Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

0
votes
0answers
9 views

BGinfo preview working but after apply not working

BGinfo preview working but after applying nothing happens, no text appears.
0
votes
0answers
22 views

How to configure the DNS in AD to return local addresses for some names in a domain and use the external DNS for other names?

I am relatively new to Active Directory. In the LAN, we need to return some local addresses for some names but for some other names, we just want to get the IP as-is from the external DNS. Example:...
0
votes
0answers
14 views

Identify configured password retry timeouts

I'm in a corporate environment and log-in using my keycard and a PIN. I also have a password for my Windows user, which I rarely use. Now I temporarily need to use my password for an automated script ...
6
votes
1answer
1k views

Windows: Does admin have access local disk to pc that joined AD server?

I'm new to windows, I have a question that if I have a pc and that pc joined and AD windows server, does admin have full access to my pc, even though he/she doesn't have my password, for example: ...
0
votes
0answers
17 views

Microsoft ADAMSync / LDS - How to change the standard port

I am trying to sync my actual LDS instance from Windows Server 2008 to my new test LDS instance on a Windows Server 2016. Sync from LDS Server: because we created custom attributes and there are ...
0
votes
0answers
15 views

Internal website blocking using DNS server

I have an internal network DNS server running on windows server 2016. Currently I have the DNS server to redirect all requests to blocked websites to an internal tomcat server which will display a ...
-4
votes
0answers
36 views

restrict user to Access C drive but user Profile keep on C drive [closed]

Actually we want to restrict C drive access for Domain user what we done in our end and where we stacking and what is our concern Please find below Ans 1. we able Restrict c drive successfully ...
0
votes
0answers
15 views

(SCVMM/Hyper-V) Automate checkpoint restore - The trust relationship between this workstation and the primary domain failed

I'm looking for permanent fix to avoid issue "The trust relationship between this workstation and the primary domain failed " after machine restore its state with automate checkpoint restore in SCVMM/...
1
vote
1answer
40 views

Docker authenication with Active Directory with Remote connected IIS

I have setup an IIS inside a container and I can use the host's IIS to connect to that "server". Next step, I need to host a web application inside (I have successfully done it if the web is not ...
0
votes
0answers
8 views

I'm trying to intergrate gitlab with active directory and I'm getting this error

This happens when I try to run gitlab rake. Also, the server is showing a 502 error. I'm fairly sure they are connected, but I can't make sense of this error. rake aborted! Errno::ENOENT: No such ...
0
votes
0answers
9 views

Multiple Azure AD and Managed Service Identities

Is there a way to synch multiple azure AD's such that Managed Service Identities can be shared across services running under different Azure AD tenants. This is a cloud only secenario. I do not have ...
0
votes
2answers
41 views

Can't print as a Domain user who is however added as a Local Admin

I log on to my machine as both a local Admin and as a domain user who is however a local admin too.But login in as the domain user I can't add a printer that's shared on a PC which is on the domain, ...
0
votes
1answer
31 views

How can I monitor a process being or arguments of a specific utility in my network?

Adversaries may use InstallUtil to proxy execution of code through a trusted Windows utility. It can also be used to bypass process whitelisting through use of attributes within the binary that ...
1
vote
0answers
26 views

Unable to authenticate on Samba AD DC server

I have a Raspberry Pi 3B+ that I use as a home server. I have installed and setup Samba AD DC from the Raspbian pacakges (4.5.12+dfsg-2+deb9u4). I have configured SSSD on the AD DC server to ...
0
votes
0answers
14 views

How to setup admin group

I have this school project where I automated some file transfers on a closed network with PsExec, however every time I have to put in credentials of the remote user to do it. I've seen people talk ...
0
votes
0answers
3 views

How to make the Default Domain Policy apply to the domain? [migrated]

We have a domain, and it has a default domain policy that has existed for 16 years (since 2003): I just realized today that this policy, with all its policies, are not being applied to any users or ...
0
votes
0answers
6 views

override_gid in sssd with local users and two Active Directory Domains

My sssd.conf includes two domains. The first one "BOB" authenticates and uses the override_gid. The second one "RAY" authenticates but doesn't use the override_gid. Anyone know how to get the ...
0
votes
1answer
24 views

