Questions tagged [active-directory]
Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard. Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.
1,094
questions
0
votes
0
answers
860
views
Issue after removing computer from Active Directory domain
I need some hints about an issue I faced it's a bit irritated.
Let me explain the whole scenario and maybe you have some ideas behind it.
One of the computers has Windows 10 LTSC 2019 x64 and it's ...
0
votes
2
answers
4k
views
Ping computers when not joined to a domain
I am trying to understand windows domains. We connected a computer to the network and pulled an IP address. We were then able to ping a web server, however when we issued a GET request via a web ...
1
vote
1
answer
787
views
New Windows 10 Loses network shares
Sorry if this sounds familiar, but I have tried other solutions.
I have a new Win10 machine that loses access to AD network shares. While I can access them by IP, when I access by server name I get ...
-2
votes
2
answers
2k
views
How are emails related to or linked with the domain?
I have three doubts Lets consider www.amazon.com. Now amazon has employees and the employee's have an email ID ending with @amazon.com
Is this because there is a domain controller in the amazon ...
0
votes
1
answer
760
views
Connecting to Active Directory remotely
This post seems to be half programming and half administration, so I'm not sure where it belongs. Neither SO nor SU seem exactly right. Feel free to redirect as appropriate.
Old situation:
Existing ...
1
vote
1
answer
107
views
Domain joined VM+ snapshotting
I have been using a Win 8 Hyper V VM with snapshots to test some applications I am writing in fresh environments (to ensure that it works in a non dev environment,etc)
The way I use it is that I ...
2
votes
1
answer
3k
views
Export all the users from an Active Directory server to CSV
I'm trying to make a command in PowerShell to export all the users from an Active Directory server to a CSV file. It should include name, last name and status.
I tried running:
Get-ADUser -Filter {...
2
votes
0
answers
215
views
Windows AD event to detect new administrator user
I would like to know which event ID can be monitored in order to check if an existing user or a new one become administrator.
I search for 4720 and 4738 event IDs but the information displayed in the ...
0
votes
0
answers
2k
views
AD: No TGT after logon
I’m investigating a domain where logon does not seem to produce a TGT.
After logon with a test account, klist tgt outputs this:
Current LogonId is 0:0x71647be1
Error calling API ...
1
vote
1
answer
298
views
UAC Bypass ‑ Trusted Folder Abuse (WID 4688: credwiz.exe)
I have received the following info about my active directory server 2016:
Detected potentially malicious process activity ('UAC Bypass ‑ Trusted
Folder Abuse ') on your host #ADservername# by ...
0
votes
1
answer
1k
views
Can't use "Computers" container in active directory as object for security filtering in GPO
I want to create software deployment GPO for active directory users. Every new computer added to the active directory appear in container called "Computers" (in Active directory users and ...
8
votes
4
answers
38k
views
How do I open the "Find Users, Contacts, and Groups" dialog without using Rundll32?
There is a nice dialog that helps to search for Active Directory groups in Windows called Find Users, Contacts, and Groups.
Unfortunately, I only know how to open it with this command:
Rundll32 ...
0
votes
0
answers
900
views
Active Directory: logon issue between different domains and management issue
I have a simple network composed by a router (no firewall) and two domain controllers for two different domains and everything is virtualized under VMWare Workstation Pro 16.
The two domains are ...
0
votes
1
answer
1k
views
Word or Excel Document with data from Active Directory
I am struggling in this matter. I think, there should be an easy way to create a Word or Excel Document, dynamically populating it with data from Active Directory?
If I go to Data - new query - from ...
2
votes
0
answers
814
views
Active Directory using old logon script
I applied a logon script to a specific user within AD User management. Removing the script or even the file continues to run that logon script. How can I remove this?
I have run gpupdate /force on all ...
0
votes
0
answers
417
views
AzureAD PowerShell - how to read CountryCode, DistinguishedName, middleName, msExchRecipientDisplayType, msRTCSIP-Line and other attributes
We are syncing on-prem AD to Azure AD using AzureADConnect and need to verify that the following attributes from on-prem AD are syncing successfully. Can you please help with the PowerShell commands, ...
