Questions tagged [active-directory]

Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

Filter by
Sorted by
Tagged with
0 votes
0 answers
860 views

Issue after removing computer from Active Directory domain

I need some hints about an issue I faced it's a bit irritated. Let me explain the whole scenario and maybe you have some ideas behind it. One of the computers has Windows 10 LTSC 2019 x64 and it's ...
0 votes
2 answers
4k views

Ping computers when not joined to a domain

I am trying to understand windows domains. We connected a computer to the network and pulled an IP address. We were then able to ping a web server, however when we issued a GET request via a web ...
1 vote
1 answer
787 views

New Windows 10 Loses network shares

Sorry if this sounds familiar, but I have tried other solutions. I have a new Win10 machine that loses access to AD network shares. While I can access them by IP, when I access by server name I get ...
-2 votes
2 answers
2k views

How are emails related to or linked with the domain?

I have three doubts Lets consider www.amazon.com. Now amazon has employees and the employee's have an email ID ending with @amazon.com Is this because there is a domain controller in the amazon ...
0 votes
1 answer
760 views

Connecting to Active Directory remotely

This post seems to be half programming and half administration, so I'm not sure where it belongs. Neither SO nor SU seem exactly right. Feel free to redirect as appropriate. Old situation: Existing ...
1 vote
1 answer
107 views

Domain joined VM+ snapshotting

I have been using a Win 8 Hyper V VM with snapshots to test some applications I am writing in fresh environments (to ensure that it works in a non dev environment,etc) The way I use it is that I ...
2 votes
1 answer
3k views

Export all the users from an Active Directory server to CSV

I'm trying to make a command in PowerShell to export all the users from an Active Directory server to a CSV file. It should include name, last name and status. I tried running: Get-ADUser -Filter {...
2 votes
0 answers
215 views

Windows AD event to detect new administrator user

I would like to know which event ID can be monitored in order to check if an existing user or a new one become administrator. I search for 4720 and 4738 event IDs but the information displayed in the ...
0 votes
0 answers
2k views

AD: No TGT after logon

I’m investigating a domain where logon does not seem to produce a TGT. After logon with a test account, klist tgt outputs this: Current LogonId is 0:0x71647be1 Error calling API ...
1 vote
1 answer
298 views

UAC Bypass ‑ Trusted Folder Abuse (WID 4688: credwiz.exe)

I have received the following info about my active directory server 2016: Detected potentially malicious process activity ('UAC Bypass ‑ Trusted Folder Abuse ') on your host #ADservername# by ...
0 votes
1 answer
1k views

Can't use "Computers" container in active directory as object for security filtering in GPO

I want to create software deployment GPO for active directory users. Every new computer added to the active directory appear in container called "Computers" (in Active directory users and ...
8 votes
4 answers
38k views

How do I open the "Find Users, Contacts, and Groups" dialog without using Rundll32?

There is a nice dialog that helps to search for Active Directory groups in Windows called Find Users, Contacts, and Groups. Unfortunately, I only know how to open it with this command: Rundll32 ...
0 votes
0 answers
900 views

Active Directory: logon issue between different domains and management issue

I have a simple network composed by a router (no firewall) and two domain controllers for two different domains and everything is virtualized under VMWare Workstation Pro 16. The two domains are ...
0 votes
1 answer
1k views

Word or Excel Document with data from Active Directory

I am struggling in this matter. I think, there should be an easy way to create a Word or Excel Document, dynamically populating it with data from Active Directory? If I go to Data - new query - from ...
2 votes
0 answers
814 views

Active Directory using old logon script

I applied a logon script to a specific user within AD User management. Removing the script or even the file continues to run that logon script. How can I remove this? I have run gpupdate /force on all ...
0 votes
0 answers
417 views

AzureAD PowerShell - how to read CountryCode, DistinguishedName, middleName, msExchRecipientDisplayType, msRTCSIP-Line and other attributes

We are syncing on-prem AD to Azure AD using AzureADConnect and need to verify that the following attributes from on-prem AD are syncing successfully. Can you please help with the PowerShell commands, ...
0 votes
0 answers
144 views

