Questions tagged [active-directory]

Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

AzureAD PowerShell - how to read CountryCode, DistinguishedName, middleName, msExchRecipientDisplayType, msRTCSIP-Line and other attributes

We are syncing on-prem AD to Azure AD using AzureADConnect and need to verify that the following attributes from on-prem AD are syncing successfully. Can you please help with the PowerShell commands, ...
0
votes
1answer
32 views

Windows (10 and Server 2019): Why suddenly Search Active Directory button is greyed out (disabled)?

I do not understand this unexpected behavior: I'm making some experiments with VMWare Workstation 16 Pro and few virtual machines with Windows 10 Pro (20H2) and Windows Server 2019 Standard. I put ...
0
votes
0answers
30 views

Trouble joining my domain

An active Directory Domain Controller (AD DC) for the domain xyz.com could not be contacted. i tride to solve this but nothing when i tried to join new computer to domain show massege that domain ...
1
vote
2answers
44 views

Determine to which PSSession a command belongs to?

Good evening Some PowerShell Commands are available online and on-premise, for example, Get-MailContact Is there a way to recognize if the local Server or e.g. Exchange online is answering the call of ...
0
votes
1answer
9 views

Enabling office 365 logins on non-azure virtual machines

I'm kind of clueless here so please bare with my mistakes. We are using Office 365 and our user accounts and resources seems to be listed in the Microsoft 365 admin page (and it looks like there is ...
0
votes
0answers
6 views

Using a GPO to disable “Ignore DDE requests” in MS Access

I am looking for a way to disable the option ignore DDE requests in ms access with a gpo or a registry edit, but so far my goole-fu has let me down. The only way i found would entail logging in as ...
0
votes
1answer
45 views

How to get user details from another domain

Currently i am in Domain-A and i am trying to get user id details from another domain(domain-B) with below command. net user user-id /domain The request will be processed at a domain controller for ...
0
votes
1answer
49 views

New Windows 10 Loses network shares

Sorry if this sounds familiar, but I have tried other solutions. I have a new Win10 machine that loses access to AD network shares. While I can access them by IP, when I access by server name I get ...
0
votes
1answer
142 views

Windows not able to join local Samba Domain Controller when domain name contains public domain

I'm trying to set up a local samba domain controller in a mixed environment (Ubuntu, Linux, OSX). Domain provisioning worked as per the samba wiki, all the suggested tests succeed, joining Linux hosts ...
0
votes
0answers
10 views

Can I query AD event logs to see what group membership permitted a logon attempt to succeed?

I'm currently looking at some legacy Active Directory security groups and before deleting them, I'd like to do some due diligence to see if they're still actively used. Obviously there is some ...
2
votes
2answers
55 views

Encrypt shared files on AD Domain to prevent leaks

Title is basically a copy of an old question posted on this forum, but due to having a scenario where it wouldn't apply very well, old OP haven't had it answered. Can I encrypt shared folders on ...
1
vote
1answer
99 views

Grant "Read all properties” and “Create Computer objects” permissions to a Computer object

Using a Powershell script how do I grant the "Read all properties” and “Create Computer objects” permissions to this Computer object: mylab.com/Computers/Cluster1. The permissions should be ...
0
votes
1answer
41 views

duplicate user profile after joining PC to domain - old admin user data not accessable

OLD SITUATION: Windows 10 PC in domain "INTERNAL", but not properly added to Active Directory (AD) ADMIN user "INTERNAL\Ken", properly added to AD folder "C:\users\ken" ...
0
votes
0answers
23 views

execute program as computer account

Given a joined Windows 8 or 10 system, how does one run some script with the credentials of the computer account? Without installing any third party tools, just a vanilla Windows install. The purpose ...
0
votes
0answers
26 views

What Windows Process / Component mounts the homeDirectory to the homeDrive?

I'm trying to understand a bit more about the Windows / AD Login Process. In Active Directory one can set a homeDrive and a homeDirectory on the User Object. The same can be set for local users in ...
0
votes
1answer
226 views

Samba4 Domain and Active Directory compatibility?

I'm running a testing AD lab at home which has a AD forest with single domain. The functional level is 2016. I'm trying to move to Samba4 domain controllers for licensing issues and also testing new ...
0
votes
0answers
27 views

Do I need On Prem AD if using using Azure Active Directory?

