Questions tagged [active-directory]
Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard. Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.
1,081
questions
0
votes
1
answer
27
views
PsExec Access Denied on remote computer
I am trying to start a program remotely using PsExec, however when attempting to connect I get the error message "Access is denied.".
Most of the answers found here on SU or on other forums ...
- 1
0
votes
1
answer
54
views
Can AD CA certificates for internally facing sites be inherently trusted?
Is AD CA (AD Certificate Services properly configured) all that's needed for (SSL certs on) internally facing sites to be trusted w/o any additional configuration on domain-joined clients?
Say:
...
- 266
0
votes
0
answers
41
views
Cannot access the file server with just \\hostname in file explorer
I can access a server on the File Explorer only by fully qualified domain name, FQDN. Full story:
We have two domains, our company's domain, Apollo and the parent company's, Zeus.
We are running on ...
- 21
2
votes
1
answer
139
views
Events 8038 and 8020. The system failed to update DNS (error 9701)
When a pc boots it is unable to update it's DNS record. However, it works fine if you run IPCONFIG /RENEW, or IPCONFIG /REGISTERDNS or just leave it for a day.
Setup:
Client
Clean Windows 10 install
...
- 123
0
votes
0
answers
39
views
The computer's hostname is not set correctly
So I wanted to connect my centos VM to my Windows Server VM that is currently hosting my Active Directory Server (both are on Host-Only Network). I know that the server is working, up and running, and ...
- 1
0
votes
1
answer
35
views
GPOs not applied when moved to OUs containing groups
I'm new to AD, and I'm starting with Samba AD.
I've created multiple single purpose GPOs, for instance "Shares - Home" which mounts the home share (\\nas.example.com\home), another "...
- 101
0
votes
0
answers
117
views
Safe removal of NT SERVICE\All services from GPO log on as a service
I've searched for many weeks now if it's safe to remove NTSERVICE\ALL SERVICES right from 'Log on as a service' User right assigment.
Goal here is to increase my GPO's security. I do want to limit to ...
- 1
0
votes
0
answers
57
views
CME through Proxychains timeout
I have a proxychains working with SSH Dynamic to a server hosting a VirtualBox network and when I try to use crackmapexec with proxychains it doesn't work and I believe it's something related to ...
- 13
0
votes
0
answers
23
views
Creation of second Active Directory Forest based on configuration created beforehand
I'm considering use of dual forest configuration where second domain (forest) will be hardened version of the first domain with one-side trust. And I wonder if there is a way to avoid most of double ...
- 411
1
vote
0
answers
53
views
Track the LDAP request failures in the domain controller
In our environment we have configured the application servers to connect the domain controllers for LDAP request over the port number 389 and it is working fine for a long time
Recently the ...
1
vote
1
answer
53
views
How to communicate with VirtualBox NAT network from another device
Network scenario
Hi, I recently built an AD lab environment called GOAD on GitHub on my secondary PC (PL4YGR0UND) running Ubuntu 22.04 and I don't know how to communicate with VM's inside Virtualbox ...
- 13
-1
votes
1
answer
52
views
Windows login against AD without joining it
I read here and there that it’s possible to authenticate against an AD without the computer being a member of it.
I’m having a hard time since few days trying, I manually set the DNS on my laptop (...
- 101
0
votes
1
answer
81
views
Get-ADUser shows much fewer info on my pc than on coworker's pc
I have no opportunity to install RSAT so I just imported
Microsoft.ActiveDirectory.Management.dll and
Microsoft.ActiveDirectory.Management.resourses.dll.
Such commands as Get-ADUser work, but I get ...
- 1
0
votes
1
answer
39
views
Is it possible to run a batch file in user's profile at once after logging into it automatically having done some settings in Active Directory?
I have a batch file containing a script that automates an operation. I would like that the batch file can be run at loading into user's Windows machine profile of a local network. Can I get this ...
- 101
1
vote
1
answer
67
views
AD Samba file server, PAM, set quota when user connect for the first time
I am trying to set quota on some directories when the user connect for the first time to the samba box (that runs on Rocky Linux 8). So, before being able to use the samba share, the user has to ...
- 37
3
votes
2
answers
2k
views
Powershell / cmd command to change an AD users password
I have tried to find an answer to this but maybe it is just not possible.
So I have several AD Users for different tasks.
for-a.surname
for-b.surname
for-c.surname
And of course I have to change the ...
- 143
0
votes
0
answers
70
views
Launching an application with admin priviledge in non admin session
In our company, we maintain and deploy a native binary application to our clients' Windows 10 systems.
