Active directory (or AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

learn more… | top users | synonyms

1
vote
0answers
100 views

Cleaning out AD Roaming Profile Cache

I've been playing around with AD RPs after watching some videos and they mentioned that you end up with a lot of disk space being filled due to cache and files being copied over from the server where ...
0
votes
1answer
56 views

Windows 2003R2 Primary DC not transferring roles

I inherited a Windows 2003 R2 Domain Controller and to ensure I have resiliency, I added a second DC as Additional DC with DNS. Now I shutdown the Primary DC but for unknown reasons, the FSMO roles ...
0
votes
1answer
666 views

Piping with PowerShell in Office 365 Exchange and on-premises AD

We have a local AD domain synced with Exchange Online in Office 365. I am trying to use PowerShell to get information that I need but keep getting an error and can’t seem to get the commands to work ...
2
votes
1answer
56 views

How to extract Active Directory configuration?

Is there a tool to extract AD configuration, which can be used later to perform technical configuration security audit without having any interaction with the machine that contain the AD?
2
votes
1answer
92 views

How long until disabling a logged on user takes effect?

I have asked the admin sitting next to me to change my password and disable my account. He did that 15 minutes ago and I am still browsing the network shares. I haven't logged off yet, but I want to ...
2
votes
1answer
6k views

Mac OS X 10.8 not binding to Windows domain

I have five iMacs with OSX 10.8.5. Two of the iMacs are binding to Windows domain server (2012) successfully. But I can’t bind remaining three iMac machines, and it is showing authentication error ...
0
votes
0answers
48 views

Active Directory: Swap two users' home folders

I have an AD domain w/ some users. Each user has a home folder that's on a shared network drive. Due to a silly situation, two users have been using each other's accounts for a long time (including ...
0
votes
1answer
32 views

Windows 2003 VM drops out of domain

A customer of ours is cloning a domain-joined Windows 2003 VM, changes its IP but leaves it with the same hostname (using sysprep). It still retains connectivity to the same domain controller. What ...
1
vote
0answers
51 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
2
votes
0answers
25 views

GPO printer allocation

scenario: AD domain with multiple remote OUs with fairly robust communications. I allocate printers per location via GPO. Some of the Work Stations in the OU allocate the printers on login (5 of ...
1
vote
1answer
383 views

How to enable entering username in Zorin OS

I have joined my zorin os (v8) to a domain. But I can not find how to enable entering usernames on the logon screen. How do you enable this feature?
0
votes
0answers
346 views

Trying to lock down cells in excel & office 365

We have only sharepoint, office 365, excel 2013 - no domain. I'm trying to lock down specific columns in an excel sheet. When I click on 'Permissions' in 'Allow users to Edit Ranges' I type in a ...
0
votes
1answer
1k views

PowerShell - IF statement case insensitive?

I am trying to write a PowerShell script that will cycle through the ProxyAddresses for all of my AD user objects. If a user has a SMTP address with USER@DOMAIN.LOCAL, I want it to check if they also ...
0
votes
1answer
86 views

Why would an organization use a single, *common* Active Directory account for all staff who use a multifunction photocopier? [closed]

At a company I used to work for they had some high-end multifunction Panasonic digital photocopiers (fax/scanner/printer/photocopy etc.) used by approximately 150 staff. For some reason, despite ...
5
votes
2answers
4k views

How do I use (O365) Exchange Online custom attributes (1 to 15) when I have directory sync enabled and no exchange installed on-premises?

Here is my setup: Active Directory on premises - with no Exchange installed. DirSync tool to sync all users to Office 365 Now, I need to use CustomAttributes in Exchange - here is where the ...
1
vote
0answers
278 views

Bitlocker Will Not Encrypt on Fixed-Data Drive

I have recently encrypted my system (C:) drive, using Bitlocker, on my W7 Enterprise box. This machine is not associated with a domain. I would like to encrypt my remaining fixed data drives, as well. ...
1
vote
1answer
135 views

Is it possible to allow a user of Domain A to write to Domain B fileshare without a trust relationship?

