Questions tagged [active-directory]
Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard. Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.
1,093
questions
0
votes
2
answers
11k
views
ldapsearch - how to display “lastLogonTimestamp” & convert windows lastlogontimestamp to date in bash
I want to search Active Directory for inactive users that have no login for x days/months. I've got such a ldapsearch query:
ldapsearch -h domain.test -p 389 -D "cn=login,ou=test,dc=domain,dc=test" -...
-2
votes
1
answer
52
views
Create new partition in all computers in the domain
I want to create new partition in all domains laptops, I have scripts but it’s running every time when the laptop starts up ,so is there any way to create new partition just once in all computers?
0
votes
1
answer
3k
views
Windows (10 and Server 2019): Why suddenly Search Active Directory button is greyed out (disabled)?
I do not understand this unexpected behavior: I'm making some experiments with VMWare Workstation 16 Pro and few virtual machines with Windows 10 Pro (20H2) and Windows Server 2019 Standard. I put ...
1
vote
0
answers
3
views
Need help in creating custom objectclasses and attributetypes in openldap
I am trying to create an custom attribute in openldap. For which i am suppose to create an objectclasses. Here my ldif file below.
Ldif File Content
dn: cn=schema,cn=config
changetype: modify
add: ...
6
votes
3
answers
2k
views
Does a domain joined Windows 10 computer have built-in tools to query AD/LDAP?
I'm on a domain joined Windows 10 Computer and want to query the attributes of my own user account. Are there any built-in tools for that?
It is not an admin computer and I don't have RSAT installed. ...
0
votes
1
answer
5k
views
Share a folder without admin credential
In our domain, users have "User" permission level, every time some user want to share a folder it will be prompt admin credential to finish, is there a way to allow domain users to freely share ...
-2
votes
1
answer
91
views
Is Shadow Admins Really a risk factor in Active Directory?
From my understanding shadow admin is,A user account becomes a shadow admin if it has strong privileges over an existing admin account.
Similarly, any other account with strong privileges over the ...
0
votes
0
answers
7
views
ADFS Single Logout both OAuth/OpenID and SAML federated clients [migrated]
I am trying to set up ADFS as a single sign-on identity provider for various apps. Some of these apps work with only SAML identity providers while others only work with OAuth/OpenID.
It seems like I ...
0
votes
0
answers
3
views
ADAC - How to Remove Navigation Nodes [migrated]
How can I remove recently navigated navigation nodes below the parent node? It's there like browser history.
enter image description here
2
votes
1
answer
74
views
New-ADUser -Manager from different domain
My Powershell script to create new users does not work when the "Manager" is located in a different domain.
For example, I am creating a user in the domain contoso.com, but the manager is ...
0
votes
1
answer
5k
views
One user on our domain cannot login on his original PC only
So a user says he went out to lunch and afterwards could not log into his PC. It just hangs whereas it actually does log in in safe mode and other accounts like my admin on the domain also can log in.
...
5
votes
1
answer
4k
views
Windows 10 64 domain computer cannot access Linux (Raspberry Pi3) samba share
Samba server:
Raspberry Pi3, running osmc media server (I believe this is a down-scaled Raspbian version).
Samba version: 4.2.10
Domain controller:
Windows 2012
Windows client:
Windows 10 Evt. 64-...
0
votes
1
answer
4k
views
How to enable the WMI service on many machines to find MS-Office licenses using the Volume Activation Management Tool 2.0 using Active Directory?
I installed the Volume Activation Management Tool 2.0 from Microsoft to scan all the computers on my network to find out how many valid MS Office licenses we have installed on all of the machines.
...
3
votes
1
answer
5k
views
mount.cifs: Any way to mount with kerberos using the machine credentials
When a Linux machine joins a domain, a computer account is created in Active Directory.
Can this account be used to mount a network share with cifs and Kerberos?
0
votes
0
answers
21
views
Managing SSH access and who has access
I'm currently implementing AD and some of the users access external servers via SSH (not hosted within the AD) and I'm looking for a way to monitor who is accessing them and maybe limit them. As far ...
1
vote
1
answer
4k
views
Logon failure trying to print using Samba
I'm trying to set up a CUPS print server on a Knoppix system for use by Windows clients in an Active Directory domain. So far, I've had success with printing over IPP. Now I want to explore the ...