I work for a small company and we are at the point where we need to set up a domain and centrally manage resources. My question is if I could set up Azure Active Directory and manage our resources ...
0
votes
1answer
30 views

Can windows-activated laptop can be detected when it's on through ActiveDirectory or some other way?

I know it's a long shot, but since I'm not knowledgeable enough in this matter, I'd like to hear from experts. I'd like to know when my brother's laptop is on. I don't have access to it and I don't ...
1
vote
0answers
13 views

MapDrive via GPP with credentials

At work, one users from a specific domain (and forest) used to map netword drive via script (specified in ScriptPath attributes). All network drives are mapped via GPP, except one. Actually this ...
0
votes
0answers
13 views

How to create user that have permission just system batch in Active Directory?

I need a create user account that have permission just systems batch in Active Directory? Specifically restrict user to execute batch files only in directory.
1
vote
1answer
96 views

Powershell Remoting into Non-Domain server issue

Can anyone help with the following problem? I am trying to remote into a server (SVR_A) that is not part of the domain from the server (SRV_B) in a company domain. The IP address range of SRV_B is 10....
0
votes
0answers
5 views

Active Directory /Home mapping

I have never give this much thought but the need has arisen. When you go in to ADUC and look at a users profile you can specify their Home Folder and the drive letter to map to it. Then when the user ...
0
votes
0answers
15 views

Error Connecting to linux pop3 server from Active Directory Users (Local users OK)

I am migrating to a new Win2012 Active Directory Domain (for the sake of the example, let’s call it "example.com") and I have a Debian 10 Linux mail server (postfix/dovecot) with the same ...
0
votes
0answers
29 views

Active directory and folder access

Allow Active Directory userA to access folderA on Virtual Machine, when logged from computerA. Restrict access to same user and same folder, when logged from computerB. Is this possible? How?
0
votes
0answers
24 views

Site link which works in AD inter-site replication

In AD inter-site replication, the site link with low cost is preferred for replication. My doubt is, if two site link has same cost then both site link works or any particular site link works? If the ...
0
votes
1answer
38 views

Why isn't Bitlocker Recovery Password appearing in Active Directory?

Per Microsoft's recommendation, I enabled Bitlocker on a new Windows 10 VM after joining it to my local Active Directory domain. After enabling Bitlocker, I went to go check that the recovery password ...
0
votes
0answers
25 views

How to configure DNS to join an Active Directory domain while maintaining internet access?

I have two virtual machines both running Windows Server 2019 Datacenter on my workstation. The first, lets say LIGERSERV, is an already-configured Active Directory server with a Active Directory-...
1
vote
1answer
58 views

How can I check if a Windows account belongs to an AD group?

Is there any command or tool I can run from my desktop, not from AD server, that I can pass a Windows account and get a list of groups it belongs to? Or pass a group and see the users it contains?
0
votes
0answers
247 views

AD: No TGT after logon

I’m investigating a domain where logon does not seem to produce a TGT. After logon with a test account, klist tgt outputs this: Current LogonId is 0:0x71647be1 Error calling API ...
0
votes
0answers
85 views

Getent doesn't show AD users/groups

I use Samba4 and Debian 8 and have a problem with getent passwd/group. When I do $getent passwd administrator I get administrator:*:0:100::/home/MYDOM/administrator:/bin/false however, when I do $...
0
votes
0answers
28 views

Why does an UAC prompt appear when running MMC with the ADUC snap-in as a separate user?

I've saved a custom MSC file containing the ADUC snap-in; due to the way that my test environment is configured, I need to run the snap-in as a separate user with domain admin permissions (rather than ...
0
votes
0answers
348 views

TEMP.Font Driver Host folders are created in the c:\users folder

One or two months ago we are encountering a pretty weird problem. When we log out and log in with another user a folder will be created in the c:\users folder named TEMP.Font Driver Host. If we do it ...
0
votes
0answers
35 views

How to replicate deleted Active Directory objects when Recycle Bin is enabled

I am trying to replicate a number of AD objects to a remote domain controller using the replicateSingleObject ldap operation. In order to demonstrate the issue, I created the following simplified ...
0
votes
0answers
44 views