I'm currently working with two Windows 2008 servers, each running on completely separate domains with no possibility of setting up a trust relationship between them. What I need to find a way of ...
0
votes
1answer
2k views

PowerShell – Remove specific SMTP addresses from proxyAddresses array

I have been trying to figure this out how to modify the proxyAddresses of some of my users in AD using PowerShell. My basic goal is to use Get-ADObject to query AD for a specific set of users and ...
0
votes
1answer
2k views

Join an Active Directory domain with Linux without being an Administrator

My current task is to configure a testing virtual machine to join our company's AD domain, so users can login with domain credentials. I am only responsible to make tests with that VM, that will be ...
1
vote
1answer
12k views

Checking if a user account is locked on another domain controller

I'm trying to see if a user account has been locked out, using the command line. I thought that I could do this with the net command, but when I run the command NET USER username /domain it ...
0
votes
1answer
51 views

Set profile on fileserver but not let other users access the folder

OK, so I want to set the profile path and have it mapped to a drive letter, but I don't want everyone else to be able to access that folder. Just maybe admins and the actual user. ...
6
votes
0answers
732 views

How do I enforce a unifrom company email font and signature format across Outlook 2007, 10 and 13? [closed]

Our users currently run a mixture of Outlook 2007, 2010 and 2013 to manage emails. We use active directory and our server runs Windows Server 2008 R2. Is there anyway that we can enforce through ...
2
votes
1answer
2k views

QNAP TS-809U: Domain Users / Groups disappear and the server has to be rejoined to the AD Domain

We have a TS809U that we have joined to the domain. Shares and access rights works as the should with the domain users and everything is just the way it should be. But after a couple of weeks/a month ...
1
vote
0answers
326 views

How do I audit where security groups are applied in my domain? [closed]

I've been asked to find out how and where specific security groups are being used in my organizations AD domain. I know what the groups are and where to find them in the directory, but I don't know ...
0
votes
1answer
571 views

Can only ping hostname but not a domain

Ubuntu Gnome 13.10 What I can do: ping hostnameX Response: PING hostnameX.domain.local (10.0.0.1) nslookup hostnameX Response: Name: hostnameX.domain.local; Address: 10.0.0.1 Response coming ...
0
votes
1answer
56 views

How to avoid having users enroll for multiple certificates?

I am the domain administrator of my company. Recently one of my clients has re-installed his Windows and received a new certificate from CA, but the key pair of certificate is not same with previous ...
2
votes
1answer
460 views

Powershell: how to get logged-in users list in active directory?

I need to generate this table: Computer | User | last log in date(never) This one asks for username for each user account and returns only ad server name against which the user was last ...
2
votes
1answer
102 views

Applying LDAP OU attributes to users automatically

Is it possible to set the Office and Department attributes on an organizational unit, that way when we move users around, the user's office and department automatically changes? I don't use AD/LDAP ...
0
votes
1answer
1k views

Group Policy Confusion (Printers configured under users?)

I'm befuddled. Active directory usually makes a bit more sense than this. The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
0
votes
1answer
206 views

Active Directory - password expiration not applied

I've noticed a very strange behavior in my AD domain. Our password policy forces the users to change passwords every 3 months. I ran in my AD this LDAP query: ...
0
votes
1answer
346 views

Is there a way to export Active Directory data into a data base or spreadsheet?

I ultimately need to get the active directory user information into XML for use in another system, but using a database (SQL Server, or MSAccess, for example) or a spreadsheet or even .csv file would ...
2
votes
1answer
1k views

want a single icon on AD user desktop on windows 2008 server r2 enterprise edition

i want to create a single shortcut icon on Active Directory user desktop. How do i create a shortcut that is displayed on all Active Directory users desktop?
0
votes
1answer
147 views

how to filter by cn component in ldapsearch?

