Hot answers tagged

26

I would actually say that the 'natural' counterpart was the Sun services: NIS for usernames and passwords, NFS for file sharing. However, NIS security is terrible and it and its replacement NIS+ are now kind of dead. Everyone doing this in the enterprise is now using some implementation of LDAP. LDAP as a protocol is quite similar to AD - you can in fact ...


22

You can build your own authentication solution similar to Active Directory using Kerberos and OpenLDAP. With the same OpenLDAP or using Puppet you can implement policies. There is also FreeIPA that gives security information management solution combining Linux (Fedora), 389 Directory Server, MIT Kerberos, NTP, DNS, Dogtag (Certificate System). With a ...


8

You can use Samba AD as an MS and Linux compatible domain environment. See the Samba FAQ on some initial reading. As of this answer Samba can create or join an Active Directory Directory Services (AD DS) domain up to a forest/domain function level of 2008R2 as a domain controller. Both Windows and Linux machines can join this domain. Linux computers will ...


7

LDAP. Lightweight Directory Access Protocol would be a good starting point. It might not do everything AD does, but you can usually find things to do what you want according to the Unix philosophy of small tools that do one thing well. I think AD actually uses LDAP as its core.


2

For anyone who is here just looking for a way to list all users on your machine in the command line, and don't need a loop. Just run this command: net user And it will output what you need in this format ------------------------------------- User1 User2 User3 User4 The command completed successfully.


1

This is definitely not the default behavior as pointed here. In your case the domain admin is using third party script or tool which is achieving that behavior. You should investigate this further, by examining your gpo and the installed programs on your dc server.


1

I don't recall an account being locked when the user forgot to change the password before the deadline (I know this happens a lot in hardened Linux servers though). In case it really did happen, assuming you have domain administrator access, you can: Login your domain controller as domain admin Open up "Active Directory Users and Computers" Go to "Users" ...


1

To recover your account. A question to ponder. Whos computer is this? If it's yours, then your default folder may have been hijacked. If it's your GF's computer then it was really never yours and you should have sync'd your account in the following manner. Sync your account: url, chrome://settings/ Sign In: Sign into your "gmail" account here. Sign In: ...


1

To eliminate problem of someone locking the screen when PC set to auto logon. Set the PC to use a PIN to logon Put a sticker on PC with PIN written on it Not perfect but doesn't expose account password.


1

We use Blaser WinUnlock in our environment. It's not buggy like Unlock Administrator and much easier to deploy. The latest version works on Windows 10, being that we're a school, it let's us audit what the students are doing if they leave a machine locked overnight or for hours during the school day.



Only top voted, non community-wiki answers of a minimum length are eligible