0
votes
1
answer
10k
views
Active Directory - Restrict User to login only one PC at a time
I want to implement a policy which is related to specific users on domain. What I want to achieve is:
If a user login, let's say, to PC1 he should not be able to use any other PC using his credentials ...
0
votes
1
answer
6k
views
PsExec Access Denied on remote computer
I am trying to start a program remotely using PsExec, however when attempting to connect I get the error message "Access is denied.".
Most of the answers found here on SU or on other forums ...
3
votes
1
answer
6k
views
Authentication against LDAP on Apache fails with password mismatch
I want to accomplish LDAP authentication on my Linux machine, but can't get it working. Currently, I get the following error in the Apache log: AH01617: user john.doe: authentication failure for "/": ...
3
votes
3
answers
6k
views
How can I tell if an active directory group is a security or distribution group?
I need to check if an active directory group is a security or distribution group. As somebody who doesn't know much about active directory - how do I go about doing this?
0
votes
1
answer
4k
views
Inactivity limit VS Screen saver timeout GPO Policy
We are trying to decided between, the Computer vs User GPO Policies to force the screen to lock for our user workstations. Both seem to have the same overall effect of evoking the screen saver, ...
1
vote
0
answers
17
views
How to apply GPO on Local station? [closed]
I have created in the past some rules manaed by the console on the active directory.
I would like to apply the GPO managed by the AD, on a standalone station not connected to the AD.
how can I convert ...
2
votes
1
answer
10k
views
'net ads join -U username' failing with an error 'NT_STATUS_IO_TIMEOUT'
I am attempting to provide access to Ubuntu shared directories using Active Directory users and group using Samba. I am following this article to install and configure AD and Unix so that access can ...
0
votes
0
answers
53
views
backing up an AD DC whose Windows Server (2019) installation has died or fixing a 0xc00002e2
I have a Windows Server 2019 AD DC where it's just that one and no backup DC (I know, I know) which died yesterday after doing Windows Updates. now whenever it tries to boot it BSODs with 0xc00002e2 ...
3
votes
2
answers
6k
views
Samba Winbind not working in Debian 8
I am setting up a new samba environment based on Debian Jessie.
Installation of PDC was succesfully and Windows clients were able to join. Have a problem at joining the Linux clients.
I was following ...
1
vote
2
answers
12k
views
Domain authentication without joining the domain
I am DBA in an Active Directory environment. I often work from home using my private PC (I connect via VPN). My private PC is not joined to the Active Directory domain.
Is it possible to use domain ...
1
vote
2
answers
5k
views
Why I can't see the users that I have created
I have created 4 users on Active Directory Users and Computer:
But I can't see the users on my computer management under "local users and groups" nor on my sql server!
So, why I does not have "local ...
9
votes
2
answers
576
views
Create "homework only" account on Windows
Like most kids, my kids love computers, and if I let them, they'd camp out on it every waking hour Facebooking and playing video games. So we have an app that limits their time each day (trying to ...
5
votes
1
answer
9k
views
QNAP TS-809U: Domain Users / Groups disappear and the server has to be rejoined to the AD Domain
We have a TS809U that we have joined to the domain. Shares and access rights works as the should with the domain users and everything is just the way it should be. But after a couple of weeks/a month ...
2
votes
1
answer
8k
views
Windows Azure Directory Sync Generic Failure
Ok so I have a domain that I want to sync to Office365 but when I start the Windows Azure Active Directory Sync tool Configuration Wizard I get an error with the following details:
System.Management....
8
votes
1
answer
16k
views
Enable SMB file sharing on OS X - "Incorrect Password"
I have a Mac running Snow Leopard connected to an Active Directory domain. I can share folders on the Mac and view files from Windows without problems.
When I try to enable my Mac account for write ...
0
votes
1
answer
6k
views
Group Policy Confusion (Printers configured under users?)
I'm befuddled. Active directory usually makes a bit more sense than this.
The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
0
votes
2
answers
11k
views
Restrict Active Directory user by IP Address or Machine Name
I am needing to create a Windows Active Directory account for use with a Microsoft Dynamics CRM system to a set of SQL Server 2008 R2 servers. This user is requiring elevated privileges in my SQL ...
0
votes
1
answer
3k
views
How to get user last logon date on a specific server?
