers
871 views

Powershell script to add user to active directory and set static IP

I have seen other similar questions but I am looking to fully automate the process and all of the examples I have found up until now are missing pieces that I need. Also, this is the first poweshell ...
0
votes
1answer
243 views

Cache Group Policies for AD Group

I administrate number of Windows 7 machines frozen using Faronics Deep Freeze. Because these machines are kept frozen they do not cache group policies. So every time a user logs in after a reboot ...
1
vote
1answer
51 views

Automatically log in a user once after connecting to a domain

I am using a script to connect 140+ workstations to a domain. These workstations are primarily Windows 7 but there are a few XP stations thrown into the mix. They were previously part of a workgroup ...
0
votes
0answers
45 views

How can I restrict a user in an AD environment only to have vpn access but no directory share rights?

I'm trying to restrict an AD account to only have vpn access rights but no domain user rights. Can it be done or should I try something out of windows server's boundaries? We are using a Fortigate ...
0
votes
1answer
135 views

Starting the Citrix Desktop Service once a specific user logs in

I am working on a package to be released into an enterprise environment which needs to have the Citrix Desktop Service in a suspended state post deployment from CM. In suspending the service post ...
0
votes
1answer
345 views

Customizing AD Users and Computers snap-in

We are looking at using the departmentNumber attribute for our users in Active Directory. Easy enough for admins to edit this attribute using the Attribute Editor tab with AD Users and Computers ...
1
vote
1answer
162 views

Terminal command to include currently logged on user

I am trying to write a script that makes our network (active directory) users local administrator on their macs. I have the script that will do this: dseditgroup -o edit -n /Local/Default -a ...
0
votes
1answer
4k views

Active Directory Allow User to Install Only

On my active directory network, I want to satisfy my boss by giving him semi-administrative permissions that will allow him to Install programs as administrator in emergency situations on all ...
1
vote
2answers
283 views

Active Directory - Deploying Wallpaper / GPO “Files” Permissions

I have tried to deploy wallpaper with active directory and it seems everything is working, up until the point where the image seems to have permission issues. At first I thought it was the image, but ...
0
votes
1answer
30 views

Share a folder without admin credential

In our domain, users have "User" permission level, every time some user want to share a folder it will be prompt admin credential to finish, is there a way to allow domain users to freely share ...
1
vote
3answers
4k views

Is there any trick to join and use Windows 8/8.1 with Samba 4 (4.1.6)?

It seems that Samba doesn't like me at all. I've followed various tutorials and I can't get Windows 8 to work properly with a Ubuntu Server as domain controller. This week i've downloaded ubuntu 14.04 ...
1
vote
3answers
86 views

Active Directory - GPO Will Not Apply to Group of Machines

I created a GPO to create a few rules for a set of computers, but no matter what I do, running "gpresult /r" yields "Filtering: Denied (Security)" as admin, or if I'm a regular user, it just doesn't ...
2
votes
2answers
3k views

Active Directory in a home environment?

I have two questions for you all... If I had a standard home router (Netgear R6300) and was looking at running a basic home domain using Active Directory as the domain controller. 1) How do I go ...
0
votes
1answer
524 views

Windows 2012 Domain Controller NETLOGON error

We have Sonicwall firewall user authentication System active since last two months. We have Windows 2012 Active directory server setup with around 1400 user account created. These accounts were ...
1
vote
0answers
55 views

Microsoft Digital Signature Expiration in Active Directory

We have a large number of users on our network that need to sign forms digitally from time to time with Microsoft digital signatures that are set up to expire each year. Some of our users however are ...
-2
votes
2answers
6k views

client pc install software without administrative rights [closed]

I've a PC installed Win 7 and it is on AD domain network. I can just logon as client user, cannot logon as AD admin or local admin. So i cannot install any software. I've talked to my IT department ...
0
votes
1answer
83 views

Windows 7 box joined to domain but unable to search domain locations for users

I've been experiencing an odd issue on a Windows 7 box joined to our Windows Server 2008 AD domain. I've been trying to add a local admin to the box while logged as in my domain admin user. However, ...
0
votes
1answer
436 views

Internal LAN Based Chat/Messenger with LDAP/Active Directory Auth

Are there any options out there for an internal chat messenger that offers logging in with an AD account? I've found some options out there for internal chat messengers but none seem to support AD.
0
votes
1answer
162 views

