Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

1
vote
1answer
6k views

getent passwd outputs only local users

I want to authenticate via Active Directory on a CentOS 6.4 server. wbinfo -u and wbinfo -g display the domain users/groups. Authentication via wbinfo -a DOMAIN+user works. Authentication via kinit ...
0
votes
1answer
113 views

In OS X 10.8.4 what are the standand user accounts that should be in directory utility

I believe I have some malware or virus on my os x 10.8 computer. I need to know what the list of user accounts and groups are the ones that come on a standard install of Mountain Lion in the Open ...
0
votes
3answers
90 views

Windows 7 Lockout

I just changed my domain password and now my account keeps getting locked out. There must be some process on my machine that attempting to authenticate with incorrect credentials. How can I find out ...
0
votes
1answer
160 views

Permissions assigned to Domain Users do not propagate

We use Microsoft Windows 2008 Server as our DCs, and use group policies to distribute access to network shares, software packages etc. Distribution of software packages is done throught LANDesk ...
0
votes
1answer
102 views

How can I limit an Active Directory user to only use mstsc

I would like to create a domain user with the sole permission to run the MSTSC program, or activate RDP from a desktop icon. I don't want that user to be able to do anything else on the server he ...
0
votes
2answers
467 views

ldapsearch fails with umlaut in base container

I have an ou named München in my LDAP (active directory, to be precise). To search for it, I have to enter the umlaut as \C3\BC of course, but at least the ou exists as this proves: $ ldapsearch -D ...
-1
votes
1answer
167 views

What are the specific names for the various username formats in Windows?

When windows users are prompted to enter their username, they can usually specify it in a variety of formats: username username@activedirectorydomain.example addomain\username What are the ...
0
votes
2answers
2k views

How to block an IP address from a network share

I have to share a set of .docx files from my computer. They are set so that administrators have full control over the shares, and "everyone" has access to read and execute them. I need to find a way ...
1
vote
1answer
91 views

OS X VirtualBox hosting Windows VM as guest: Can the Windows VM be joined to an Active Directory domain?

If so, how? Do I need to do any configuration on OS X itself or should VirtualBox network drivers handle this OOB? I do not have the ability to test this at the moment, which is why I am asking. ...
1
vote
0answers
240 views

Active Directory - Trust Relationship Error

Early in the morning, I have a computer which consistently can't be logged in to. When I try to login, I get the following error message: The trust relationship between this workstation and the ...
0
votes
1answer
539 views

Event ID 91 — AD CS Active Directory Domain Services Connection

I have installed AD CA and I am getting this error(Event ID 91) : A connection to Active Directory Directory Services could not be established. Active Directory Certificate Services will try to ...
0
votes
1answer
2k views

List an AD Group Membership using Power Query / Data Explorer

I'm trying to pull back the members of an AD distribution group using Excel's Power Query tool. Using the Active Directory data source I can query for all users on a domain. Following is the ...
1
vote
2answers
2k views

Find the Distinguished Name from a Bind DN

I don't know if my question title even made sense - but let me explain. When you do an LDAP query, you (apparently) are supposed to specify a DN in the Bind to "login" to the LDAP server. When I do ...
1
vote
1answer
655 views

How was this value of ObjectGUID encoded?

An application stores the objectGUID of a user's MSAD entry internally as: msad://OBJECTGUID=\5c\78\33\6d\77\d8\df\44\80\07\d2\77\da\d5\c5\69?USER Below are the Uids I see when I pull the user's ...
0
votes
0answers
814 views

One user on our domain cannot login on his original PC only;

So a user says he went out to lunch and afterwards could not log into his PC. It just hangs whereas it actually does log in in safe mode and other accounts like my admin on the domain also can log in. ...
0
votes
1answer
622 views

How to enable the WMI service on many machines to find MS-Office licenses using the Volume Activation Management Tool 2.0 using Active Directory?

I installed the Volume Activation Management Tool 2.0 from Microsoft to scan all the computers on my network to find out how many valid MS Office licenses we have installed on all of the machines. ...
0
votes
0answers
147 views

Is it possible to set up a raspberry pi with an Active Directory account?