0
votes
0
answers
144
views
Trouble joining my domain
An active Directory Domain Controller (AD DC) for the domain xyz.com could not be contacted.
i tride to solve this but nothing when i tried to join new computer to domain show massege that domain ...
2
votes
2
answers
22k
views
List an AD Group Membership using Power Query / Data Explorer
I'm trying to pull back the members of an AD distribution group using Excel's Power Query tool.
Using the Active Directory data source I can query for all users on a domain. Following is the ...
0
votes
1
answer
12k
views
Active Directory - Unlock Timer
If a user types in the wrong password 3 times and manages to lock themselves out of their account, how long by default does that user need to wait before they can try again?
Can an admin change the ...
10
votes
6
answers
95k
views
From the Active Directory Snap-In, how can I find the GUID for a user?
How ca I view the GUID associated with an Active Directory user under windows 7?
0
votes
1
answer
25
views
Enabling office 365 logins on non-azure virtual machines
I'm kind of clueless here so please bare with my mistakes.
We are using Office 365 and our user accounts and resources seems to be listed in the Microsoft 365 admin page (and it looks like there is ...
1
vote
1
answer
11k
views
How to get user details from another domain
Currently i am in Domain-A and i am trying to get user id details from another domain(domain-B) with below command.
net user user-id /domain
The request will be processed at a domain controller for ...
0
votes
1
answer
656
views
Windows not able to join local Samba Domain Controller when domain name contains public domain
I'm trying to set up a local samba domain controller in a mixed environment (Ubuntu, Linux, OSX).
Domain provisioning worked as per the samba wiki, all the suggested tests succeed, joining Linux hosts ...
0
votes
1
answer
13k
views
How do i execute powershell command's with pipes in python?
import subprocess
subprocess.Popen('powershell.exe [Get-ADPrincipalGroupMembership %USERNAME% | select name]')
os.system('powershell.exe Get-ADPrincipalGroupMembership %USERNAME% | select name]')
I ...
2
votes
1
answer
2k
views
Grant "Read all properties” and “Create Computer objects” permissions to a Computer object
Using a Powershell script how do I grant the "Read all properties” and “Create Computer objects” permissions to this Computer object: mylab.com/Computers/Cluster1. The permissions should be ...
1
vote
3
answers
11k
views
O365 - Multifactor Auth - Access Authentication Phone via Powershell
Is is possible to get/set Authentication Phone via Powershell? I found some old documentation that says this is possible via the old MSOnline module but I cannot find anything in the new AzureAD ...
0
votes
0
answers
90
views
execute program as computer account
Given a joined Windows 8 or 10 system, how does one run some script with the
credentials of the computer account? Without installing any third
party tools, just a vanilla Windows install.
The purpose ...
4
votes
4
answers
5k
views
How to change samba user SID?
I'm trying to change the SID of various user in Samba 4.1.14 using pdbedit
pdbedit --user <username> SID=<SID>
I run the command but no message is displayed nor the SID is changed.
How ...
0
votes
0
answers
101
views
What Windows Process / Component mounts the homeDirectory to the homeDrive?
I'm trying to understand a bit more about the Windows / AD Login Process.
In Active Directory one can set a homeDrive and a homeDirectory on the User Object. The same can be set for local users in ...
0
votes
0
answers
41
views
Do I need On Prem AD if using using Azure Active Directory?
I work for a small company and we are at the point where we need to set up a domain and centrally manage resources. My question is if I could set up Azure Active Directory and manage our resources ...
0
votes
1
answer
43
views
Can windows-activated laptop can be detected when it's on through ActiveDirectory or some other way?
I know it's a long shot, but since I'm not knowledgeable enough in this matter, I'd like to hear from experts.
I'd like to know when my brother's laptop is on. I don't have access to it and I don't ...
1
vote
0
answers
903
views
MapDrive via GPP with credentials
At work, one users from a specific domain (and forest) used to map netword drive via script (specified in ScriptPath attributes). All network drives are mapped via GPP, except one. Actually this ...
0
votes
0
answers
108
views
How to create user that have permission just system batch in Active Directory?
I need a create user account that have permission just systems batch in Active Directory? Specifically restrict user to execute batch files only in directory.