I am querying an Active Directory to gather the list of people having a given manager. The following search works fine: $ ldapsearch "cn=John Doe" manager dn: CN=John Doe,... manager: CN=The ...
1
vote
0answers
672 views

Windows 8 keeps prompting to change expired password

I am a volunteer doing tech support for a local school. One of the teachers tried to log in today and got a message that his password had expired and must be changed. That's expected, since our ...
3
votes
1answer
4k views

I can't reset an expired password because it is expired. What's next?

The password of my corporate (Active Directory based) account expired this morning. When logging in, I see an error similar to: Your password has expired and must be changed. I'm then invited to ...
1
vote
2answers
344 views

Delegate some admin roles, but not all?

A client has asked for a group of secondary AD admins, who is supposed to be able to help users do program updates, configure printers etc. The client really want to prevent this group of secondary ...
0
votes
2answers
473 views

Tracking changes to Active Directory users and systems

How can I track changes (creation, deletion, moves, etc.) to users and systems on an Active Directory Domain?
0
votes
1answer
355 views

Script to run after joining domain

Is there a possibility to do this? I want to run a script that defines my network drivers and runs an .exe after it joined the domain.
0
votes
1answer
84 views

allow users to login to the domain on windows server 2008

I have created a new user on windows server 2008, but this user is unable to login to the domain. so which permision i should grant to this user to be able to login to his machine inside the domain ?
0
votes
1answer
457 views

Missing users in Centrify active directory

I'm trying to list out all users in AD via dscl: dscl localhost -list /CentrifyDC/Default/Users it lists some users, but I know there are some users which are not in that list and I'm actually able ...
1
vote
3answers
1k views

Winbind group lookup painfully slow

I am running winbind on an RHEL 6 system. Everything works fine except group lookups, so many commands (including sudo) are painfully slow. I did an strace which shows that winbind looks up every ...
-1
votes
2answers
1k views

Active directory setting for auto-logon of a computer; Windows Server [duplicate]

I remember there was a setting in Windows Server 2003 that made a user account on the domain auto-logon when the computer booted up. It was just one setting on the server, and not a registry edit on ...
0
votes
1answer
3k views

Why I can make Windows 8 and 8.1 Pro join domain but can't login after?

Is there any tweak to be done in Windows 8 Pro or Windows 8.1 Pro that makes me be able to login after joining a Samba 4 domain/AD? All the other machines with Windows 7 even XP are in the domain and ...
2
votes
0answers
383 views

Active Directory users permissions on shared folder [closed]

I have two groups of AD users: Group_R (members: User_1, User_2) Group_RW (members: User_3, User_4) There are two shared folders: Folder 1: \\server\folder_A Permissions: Group_R (read only), ...
0
votes
1answer
60 views

Annoying cmd windows on Windows 7

I am using Windows 7 on my PC that is linked with Active directory. When I log in, I keep getting many cmd screens opening and closing and I can't do anything. I don't know what happened if this was ...
1
vote
1answer
28 views

Domain joined VM+ snapshotting

I have been using a Win 8 Hyper V VM with snapshots to test some applications I am writing in fresh environments (to ensure that it works in a non dev environment,etc) The way I use it is that I ...
1
vote
2answers
6k views

Can Windows 8.1 RT join a domain

Can Windows 8.1 RT join an Active Directory 2012 domain? I've been looking around and I'm having a hard time determining if they are talking about 8.1 or 8.1 RT but its very unclear.
1
vote
1answer
51 views

File server monitoring in AD

I was asked to find a way to monitor changes (modification, renaming, deletion, moving) of files in specific folders on the company's shared file server (simple windows shared directory) What I'd like ...
0
votes
1answer
24 views

Is there a way in IE9 on a Virtual Machine to do AD auth in IE9 without the machine being added to the domain but the host machine is?

I have a virtual machine that is running IE 9 and windows 7 Latest Updates that I want to use to test my intranet site (ASP.Net Application). I can't add the virtual machine to the domain and I don't ...
2
votes
3answers
2k views

Active Directory -> Dirsync -> Office 365 best way to change password for remote users

We have a company 90% remote users with no laptops. (on government computers that they can't install anything on like a vpn) our company is moving to Active directory and Office 365 and the passwords ...