Password replicated to RODC but when login via RODC, it shows the username or password is incorrect

I am using the two domain controller in active directory. One is writable DC and the other is Read Only Domain Controller (RODC). I was replicated the user and computer passwords to RODC from writable ...
0
votes
0answers
14 views

What is the first Update Sequence Number (Usn) assigned to a domain controller

Does every new domain controller's usn starts at 1? Or is there a logic that determine the first usn for a domain controller?
0
votes
1answer
235 views

Active Directory - Restrict User to login only one PC at a time

I want to implement a policy which is related to specific users on domain. What I want to achieve is: If a user login, let's say, to PC1 he should not be able to use any other PC using his credentials ...
0
votes
0answers
20 views

Network share not accessible after adding new domain controller

I've got a bit of a weird one. Several users are connecting to our internal network shares from PCs that are not joined to our active directory domain. This has worked fine up until now when they are ...
1
vote
1answer
28 views

Bind9 as non-recursive public DNS forwarder for AD

We use Active Directory. We have two local networks in domain, one in our building and one on Amazon. We are using two domain controllers on each local network. All 4 of them are synchronized over VPN....
0
votes
0answers
32 views

Change password complexity rules on GPO in windows server

I need to customize the password complexity requirement in active directory GPO. But I cannot find the way to change the password complexity in GPO. The default password complexity contains Capital ...
0
votes
0answers
35 views

Trying to Install two program and their respective d3d11.dll into games main exe folder

*They bare the same name and file extension d3d11.dll . In order for the game.exe to make use of Both programs ; their contents and respective dlls "d3d11.dll " x2 have to be placed in main ...
0
votes
0answers
27 views

Join a Linux (ubuntu 18.04) Instance to AWS Directory Service (Directory type: Microsoft AD)

I followed the document https://docs.aws.amazon.com/directoryservice/latest/admin-guide/join_linux_instance.html Everything was working fine, but suddenly started to fails. I decided clean all and ...
1
vote
1answer
147 views

How to figure out my Kerberos principal on Windows?

On a Unix system with Kerberos configured, I'd use klist... How does one query his Kerberos principal(s) on Windows? (Using the Active Directory, not MIT implementation.)
0
votes
1answer
85 views

How to prevent BYO devices connecting to AD domain

My client has a computer lab several with Windows 10 PCs connected via ethernet to the company's active directory domain. each individual at the company has their own credentials with which to login. ...
0
votes
0answers
10 views

RSAT A/D Has “Local Error Occured”

I have RSAT installed on my Windows 10 (2004) Professional computer so I can manage my systems. I am connected to top level parent domain and logged in as an Enterprise Admin. I can open Active ...
0
votes
1answer
39 views

Does Windows automatically checks in the background stored Windows credentials?

I have a situation where a Windows 10 PC (named "A") apparently tried to connect every day to another Windows 10 PC (named "B") using stored Windows credentials. I know I manually ...
1
vote
1answer
73 views

Widows 10 Active directory profile desktop not responding after restart and login in outsite domain network

Windows Server 2012 R2 active directory profile has been configured in windows 10 pro-64-bit laptop and was working fine and we restarted the laptop is in outside domain network and after logged in ...
0
votes
1answer
72 views

Cannot Restart Windows 10 workstation

I have a Windows 10 Pro (version 20H2) workstation that is joined to an Active Directory environment and it will not restart. I first noticed that it would not restart when remotely attempting this ...
-4
votes
2answers
542 views

How to export AD user properties with PowerShell to .csv file?

I have a problem exporting AD user properties to .csv file which are members of a particular AD group. This is my code $ExportPath= "C:\Users\group_list.csv" $groupname = "group1" $...
0
votes
1answer
36 views

How can I determine when a user logs in to a workstation using a certificate as opposed to a username and password?

We have rolled out smart cards and Yubikeys to most of our users. We need to collect metrics on the usage of these MFA devices. Right now we have custom code that runs on the client that does an OK ...
0
votes
0answers
22 views

OpennSSH for windows: %u gives <domainname>/<username>

I'm using OpenSSH 8.1 for Windows and I'm trying to chroot users to their AD home dir [D:\homes\sub\<username>] using %h in the config file, however the chroot-directory redirects the user to ...

1
2 3 4 5
20