Need to export a table with user names (samAcountNames) along with their last logon date\time on to specific server on network (who is a member of a domain).
According to google search, i can do it ...
3
votes
1
answer
15k
views
Use Office 365 account to login to Windows 10
Windows 10 has a new feature where you should be able to use our Office 365 Active Directory account to login.
This is the feature:
http://answers.microsoft.com/en-us/insider/forum/insider_apps-...
0
votes
0
answers
29
views
Are OneDrive preferences stored per PC or per account?
In an Azure Active Directory environment, where all accounts are in AD, and we are using Office 365 OneDrive - are the OneDrive preferences stored per PC, or per AD account? I.e. if a user logs onto ...
0
votes
0
answers
334
views
How to tell whether machine is on AD Domain when running as SYSTEM
I have a batch script run as the SYSTEM user, and I need to find out whether the machine is on an AD Domain or not. I don't know, or need to know, the AD Domain name, just whether it's on any AD ...
0
votes
1
answer
85
views
Active Directory - ß vs. ss
I'm trying to unify the streetaddress attribute of our users. In German, the character ß can also be represented as ss.
Some users have Examplestraße as streetaddress value, while others have ...
1
vote
1
answer
90
views
Running GitHub Actions unders specific, existing Windows user
I am trying to run a GHA workflow in a GitHub-hosted runner for Windows (windows-latest) under a specific, already existing Windows user instead of the default C:\Users\runneradmin.
Options involving ...
4
votes
1
answer
4k
views
Active Directory domain in home network - how to add computer
I had used AD domain before, but the domain was set up already, so I do not have much hands-on experience with setting up everything from scratch, and I am still new to networking side of things, so ...
0
votes
1
answer
95
views
LDAP proxy to ActiveDirectory not working
I installed openldap as a proxy to ActiveDirectory and it's working if I use a full DN.
The problem is that AD supports query with the following syntax but OpenLdap does not.
ldapsearch -v -H ldap://...
1
vote
0
answers
87
views
Ansible fails installing IIS Web-Server on virtualbox windows machine
I am trying to install Active Directory Labratory GOAD to practice and get familiar with active directory. I use ansible-core 2.2.16, virtualbox 6.1 and vagrant 2.2.19 to install it.
The lab uses a ...
0
votes
0
answers
329
views
Windows Sign-in options disabled - GPO enabled
So with the new update on Windows 11 23H2 there comes an issue regarding the Sign-in options in the settings, specific the "PIN" and "Fingerprint" or "Facial" options.
In ...
0
votes
1
answer
203
views
I can run Get-ADuser on a machine that does NOT have RSAT installed. How is this possible?
I am trying to run Powershell Get-Aduser on a new PC and when it did not run, installing RSAT Domain Services and Lightweight Directory Services Tools fixed the issue.
HOWEVER, I have another PC that ...
1
vote
2
answers
6k
views
Rename the client computer from Active Directory Users and Computers (ADUC)
I am new to Active Directory concepts. I am practicing with AD Objects. In AD, I can change the user object names but I cannot able to rename the computer object name. It can be done via netdom ...
0
votes
0
answers
578
views
Join MS Windows domain - "The user name or password is incorrect"
I am trying to join a Windows 2022 server to a AD domain running on another Windows 2022 server. I have tried several admin accounts including a domain account I created myself with - I think - ...
4
votes
2
answers
6k
views
How to change login screen to allow login to active directory domain in Ubuntu 12.10?
So, I have an Ubuntu 12.10 machine that has been joined to an active directory domain. However, when the machine turns on and I am presented with a login screen, I cant just type DOMAIN\user. All ...
6
votes
4
answers
52k
views
How can I list all members from AD group showing enable and disabled users?
I'm trying get a list of all members from a AD Group showing active \ inactive users. The purpose is get all the members on the groups and list the ones with Admin privileges.
I did the following ...
0
votes
0
answers
44
views
Domain can't connect with RDP between PC
I can't connect via RDP, between PC in domain.
From SRV I see another PC and I can connect with that PC, but connection between PC doesn't work.
Why?
0
votes
0
answers
30
views
RPC Port-flapping in Active Directory
Have you ever experienced RPC port flapping in Active Directory servers?
In deploying an agentless server performance tool we experienced RPC connection issues that gradually opened up over a few ...