Questions tagged [active-directory]

Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

Filter by
Sorted by
Tagged with
0 votes
2 answers
11k views

ldapsearch - how to display “lastLogonTimestamp” & convert windows lastlogontimestamp to date in bash

I want to search Active Directory for inactive users that have no login for x days/months. I've got such a ldapsearch query: ldapsearch -h domain.test -p 389 -D "cn=login,ou=test,dc=domain,dc=test" -...
-2 votes
1 answer
52 views

Create new partition in all computers in the domain

I want to create new partition in all domains laptops, I have scripts but it’s running every time when the laptop starts up ,so is there any way to create new partition just once in all computers?
0 votes
1 answer
3k views

Windows (10 and Server 2019): Why suddenly Search Active Directory button is greyed out (disabled)?

I do not understand this unexpected behavior: I'm making some experiments with VMWare Workstation 16 Pro and few virtual machines with Windows 10 Pro (20H2) and Windows Server 2019 Standard. I put ...
1 vote
0 answers
3 views

Need help in creating custom objectclasses and attributetypes in openldap

I am trying to create an custom attribute in openldap. For which i am suppose to create an objectclasses. Here my ldif file below. Ldif File Content dn: cn=schema,cn=config changetype: modify add: ...
user avatar
6 votes
3 answers
2k views

Does a domain joined Windows 10 computer have built-in tools to query AD/LDAP?

I'm on a domain joined Windows 10 Computer and want to query the attributes of my own user account. Are there any built-in tools for that? It is not an admin computer and I don't have RSAT installed. ...
0 votes
1 answer
5k views

Share a folder without admin credential

In our domain, users have "User" permission level, every time some user want to share a folder it will be prompt admin credential to finish, is there a way to allow domain users to freely share ...
-2 votes
1 answer
91 views

Is Shadow Admins Really a risk factor in Active Directory?

From my understanding shadow admin is,A user account becomes a shadow admin if it has strong privileges over an existing admin account. Similarly, any other account with strong privileges over the ...
0 votes
0 answers
7 views

ADFS Single Logout both OAuth/OpenID and SAML federated clients [migrated]

I am trying to set up ADFS as a single sign-on identity provider for various apps. Some of these apps work with only SAML identity providers while others only work with OAuth/OpenID. It seems like I ...
0 votes
0 answers
3 views

ADAC - How to Remove Navigation Nodes [migrated]

How can I remove recently navigated navigation nodes below the parent node? It's there like browser history. enter image description here
2 votes
1 answer
74 views

New-ADUser -Manager from different domain

My Powershell script to create new users does not work when the "Manager" is located in a different domain. For example, I am creating a user in the domain contoso.com, but the manager is ...
0 votes
1 answer
5k views

One user on our domain cannot login on his original PC only

So a user says he went out to lunch and afterwards could not log into his PC. It just hangs whereas it actually does log in in safe mode and other accounts like my admin on the domain also can log in. ...
5 votes
1 answer
4k views

Windows 10 64 domain computer cannot access Linux (Raspberry Pi3) samba share

Samba server: Raspberry Pi3, running osmc media server (I believe this is a down-scaled Raspbian version). Samba version: 4.2.10 Domain controller: Windows 2012 Windows client: Windows 10 Evt. 64-...
0 votes
1 answer
4k views

How to enable the WMI service on many machines to find MS-Office licenses using the Volume Activation Management Tool 2.0 using Active Directory?

I installed the Volume Activation Management Tool 2.0 from Microsoft to scan all the computers on my network to find out how many valid MS Office licenses we have installed on all of the machines. ...
3 votes
1 answer
5k views

mount.cifs: Any way to mount with kerberos using the machine credentials

When a Linux machine joins a domain, a computer account is created in Active Directory. Can this account be used to mount a network share with cifs and Kerberos?
0 votes
0 answers
21 views

Managing SSH access and who has access

I'm currently implementing AD and some of the users access external servers via SSH (not hosted within the AD) and I'm looking for a way to monitor who is accessing them and maybe limit them. As far ...
1 vote
1 answer
4k views

Logon failure trying to print using Samba

I'm trying to set up a CUPS print server on a Knoppix system for use by Windows clients in an Active Directory domain. So far, I've had success with printing over IPP. Now I want to explore the ...
0 votes
1 answer
10k views