They used to be able to execute it with admin privilege while being in a non admin session, but ...
0
votes
1
answer
921
views
How to export Get-ADUser results to CSV without quotes and with additional blank fields?
I'm trying to export some data from our Active Directory to a .csv file. The file needs to have certain columns (because the tool which will import the .csv file is very strict and I cannot alter it) ...
- 163
0
votes
1
answer
124
views
AD user with group write rights opens read only files
I don't know whats preventing a windows domain user from writing into network share files, and I'd thought to ask for help.
The user should get modify/write rights to any file on the network share ...
- 139
0
votes
0
answers
135
views
How to specify an alias in AD "Log On to" as computer name?
I'm trying to setup one user tied on a Windows 10 Pro computer (kiosk) on a Samba 4.18.2-Debian powered AD domain using the Users and Groups > (user) > Properties > Account > Log On to ...
0
votes
0
answers
33
views
Admin rights required to access serial connection
I'm just getting started with Active Directory and stuff and created a WS2012R2 domain controller and created a new user with admin right.However it seems that now I can't access the serial connection ...
- 1
0
votes
1
answer
292
views
Unattended Windows Domain Join
I was wondering if it’s possible to make an unattended Domain Join in Windows. Let’s say I have my computer object set up in my Active Directory. Each computer object has its own machine password. I ...
- 3
0
votes
1
answer
82
views
Which LDAP server is used by default?
When doing LDAP requests in C# for example, I do not need to explicitly use an LDAP server address for PrincipalContext and DirectoryEntry. I can use one, but it will find users even without.
How does ...
- 119
0
votes
0
answers
159
views
Sync Active Directory Users to Outlook Contacts
how to update and sync everyone's outlook to read the contact details from Active Directory please note that we dont have Exchange Server, just need to update the Domain User's Outlook contacts from ...
2
votes
1
answer
356
views
Ansible - How to create dynamic inventory that fetches hosts from microsoft AD
I am using Ubuntu as a control-node, and would like to get the hosts from my domain controller (windows server 2022), the LDAP-Inventory Guide & microsoft.ad.ldap inventory – Inventory plugin for ...
- 23
0
votes
1
answer
85
views
Is it possible (how) to copy certificates from my desktop to my laptop?
I have a desktop with certificates installed which allow me to sign into Azure DevOps. I do not have those certificates on my laptop, but I want to get them there so that I can also sign into Azure ...
- 141
0
votes
0
answers
61
views
Why is AD DS DNS working only in Host-Only mode between 2 VM?
I'm using Parallels Desktop...
Why when I put:
my ADDS Windows Server VM in host-only
my Windows 10 VM in host-only
from my Windows 10 VM I can join the domain
...while host-only does not allow ...
0
votes
0
answers
17
views
Account made with Azure AD and problems with Group Permissions
Is it possible to create a on-premise AD account and link the Azure AD account to it? Overall, I want to avoid rebuilding a account.
1
vote
0
answers
39
views
How to remove computers in bulk from AD on Windows Server 2008
I have a list of computers (CSV) I need to remove from AD on an old Windows Server 2008. Powershell doesn't support the command
Get-Module ActiveDirectory
What is the best way to do this without ...
- 21
1
vote
0
answers
76
views
Installer files for GPOs on SYSVOL or Dedicated Share?
Say I wanted to deploy a number of software packages using GPOs, where a GPO would reference an absolute path to an installer file (i.e. installer.msi). What are the pros/cons of hosting installers ...
- 11
0
votes
2
answers
548
views
Run Invoke-Command on an array of computers in Powershell
I want to get result of Test-Path (or ultimately be able to run any command) on a list of computers that was returned from another query but I get wrong info for my return
This is my code
$AD_list = (...
- 19
0
votes
1
answer
173
views
How do I install PowerToys to many computers in Active Directiry?
We in our company find Microsoft PowerToys a very useful extension to Windows 10. For example the FansyZones power toy alone can take working with Windows to the next level being an awesome hybrid of ...
- 7,303
0
votes
0
answers
29
views
User receiving "Remote sign in" error on login but the user is signing in directly
Server 2022, Active Directory on a HyperV VM. 1 Windows 10 host as well. The VMs are on an internal Virtual net so theres no other traffic to worry about. I have created a test lab for GPO tests for ...
- 377
0
votes
1
answer
66
views
Active Directory DNS security and zones
Excuse the rather long post explaining, I hope it makes sense!