We are looking at various ways of giving our raspberry pis access to our network and I was wondering if it was possible to give a Pi an active directory account so it can log on to a windows network?
0
votes
1answer
191 views

How long can a workstation be not connect to domain before getting locked out?

I used a personal laptop at a company for a while and the laptop was joined to their domain. I have since left the company and the laptop is home with me. I heavily use the domain profile that was ...
1
vote
1answer
37 views

Is it possible to set an SPN with a path?

I'd like to know, if it is possible to set an SPN with non root url as something like that: setspn -U -A http/www.example.com/someApp/path/ someServiceUser So that different applications running in ...
2
votes
1answer
149 views

Default trust relationship between domains in a forest?

Can somebody clarify that all domains, child domains, subsubdomain all trust each other two way if in the same forest by default?
2
votes
0answers
1k views

Windows Azure Directory Sync Generic Failure

Ok so I have a domain that I want to sync to Office365 but when I start the Windows Azure Active Directory Sync tool Configuration Wizard I get an error with the following details: ...
1
vote
0answers
289 views

Windows Azure AD Sync Tool - Credentials of the supplied user do not map to a forest

I'm having problems with the Windows Azure Active Directory Sync Tool and Office 365. We did have it set up correctly and was working for about 2 months. Today, the VM it was running on destroyed ...
11
votes
1answer
34k views

How can I find out which user groups my domain user belongs to? [duplicate]

Running Windows 7 on my work PC, how can I check which groups I am a part of on the domain from my PC? I know how to check the local groups using MMC (Microsoft Management Console), just not the ...
1
vote
0answers
122 views

Active Directory Auto Logoff Timer

I'm experimenting with an Active Directory Domain at home (Win Server 2012 Domain Controller). After joining my Windows 8 Pro (x64) PC to my domain, I am getting automatically logged off after being ...
0
votes
1answer
60 views

How can I add a computer to a local AD?

I have AD running on a box in my network, its setup with foo.local AD (locally). Im now trying to add another computer (running win7 ult) but when I try to add the computer to domain it shows an error ...
2
votes
2answers
338 views

How can I tell if an active directory group is a security or distribution group?

I need to check if an active directory group is a security or distribution group. As somebody who doesn't know much about active directory - how do I go about doing this?
0
votes
1answer
308 views

How to force a virtual machine to uncache windows domain credentials

I have a Windows 8 host (latest patches) in an AD domain. a windows 7 (latest patches) virtualbox VM also within the the same domain The issue is that I've been through 2 password change cycles ...
0
votes
1answer
259 views

Cannot Find A Group Policy That I'd Like To Disable

There's an Active Directory group policy specific to Google Chrome in place to enforce: startup URLs blocking auto-updating (locking to a particular version) This policy writes entries to ...
0
votes
0answers
2k views

Disable USB mass storage via group policy based on the time of day?

I would like to disable USB mass storage for a group of users during specific hours of the day (lets say, 9AM to 5PM). I know that with Windows Server 2008, there is a group policy that will disable ...
-1
votes
1answer
41 views

How to control replication?

I want to disable replication of the user's first name attribute. That is Whenever I change its value, it should not be replicated. How can I do that?
1
vote
2answers
629 views

find number of groups assigned to a user

Is there a way to find the number of groups assigned to a user in linux? as of right now i have: foo : foo bar apple users An app I use may have given a user a group of "apple users" but I cant ...
0
votes
1answer
511 views

Active Directory - Unlock Timer

If a user types in the wrong password 3 times and manages to lock themselves out of their account, how long by default does that user need to wait before they can try again? Can an admin change the ...
0
votes
1answer
383 views

Will nslookup work without configuring reverse lookup?