Active Directory - Restrict User to login only one PC at a time

I want to implement a policy which is related to specific users on domain. What I want to achieve is: If a user login, let's say, to PC1 he should not be able to use any other PC using his credentials ...
0 votes
1 answer
6k views

PsExec Access Denied on remote computer

I am trying to start a program remotely using PsExec, however when attempting to connect I get the error message "Access is denied.". Most of the answers found here on SU or on other forums ...
3 votes
1 answer
6k views

Authentication against LDAP on Apache fails with password mismatch

I want to accomplish LDAP authentication on my Linux machine, but can't get it working. Currently, I get the following error in the Apache log: AH01617: user john.doe: authentication failure for "/": ...
3 votes
3 answers
6k views

How can I tell if an active directory group is a security or distribution group?

I need to check if an active directory group is a security or distribution group. As somebody who doesn't know much about active directory - how do I go about doing this?
0 votes
1 answer
4k views

Inactivity limit VS Screen saver timeout GPO Policy

We are trying to decided between, the Computer vs User GPO Policies to force the screen to lock for our user workstations. Both seem to have the same overall effect of evoking the screen saver, ...
1 vote
0 answers
17 views

How to apply GPO on Local station? [closed]

I have created in the past some rules manaed by the console on the active directory. I would like to apply the GPO managed by the AD, on a standalone station not connected to the AD. how can I convert ...
2 votes
1 answer
10k views

'net ads join -U username' failing with an error 'NT_STATUS_IO_TIMEOUT'

I am attempting to provide access to Ubuntu shared directories using Active Directory users and group using Samba. I am following this article to install and configure AD and Unix so that access can ...
0 votes
0 answers
53 views

backing up an AD DC whose Windows Server (2019) installation has died or fixing a 0xc00002e2

I have a Windows Server 2019 AD DC where it's just that one and no backup DC (I know, I know) which died yesterday after doing Windows Updates. now whenever it tries to boot it BSODs with 0xc00002e2 ...
3 votes
2 answers
6k views

Samba Winbind not working in Debian 8

I am setting up a new samba environment based on Debian Jessie. Installation of PDC was succesfully and Windows clients were able to join. Have a problem at joining the Linux clients. I was following ...
1 vote
2 answers
12k views

Domain authentication without joining the domain

I am DBA in an Active Directory environment. I often work from home using my private PC (I connect via VPN). My private PC is not joined to the Active Directory domain. Is it possible to use domain ...
1 vote
2 answers
5k views

Why I can't see the users that I have created

I have created 4 users on Active Directory Users and Computer: But I can't see the users on my computer management under "local users and groups" nor on my sql server! So, why I does not have "local ...
9 votes
2 answers
576 views

Create "homework only" account on Windows

Like most kids, my kids love computers, and if I let them, they'd camp out on it every waking hour Facebooking and playing video games. So we have an app that limits their time each day (trying to ...
5 votes
1 answer
9k views

QNAP TS-809U: Domain Users / Groups disappear and the server has to be rejoined to the AD Domain

We have a TS809U that we have joined to the domain. Shares and access rights works as the should with the domain users and everything is just the way it should be. But after a couple of weeks/a month ...
2 votes
1 answer
8k views

Windows Azure Directory Sync Generic Failure

Ok so I have a domain that I want to sync to Office365 but when I start the Windows Azure Active Directory Sync tool Configuration Wizard I get an error with the following details: System.Management....
8 votes
1 answer
16k views

Enable SMB file sharing on OS X - "Incorrect Password"

I have a Mac running Snow Leopard connected to an Active Directory domain. I can share folders on the Mac and view files from Windows without problems. When I try to enable my Mac account for write ...
0 votes
1 answer
6k views

Group Policy Confusion (Printers configured under users?)

I'm befuddled. Active directory usually makes a bit more sense than this. The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
0 votes
2 answers
11k views

Restrict Active Directory user by IP Address or Machine Name

I am needing to create a Windows Active Directory account for use with a Microsoft Dynamics CRM system to a set of SQL Server 2008 R2 servers. This user is requiring elevated privileges in my SQL ...
0 votes
1 answer
3k views

How to get user last logon date on a specific server?