We have a bit of a debate at work as how to best secure our AD DNS schema.
Our AD is designed with the 3-tier security process with T0 ...
- 1
-1
votes
1
answer
36
views
Passing windows AD machine authorization to linux VM?
after trying for multiple hours to get this (not even necessary, but I somehow got lost in "the zone" and was committed) working without a single clue about the whole AD infrastructure, I'm ...
- 3
0
votes
1
answer
90
views
Which machine or domain does mimikatz sekurlsa loggedon return logged on users from?
The mimikatz docu says "SEKURLSA::LogonPasswords – lists all available provider credentials. This usually shows recently logged on user and computer credentials."
Where are these users ...
- 197
1
vote
1
answer
145
views
How to iterate through nested ResultPropertyValueCollections in PowerShell?
I'm new to AD and Powershell scripting. Here's what I understand. I'm searching AD groups and receive a ResultPropertyValueCollection, if the group has members, the member.count property is greater ...
- 197
0
votes
1
answer
1k
views
Is it possible to remove cURL command?
I am a new Tier2, Tier3 is requesting I attempt to write a script to remove the curl command from student PC's, is this possible? Should I suggest disabling curl via AD group policy?
- 1
0
votes
0
answers
43
views
ActiveDirectory: Can I manually change the DNS records of the domain controllers within an AD domain?
I got some ActiveDirectory DNS issue I hope I can resolve with your help. (The IPs and subnets below are only examples, not the real ones)
DC partner.com [192.168.1.1] <-- NAT 0:65535 --> ...
- 41
1
vote
1
answer
122
views
How to deny write servicePrincipalName for domain account in active directory
I can't remove write servicePrincipalName property from domain account. Something is wrong with System.DirectoryServices.ActiveDirectoryAccessRule which I cannot understand. Could someone help me ...
- 195
0
votes
0
answers
53
views
Error 0X8004005 - After upgrade DCs Windows Server
So I have the follow issues with administratives shares and unc paths by shares using hostname of pc, but working with ip.
I have 3 DCs with 2 diferent subnets, the one wich stop working as from a ...
- 11
0
votes
1
answer
120
views
How to find all computers running Windows 10 with Active Directory DirectorySearcher?
I'm trying to set a filter for a System.DirectoryServices.DirectorySearcher that locates all computers running Windows 10 within a domain. What is the syntax for a filter that combines two criteria? I ...
- 197
0
votes
1
answer
137
views
Domain user permissions on physical machines
I have:
domain controller
multiple domain users
multiple windows workstations (client of this domain).
The windows workstation are physical fresh new computers. No configuration has been made on it, ...
- 101
0
votes
0
answers
91
views
How to allow Windows 10 standard users to run certain application as administrator?
We have windows server 2016, all clients are windows 10. We want to allow the users to run certain applications (for example OpenVPN, Chrome Browser) as admin, but other applications only as a ...
- 9
0
votes
0
answers
294
views
Updating Policy Template in Windows Server 2016 to Include Relaxed Minimum Password Length Limits Feature
I'm working on a Windows Server 2016 AD server and noticed that the option to relax minimum password length limits is not available in the group policy editor. I understand that this feature is ...
- 19
0
votes
1
answer
149
views
How do I open the "Find Computers" dialog?
When using my computer this dialog appeared.
How can I open it?
Is there a shortcut I may have pressed or some reason this dialog would have opened?
In fact, when it opened, the following dialog also ...
- 253
1
vote
0
answers
140
views
AzureAD/User is not able for logon in services
I am trying to run a service with AzureAD/User, but it is not letting me to add that user in below and run the service.
Service-Logon-configuration:
But it is showing me below error when I run ...
- 11
0
votes
0
answers
86
views
AADJ Autopilot Win 10/11 devices unable to "see" domain in locations when attempting to add via local users and groups
When attempting to browse the domain to add a domain user or group I'm only able to see local machine objects, on all computers.
I'm curious what setting causes this. It seems to be on all machines so ...
0
votes
0
answers
440
views
Difficulties using smart card login on Windows 10 joined machine with Azure AD
I got trouble signing in on Windows login using the virtual smart card as login.
The login works perfectly on the web, so CertAuth is correctly configured. I got the following machines for tests:
...
- 101
0
votes
1
answer
132
views
How to limit number of logins when domain controller is unavailable
is there any way to set an AD group policy to limit the number of logins when a domain controller is unavailable (can't be reached)?
I have 50 laptops in my company that are members of the domain and ...
- 1