AD user can't login to laptop

I have created a home lab environment to practice Active Directory, I have managed to set the domain controller up, ad it seems to be working. However, I added a laptop to the domain, and I was able ...
0
votes
0answers
20 views

VM Group Policy Object

I have created a virtual machine as part of my home lab, to learn about AD and group policies etc. I have created a group policy in the Domain Controller that disables the control panel, and have ...
0
votes
1answer
28 views

AD Group to login to servers

I'm currently creating a home lab and playing around with active directory and I have a couple of questions. What is the default group for server access? I can only seem to login to my servers ...
0
votes
0answers
15 views

AD sites&subnets vs domain trusts

Setup: Our company has an administrative top level domain called (for example) bean.com. Each site gets their own domain sublevel [NameOfCity].bean.com with (of course) their own domain controllers ...
0
votes
0answers
27 views

denied rodc password replication group, screen splashes when login

I am trying to login in my domain using the users screen in ubuntu. After entring username it asks for password then it splashes and again go back to users option in thee lock screen menu. smb.conf ...
0
votes
0answers
30 views

Change AD Computer Description via CSV and Powershell

I'm fairly new to scripting in PowerShell, therefore, please pardon my skill... I have this mini project to update AD computers descriptions based on the following format from a CSV file I have: ...
2
votes
1answer
68 views

Running “net” commands with /domain flag outside of the domain

As a part of my work I sometimes connect to a network with an AD environment/Domain, and receive domain user credentials. However, my machine is not a part of the domain. So when I try to query the ...
0
votes
1answer
20 views

Where does Authlite store the second factor?

Authlite is an Active Directory extention to use second factors. They seem to have their own partition on a domain controller, and use global groups to manage their users. So the question is where do ...
1
vote
1answer
28 views

Need to allow standard users to run sc stop/sc start commands for e1iexpress

A persistent problem we have is that on our computers, our internet drivers crash when laptops move from place to place. In theory, we could solve this by giving the users a script to restart the ...
1
vote
0answers
37 views

Cross Domain Windows Authentication “Allowed to Authenticate” not working

We have couple of websites which is working on different servers and all are internally connected with the LAN. All websites are using windows authentication. Now I would like to use Single Sign ON ...
0
votes
1answer
44 views

How to automate registration of a scheduled task through GPO using PowerShell?

I can manually run the following cmdlet on 10 nodes in AD to register a scheduled task: Register-ScheduledTask ` -TaskName "MyTask" ` -Action $inlinePowershellScript ` -Trigger $...
0
votes
0answers
11 views

Username canonicalization in kerberos tickets

I have following problem with my system. Server-Linux is attached to Active Directory and hasAD-REALM. Client-Linux is attached to freeipa and has LINUX-REALM. Freeipa trusts Active Directory (one ...
0
votes
2answers
26 views

Given self signed CRT and KEY files, can I install these into a Windows Active Directory intranet setup for all machines to pick up?

I'm looking into setting up the Zulip chat server on a local Active Directory intranet. The chat server requires an SSL certificate which I'm able to generate CRT and KEY files from OpenSSL. However ...
0
votes
0answers
26 views

How to view the current access token in Windows?

How is it possible to view the current access token for a user in a console session? I know specific tools, like Mimikatz, are able to do this. But how can it be accomplished using either Command ...
0
votes
0answers
23 views

Windows 10 Mail with Exchange, Active Directory, and Internal Certificates

I have a Server 2012 R2 (functional) domain, with Exchange 2013. I also have an internal Certificate Authority that all of my client computers trust (certificate added to the Trusted Root Publishers ...
0
votes
0answers
62 views

Roaming Profiles vs File Sync, Mac OSX 10.14 Mojave

Is there anyway to make a roaming profile for Mac OSX 10.14 ? I've tried trawling google but not come up with a solution yet. I want this to synchronise whenever connected to the DC (Domain ...
0
votes
0answers
24 views

“Always install with elevated previliges” UAC issue on window server 2012

In group policy administrative templates i enable the policy " Always install with elevated privileges" on both user and computer configuration but still the problem persist that as i try to install ...
-1
votes
1answer
54 views

What's a non-ActiveDirectory domain?