Need to export a table with user names (samAcountNames) along with their last logon date\time on to specific server on network (who is a member of a domain). According to google search, i can do it ...
3 votes
1 answer
15k views

Use Office 365 account to login to Windows 10

Windows 10 has a new feature where you should be able to use our Office 365 Active Directory account to login. This is the feature: http://answers.microsoft.com/en-us/insider/forum/insider_apps-...
0 votes
0 answers
29 views

Are OneDrive preferences stored per PC or per account?

In an Azure Active Directory environment, where all accounts are in AD, and we are using Office 365 OneDrive - are the OneDrive preferences stored per PC, or per AD account? I.e. if a user logs onto ...
0 votes
0 answers
334 views

How to tell whether machine is on AD Domain when running as SYSTEM

I have a batch script run as the SYSTEM user, and I need to find out whether the machine is on an AD Domain or not. I don't know, or need to know, the AD Domain name, just whether it's on any AD ...
0 votes
1 answer
85 views

Active Directory - ß vs. ss

I'm trying to unify the streetaddress attribute of our users. In German, the character ß can also be represented as ss. Some users have Examplestraße as streetaddress value, while others have ...
1 vote
1 answer
90 views

Running GitHub Actions unders specific, existing Windows user

I am trying to run a GHA workflow in a GitHub-hosted runner for Windows (windows-latest) under a specific, already existing Windows user instead of the default C:\Users\runneradmin. Options involving ...
4 votes
1 answer
4k views

Active Directory domain in home network - how to add computer

I had used AD domain before, but the domain was set up already, so I do not have much hands-on experience with setting up everything from scratch, and I am still new to networking side of things, so ...
0 votes
1 answer
95 views

LDAP proxy to ActiveDirectory not working

I installed openldap as a proxy to ActiveDirectory and it's working if I use a full DN. The problem is that AD supports query with the following syntax but OpenLdap does not. ldapsearch -v -H ldap://...
1 vote
0 answers
87 views

Ansible fails installing IIS Web-Server on virtualbox windows machine

I am trying to install Active Directory Labratory GOAD to practice and get familiar with active directory. I use ansible-core 2.2.16, virtualbox 6.1 and vagrant 2.2.19 to install it. The lab uses a ...
0 votes
0 answers
329 views

Windows Sign-in options disabled - GPO enabled

So with the new update on Windows 11 23H2 there comes an issue regarding the Sign-in options in the settings, specific the "PIN" and "Fingerprint" or "Facial" options. In ...
0 votes
1 answer
203 views

I can run Get-ADuser on a machine that does NOT have RSAT installed. How is this possible?

I am trying to run Powershell Get-Aduser on a new PC and when it did not run, installing RSAT Domain Services and Lightweight Directory Services Tools fixed the issue. HOWEVER, I have another PC that ...
1 vote
2 answers
6k views

Rename the client computer from Active Directory Users and Computers (ADUC)

I am new to Active Directory concepts. I am practicing with AD Objects. In AD, I can change the user object names but I cannot able to rename the computer object name. It can be done via netdom ...
0 votes
0 answers
578 views

Join MS Windows domain - "The user name or password is incorrect"

I am trying to join a Windows 2022 server to a AD domain running on another Windows 2022 server. I have tried several admin accounts including a domain account I created myself with - I think - ...
4 votes
2 answers
6k views

How to change login screen to allow login to active directory domain in Ubuntu 12.10?

So, I have an Ubuntu 12.10 machine that has been joined to an active directory domain. However, when the machine turns on and I am presented with a login screen, I cant just type DOMAIN\user. All ...
6 votes
4 answers
52k views

How can I list all members from AD group showing enable and disabled users?

I'm trying get a list of all members from a AD Group showing active \ inactive users. The purpose is get all the members on the groups and list the ones with Admin privileges. I did the following ...
0 votes
0 answers
44 views

Domain can't connect with RDP between PC

I can't connect via RDP, between PC in domain. From SRV I see another PC and I can connect with that PC, but connection between PC doesn't work. Why?
0 votes
0 answers
30 views

RPC Port-flapping in Active Directory

Have you ever experienced RPC port flapping in Active Directory servers? In deploying an agentless server performance tool we experienced RPC connection issues that gradually opened up over a few ...

1
2 3 4 5
22