Trouble joining my domain

An active Directory Domain Controller (AD DC) for the domain xyz.com could not be contacted. i tride to solve this but nothing when i tried to join new computer to domain show massege that domain ...
2 votes
2 answers
22k views

List an AD Group Membership using Power Query / Data Explorer

I'm trying to pull back the members of an AD distribution group using Excel's Power Query tool. Using the Active Directory data source I can query for all users on a domain. Following is the ...
0 votes
1 answer
12k views

Active Directory - Unlock Timer

If a user types in the wrong password 3 times and manages to lock themselves out of their account, how long by default does that user need to wait before they can try again? Can an admin change the ...
10 votes
6 answers
95k views

From the Active Directory Snap-In, how can I find the GUID for a user?

How ca I view the GUID associated with an Active Directory user under windows 7?
0 votes
1 answer
25 views

Enabling office 365 logins on non-azure virtual machines

I'm kind of clueless here so please bare with my mistakes. We are using Office 365 and our user accounts and resources seems to be listed in the Microsoft 365 admin page (and it looks like there is ...
1 vote
1 answer
11k views

How to get user details from another domain

Currently i am in Domain-A and i am trying to get user id details from another domain(domain-B) with below command. net user user-id /domain The request will be processed at a domain controller for ...
0 votes
1 answer
656 views

Windows not able to join local Samba Domain Controller when domain name contains public domain

I'm trying to set up a local samba domain controller in a mixed environment (Ubuntu, Linux, OSX). Domain provisioning worked as per the samba wiki, all the suggested tests succeed, joining Linux hosts ...
0 votes
1 answer
13k views

How do i execute powershell command's with pipes in python?

import subprocess subprocess.Popen('powershell.exe [Get-ADPrincipalGroupMembership %USERNAME% | select name]') os.system('powershell.exe Get-ADPrincipalGroupMembership %USERNAME% | select name]') I ...
2 votes
1 answer
2k views

Grant "Read all properties” and “Create Computer objects” permissions to a Computer object

Using a Powershell script how do I grant the "Read all properties” and “Create Computer objects” permissions to this Computer object: mylab.com/Computers/Cluster1. The permissions should be ...
1 vote
3 answers
11k views

O365 - Multifactor Auth - Access Authentication Phone via Powershell

Is is possible to get/set Authentication Phone via Powershell? I found some old documentation that says this is possible via the old MSOnline module but I cannot find anything in the new AzureAD ...
0 votes
0 answers
90 views

execute program as computer account

Given a joined Windows 8 or 10 system, how does one run some script with the credentials of the computer account? Without installing any third party tools, just a vanilla Windows install. The purpose ...
4 votes
4 answers
5k views

How to change samba user SID?

I'm trying to change the SID of various user in Samba 4.1.14 using pdbedit pdbedit --user <username> SID=<SID> I run the command but no message is displayed nor the SID is changed. How ...
0 votes
0 answers
101 views

What Windows Process / Component mounts the homeDirectory to the homeDrive?

I'm trying to understand a bit more about the Windows / AD Login Process. In Active Directory one can set a homeDrive and a homeDirectory on the User Object. The same can be set for local users in ...
0 votes
0 answers
41 views

Do I need On Prem AD if using using Azure Active Directory?

I work for a small company and we are at the point where we need to set up a domain and centrally manage resources. My question is if I could set up Azure Active Directory and manage our resources ...
0 votes
1 answer
43 views

Can windows-activated laptop can be detected when it's on through ActiveDirectory or some other way?

I know it's a long shot, but since I'm not knowledgeable enough in this matter, I'd like to hear from experts. I'd like to know when my brother's laptop is on. I don't have access to it and I don't ...
1 vote
0 answers
903 views

MapDrive via GPP with credentials

At work, one users from a specific domain (and forest) used to map netword drive via script (specified in ScriptPath attributes). All network drives are mapped via GPP, except one. Actually this ...
0 votes
0 answers
108 views

How to create user that have permission just system batch in Active Directory?