How do Active Directory accounts work off network

When you take a laptop off the business network how does one login if you use Active Directory accounts to access the machine. Are profiles cached after first logging in?
1
vote
0answers
95 views

Cleaning out AD Roaming Profile Cache

I've been playing around with AD RPs after watching some videos and they mentioned that you end up with a lot of disk space being filled due to cache and files being copied over from the server where ...
0
votes
1answer
51 views

Windows 2003R2 Primary DC not transferring roles

I inherited a Windows 2003 R2 Domain Controller and to ensure I have resiliency, I added a second DC as Additional DC with DNS. Now I shutdown the Primary DC but for unknown reasons, the FSMO roles ...
0
votes
1answer
582 views

Piping with PowerShell in Office 365 Exchange and on-premises AD

We have a local AD domain synced with Exchange Online in Office 365. I am trying to use PowerShell to get information that I need but keep getting an error and can’t seem to get the commands to work ...
2
votes
1answer
54 views

How to extract Active Directory configuration?

Is there a tool to extract AD configuration, which can be used later to perform technical configuration security audit without having any interaction with the machine that contain the AD?
2
votes
1answer
79 views

How long until disabling a logged on user takes effect?

I have asked the admin sitting next to me to change my password and disable my account. He did that 15 minutes ago and I am still browsing the network shares. I haven't logged off yet, but I want to ...
2
votes
1answer
5k views

Mac OS X 10.8 not binding to Windows domain

I have five iMacs with OSX 10.8.5. Two of the iMacs are binding to Windows domain server (2012) successfully. But I can’t bind remaining three iMac machines, and it is showing authentication error ...
0
votes
0answers
45 views

Active Directory: Swap two users' home folders

I have an AD domain w/ some users. Each user has a home folder that's on a shared network drive. Due to a silly situation, two users have been using each other's accounts for a long time (including ...
0
votes
1answer
32 views

Windows 2003 VM drops out of domain

A customer of ours is cloning a domain-joined Windows 2003 VM, changes its IP but leaves it with the same hostname (using sysprep). It still retains connectivity to the same domain controller. What ...
1
vote
0answers
47 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
2
votes
0answers
25 views

GPO printer allocation

scenario: AD domain with multiple remote OUs with fairly robust communications. I allocate printers per location via GPO. Some of the Work Stations in the OU allocate the printers on login (5 of ...
1
vote
0answers
346 views

How to enable entering username in Zorin OS

I have joined my zorin os (v8) to a domain. But I can not find how to enable entering usernames on the logon screen. How do you enable this feature?
0
votes
0answers
307 views

Trying to lock down cells in excel & office 365

We have only sharepoint, office 365, excel 2013 - no domain. I'm trying to lock down specific columns in an excel sheet. When I click on 'Permissions' in 'Allow users to Edit Ranges' I type in a ...
0
votes
1answer
905 views

PowerShell - IF statement case insensitive?

I am trying to write a PowerShell script that will cycle through the ProxyAddresses for all of my AD user objects. If a user has a SMTP address with USER@DOMAIN.LOCAL, I want it to check if they also ...
0
votes
1answer
73 views

Why would an organization use a single, *common* Active Directory account for all staff who use a multifunction photocopier? [closed]

At a company I used to work for they had some high-end multifunction Panasonic digital photocopiers (fax/scanner/printer/photocopy etc.) used by approximately 150 staff. For some reason, despite ...
4
votes
2answers
3k views

How do I use (O365) Exchange Online custom attributes (1 to 15) when I have directory sync enabled and no exchange installed on-premises?

Here is my setup: Active Directory on premises - with no Exchange installed. DirSync tool to sync all users to Office 365 Now, I need to use CustomAttributes in Exchange - here is where the ...
1
vote
0answers
247 views

Bitlocker Will Not Encrypt on Fixed-Data Drive

I have recently encrypted my system (C:) drive, using Bitlocker, on my W7 Enterprise box. This machine is not associated with a domain. I would like to encrypt my remaining fixed data drives, as well. ...
1
vote
0answers
107 views

Is it possible to allow a user of Domain A to write to Domain B fileshare without a trust relationship?

I'm currently working with two Windows 2008 servers, each running on completely separate domains with no possibility of setting up a trust relationship between them. What I need to find a way of ...