1
vote
1
answer
745
views
Powershell Remoting into Non-Domain server issue
Can anyone help with the following problem?
I am trying to remote into a server (SVR_A) that is not part of the domain from the server (SRV_B) in a company domain.
The IP address range of SRV_B is 10....
2
votes
1
answer
2k
views
Moving old domain PC's domain user to new domain
I have several computers in my network involved in the situation:
2 servers: 1 "new" domain controller, and 1 old domain read-only domain controller
1 client computer logging into domain account
The ...
0
votes
3
answers
2k
views
How do I reset a local Windows machine password from the domain administrator login?
We're giving an old Windows 8.1 machine away to somebody who needs it and want to take it off the domain. before doing this we need to know the local administrator password.
Logged in to the machine ...
0
votes
2
answers
4k
views
DNS resolves without adding the host IP and name to etc/ hosts file
Is there any way to resolve a hostname without adding it to the hosts file?
In order to access an internal site in my company, I have to add the hostname and IP in the .../etc/hosts file. Is there any ...
0
votes
0
answers
41
views
Active directory and folder access
Allow Active Directory userA to access folderA on Virtual Machine, when logged from computerA. Restrict access to same user and same folder, when logged from computerB. Is this possible? How?
0
votes
1
answer
20k
views
Why isn't Bitlocker Recovery Password appearing in Active Directory?
Per Microsoft's recommendation, I enabled Bitlocker on a new Windows 10 VM after joining it to my local Active Directory domain. After enabling Bitlocker, I went to go check that the recovery password ...
0
votes
0
answers
513
views
How to configure DNS to join an Active Directory domain while maintaining internet access?
I have two virtual machines both running Windows Server 2019 Datacenter on my workstation. The first, lets say LIGERSERV, is an already-configured Active Directory server with a Active Directory-...
1
vote
1
answer
1k
views
How can I check if a Windows account belongs to an AD group?
Is there any command or tool I can run from my desktop, not from AD server, that I can pass a Windows account and get a list of groups it belongs to?
Or pass a group and see the users it contains?
0
votes
1
answer
282
views
How to use a Fingerprint Sensor to Login to windows programs that ask for a username and password?
There are Windows programs that ask for a username and password but don't allow alternatives like Fingerprint login.
In my specific case, i have a POS (Point of Sales) that needs to be used by ...
3
votes
5
answers
57k
views
Get only user OU from Active Directory Using Powershell/CLI
I want to get only OU of specific user.
Example the command should display what OU user JOHN belongs to:
USERNAME = OU_NAME
1
vote
1
answer
691
views
Bind9 as non-recursive public DNS forwarder for AD
We use Active Directory. We have two local networks in domain, one in our building and one on Amazon. We are using two domain controllers on each local network. All 4 of them are synchronized over VPN....
0
votes
0
answers
850
views
TEMP.Font Driver Host folders are created in the c:\users folder
One or two months ago we are encountering a pretty weird problem.
When we log out and log in with another user a folder will be created in the c:\users folder named TEMP.Font Driver Host. If we do it ...
5
votes
6
answers
41k
views
"You don't have permission to copy files to this location over the network" error
I'm trying to copy a ~5 GB file to a folder on my D:\ drive from an XP machine and getting the following error:
You don't have permission to copy files to this location over the network.
It then ...
0
votes
0
answers
271
views
Network share not accessible after adding new domain controller
I've got a bit of a weird one. Several users are connecting to our internal network shares from PCs that are not joined to our active directory domain. This has worked fine up until now when they are ...
0
votes
1
answer
3k
views
Outlook 2016 Autodiscover AD Authentication with IMAP Password Prompt
Expected Behavior:
When a user first logs into his windows user profile and loads Outlook 2016, the Outlook profile setup wizard starts, and the user is only expected to click 'next' a few times to ...
0
votes
0
answers
360
views
Change password complexity rules on GPO in windows server
I need to customize the password complexity requirement in active directory GPO. But I cannot find the way to change the password complexity in GPO. The default password complexity contains
Capital ...
0
votes
1
answer
2k
views
Group name and description - Powershell
I am by no means a powershell professional and could use a little guidance with something I need to accomplish.
I need to generate a csv from AD that contains the following columns:
Name, ...