I need a create user account that have permission just systems batch in Active Directory? Specifically restrict user to execute batch files only in directory.
1 vote
1 answer
745 views

Powershell Remoting into Non-Domain server issue

Can anyone help with the following problem? I am trying to remote into a server (SVR_A) that is not part of the domain from the server (SRV_B) in a company domain. The IP address range of SRV_B is 10....
2 votes
1 answer
2k views

Moving old domain PC's domain user to new domain

I have several computers in my network involved in the situation: 2 servers: 1 "new" domain controller, and 1 old domain read-only domain controller 1 client computer logging into domain account The ...
0 votes
3 answers
2k views

How do I reset a local Windows machine password from the domain administrator login?

We're giving an old Windows 8.1 machine away to somebody who needs it and want to take it off the domain. before doing this we need to know the local administrator password. Logged in to the machine ...
0 votes
2 answers
4k views

DNS resolves without adding the host IP and name to etc/ hosts file

Is there any way to resolve a hostname without adding it to the hosts file? In order to access an internal site in my company, I have to add the hostname and IP in the .../etc/hosts file. Is there any ...
0 votes
0 answers
41 views

Active directory and folder access

Allow Active Directory userA to access folderA on Virtual Machine, when logged from computerA. Restrict access to same user and same folder, when logged from computerB. Is this possible? How?
0 votes
1 answer
20k views

Why isn't Bitlocker Recovery Password appearing in Active Directory?

Per Microsoft's recommendation, I enabled Bitlocker on a new Windows 10 VM after joining it to my local Active Directory domain. After enabling Bitlocker, I went to go check that the recovery password ...
0 votes
0 answers
513 views

How to configure DNS to join an Active Directory domain while maintaining internet access?

I have two virtual machines both running Windows Server 2019 Datacenter on my workstation. The first, lets say LIGERSERV, is an already-configured Active Directory server with a Active Directory-...
1 vote
1 answer
1k views

How can I check if a Windows account belongs to an AD group?

Is there any command or tool I can run from my desktop, not from AD server, that I can pass a Windows account and get a list of groups it belongs to? Or pass a group and see the users it contains?
0 votes
1 answer
282 views

How to use a Fingerprint Sensor to Login to windows programs that ask for a username and password?

There are Windows programs that ask for a username and password but don't allow alternatives like Fingerprint login. In my specific case, i have a POS (Point of Sales) that needs to be used by ...
3 votes
5 answers
57k views

Get only user OU from Active Directory Using Powershell/CLI

I want to get only OU of specific user. Example the command should display what OU user JOHN belongs to: USERNAME = OU_NAME
1 vote
1 answer
691 views

Bind9 as non-recursive public DNS forwarder for AD

We use Active Directory. We have two local networks in domain, one in our building and one on Amazon. We are using two domain controllers on each local network. All 4 of them are synchronized over VPN....
0 votes
0 answers
850 views

TEMP.Font Driver Host folders are created in the c:\users folder

One or two months ago we are encountering a pretty weird problem. When we log out and log in with another user a folder will be created in the c:\users folder named TEMP.Font Driver Host. If we do it ...
5 votes
6 answers
41k views

"You don't have permission to copy files to this location over the network" error

I'm trying to copy a ~5 GB file to a folder on my D:\ drive from an XP machine and getting the following error: You don't have permission to copy files to this location over the network. It then ...
0 votes
0 answers
271 views

Network share not accessible after adding new domain controller

I've got a bit of a weird one. Several users are connecting to our internal network shares from PCs that are not joined to our active directory domain. This has worked fine up until now when they are ...
0 votes
1 answer
3k views

Outlook 2016 Autodiscover AD Authentication with IMAP Password Prompt

Expected Behavior: When a user first logs into his windows user profile and loads Outlook 2016, the Outlook profile setup wizard starts, and the user is only expected to click 'next' a few times to ...
0 votes
0 answers
360 views

Change password complexity rules on GPO in windows server

I need to customize the password complexity requirement in active directory GPO. But I cannot find the way to change the password complexity in GPO. The default password complexity contains Capital ...
0 votes
1 answer
2k views

Group name and description - Powershell

I am by no means a powershell professional and could use a little guidance with something I need to accomplish. I need to generate a csv from AD that contains the following columns: Name, ...

1
3 4
5
6 7
22