Hot answers tagged active-directory
Generally normal users can browse the AD tree. If you have admin rights on your computer one of the easiest ways would be to install the Active Directory module for PowerShell. Then you open PowerShell by clicking Start, Run and type in PowerShell. After that type in: Import-Module ActiveDirectory Then if all you want is the computer names, type in ...
Make sure you choose the Administrators (built-in) option from the drop-down menu of the Group Policy Preference. I have this configured at Computer Configuration\Preferences\Control Panel Settings\Local Users and Groups with the Action set to "Update".
A network share has permissions at the share level and the file system level. You state "user2" has been gone since 2012 but then you state there is no account in AD for user2. Let's make some distinctions. user2 is an account name, not a person. The person who used the account user2 left the company in 2012, not the account. Anyone with the proper ...
The names of security principal objects can contain all Unicode characters except the special LDAP characters defined in RFC 2253. This list of special characters includes: a leading space; a trailing space; and any of the following characters: # , + " \ < > ; Max. size for Group name: 63 characters, or 63 bytes depending upon the character set; ...
Since you are in a domain environment, as long as you are a domain admin (or a member of a group that has local admin rights on all your computers), then you will not have any issues connecting to a computer remotely. You will not, however, be able to log on remotely as that user unless you know their password. This is probably a serious change from the ...
In the past I have used sssd to do this. https://fedorahosted.org/sssd/ Here is their official document on connecting to Active Directory: https://fedorahosted.org/sssd/wiki/Configuring_sssd_with_ad_server
This command prints some details: net accounts Example output: C:\>net accounts Force user logoff how long after time expires?: Never Minimum password age (days): 0 Maximum password age (days): 42 Minimum password length: 0 Length of password history maintained: ...
Ok, this is a super old question but here's hoping it's still useful. I got this working by setting my ldap query base to the OU in question. ( Source ). While you would normally set your base to the DCs involved, I got it to work by setting by base to the DN of the OU I wanted. OU=Ops,DC=Big,DC=Co, for example.
Sorry about being forced into a Windows development environment. However, if you look at expanding beyond some number of computers (you choose the pain threshold), then at some point look at the labor of adding a user in one place via AD vs. adding the same user at n computers. Of course, we won't mention the time when you get the user typo'ed and then have ...
Only top voted, non community-wiki answers of a minimum length are eligible