I'm new to Active Directory and all that stuff. What does a non-ActiveDirectory domain mean? I'll be more clear. There was this answer in a discussion " NetBIOS is a legacy Windows NT 4 name, only ...
0
votes
1answer
114 views

Cannot change my network id or domain name On win 7 Enterprise

Im logged in as a local administrator on a machine part of a workgroup and find that Under the "computer name" tab in system properties, the option to click the "change" button or "network id" is ...
0
votes
1answer
67 views

Integrate AD with RHEL

Is there any way that RHEL can be integrated with the Active Directory. Currently running the below from the Powershell ISE with RemoteAdmin Tools installed on windows. Get-ADUser -Server AD.com -...
-1
votes
0answers
19 views

ReadOnly Access for members of Active Directory Group

I have a Linux host that runs on CentOS 7, joined to domain through realm. My goal is to provide ReadOnly access to one of the AD groups say "LinuxRO-USR", the users of this group should only be able ...
0
votes
0answers
24 views

Cannot do su in CentOs

I have troubles with su on system that is attached to Active directory. [user1@host_test ~]$ su - username Password: su: Permission denied [user1@host_test ~]$ But i can access server with ssh [...
0
votes
1answer
48 views

Set an Exception in Linked Group Policy so particular settings are not inherited and replace with custom setting

I have a global group policy which holds several policy settings and configurations. Within this global policy I have a Folder redirect set. I have linked this global policy to one of my OUs but ...
0
votes
3answers
67 views

Single instance of a program, with access to multiple users

I want to make my software to run on a certain computer, and if the current user logs out and another logs in, it shouldn't close and the new user would continue the work where the last one left off. ...
1
vote
1answer
73 views

Sorting output of Get-ADComputer efficiently

Powershell beginner here. I want to run a command in the terminal to list all the domain members of the specified domain with select properties, sorted by name. I have a domain with just under 400 PCs....
0
votes
1answer
61 views

How to grant local administrator privilege for one command?

I'm using Windows 10 / DC Server 2012 R2 and I have some power users that needs to execute a manage-bde command that requires Local Administrator privilege. Is there away that I can allow them to ...
0
votes
2answers
49 views

Is it possible to interact with Active Directory without a domain user account?

Can someone without a domain user account interact with Active Directory to obtain, e.g. password policy, list of domain users, list of domain controllers etc.? - or is it impossible to interact with ...
0
votes
1answer
51 views

New Windows Domain Name

For the first time I am building a domain from ground up. I gave the domain name the name of the business, and before doing so I didn't think to check online to see if it was already being used on the ...
0
votes
0answers
66 views

Addition of SID protector with bitlocker fails on USB stick

I’m trying to create a usb stick that is personal per employee using bitlocker and sid protectors I’m following this tutorial : https://www.experts-exchange.com/articles/25879/A-new-aspect-to-securing-...
0
votes
1answer
445 views

ldapsearch - Strong(er) authentication required - Transport encryption required

I'm trying search my company's AD with ldapsearch. However I always get the error: ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required....
0
votes
0answers
15 views

Asp.Net app won't make external calls

Given: An ASP.NET application published to IIS on a server on port 81. The app calls external data provider over http (call), using a proxy. The app runs fine locally, but it fails on a server. When ...
1
vote
0answers
12 views

LDAP create members relations for users and groups

I don't have an access to LDAP server, instead I've a DB with tables for Users and Groups. Now I want to build a table with members relationship, in other words I would like to build a table where ...
0
votes
1answer
42 views

Capturing Command Output Based on String

I found this script and I am trying to use it to find an AD account by searching the membership of groups like so: ForEach ($Group in (Get-ADGroup -Filter * -searchbase "dc=acme,dc=local")) { $...