I have empty reverse lookup entries in my active directory DNS server. But nslookup is working fine even if i give "*nslookup ip_address*". How can it resolve the ip_address to Some FQN without ...
2
votes
1answer
775 views

I don't understand groups and permissions in Active Directory

I'm playing with permissions and noticed the following situation I don't understand. The PC PC-EXAMPLE is a part of a domain, let's say DOMAIN (domain.com) and the currently logged on user is ...
1
vote
2answers
194 views

Password Expiration in active directory

In the domain of our organisation there is a server, which has "password max age" enabled, which forces the users to regulary change their passswords. The Server seems to cache the old passwords, so ...
3
votes
1answer
12k views

Query Members of an Active Directory Group

So in active directory, there is a group called WebSiteUsers that is being used to permit access to a folder I am hosting via IIS. I was wondering (using DSQuery, ADFind or any freely available ...
0
votes
1answer
924 views

Does Microsoft Virtual Desktop Infrastructure (VDI) require Active Directory (AD) to run?

Can I set up a VDI with 1 server and many thin clients without setting up Active Directory with a domain controller? I want to make the thin client setup as easy as possible, i.e. get any Windows PC ...
1
vote
2answers
346 views

Where does MSAD LDAP store the credentials used to authenticate users?

I can browse the user details of an existing LDAP directory using a bind DN and bind password. I cannot find any entry storing the users password. Is it possible that password attributes are hidden ...
-1
votes
3answers
270 views

Binding Outlook to Active Directory users [closed]

I currently have a small business network set up. Running SBS 2011, and Windows 7. I apologize for my minimal knowledge of the subject, but I am looking for a way to have Outlook connected to each ...
1
vote
1answer
94 views

Running Network-Reliant Processes on Startup

I'm in charge of deploying and modifying a bit of in-house software that is meant to run on end-user workstations, which run either Windows 7 or XP SP3. The goal is to maximize the amount of time the ...
0
votes
2answers
29 views

How to PreStore Active Directory Profiles

As commonly known, on a Windows computer connected to a domain, when a user logs into a workstation their profile is stored on the local machine in case connectivity to all domain controllers is lost ...
0
votes
0answers
63 views

Local System Restricted via GPO in Microsoft OS

If there is a way, to deny local-system on a client machine to stop services with GPO?. The client is in a domain. Example, making a anti-virus service that can't be disabled by local-system. I ...
0
votes
1answer
3k views

How do I change the username and the userprofile path of a domain user?

I have run into an issue with a piece of software we are using where users with a single quote ' in their name is causing the application to crash. I contacted support for the application and they ...
1
vote
0answers
163 views

Configuration of mod_authnz_ldap to work with Active Directory

Please help to find a good tutorial / step by step instructions how to configure mod_authnz_ldap to work with Active Directory (I use Apache 2.2). Apache provides good documentation, but I want to ...
0
votes
2answers
2k views

Windows 7 user profile resetted at each login

After uninstalling and reinstalling a (buggy) software I'm working on, the following has happened: When I rebooted and logged in the first time, the whole of my Users folder was wiped out: ...
3
votes
1answer
3k views

Find out my bind DN in a Windows network

I am in a windows network and want to use Linux' LDAP search. For this I need to find out my DN. I am already logged in on a Windows computer using Outlook to the exchange server and this one seems ...
1
vote
1answer
223 views

X-Terminals don't show UTF-8 character correctly when using Likewise-Open authentification

I have this really weird problem with X terminal emulators. I want to use UTF-8 and it works everywhere else in my system, but not in graphical terminals. When I start e.g. Urxvt and press öäå-keys it ...
0
votes
1answer
159 views

If I virtualise my work laptop can I use both the virtualised and physical instances [closed]

I'm quite keen to virtualise my work laptop so that I can leave my work device in my bag when I get home and fire up my much nicer and more powerful home PC to continue my work. I know this isn't a ...
-1
votes
1answer
188 views

Active Directory : Two accounts same password [closed]

Is there a way to have the same password for two accounts. (Not familiar with AD terms so i m not sure if i use the correct terms). Thank you
1
vote
2answers
4k views

Is it possible to change the SID of a local user account manually?

Let's say for argument's sake I wish to change the SID of a Windows local user account to one that appears on some hypothetical Active Directory domain. Is that possible? If so, how? P.S. I don't ...