Questions tagged [active-directory]

Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

Filter by
Sorted by
Tagged with
1 vote
1 answer
20 views

Can AD users that are set to "User Cannot Change Password" log in after changing password complexity?

I used group policy to bump the password length from 8 to 12 characters on the domain. User accounts that have the following option set are not able to log in. User cannot change password From what ...
user avatar
4 votes
2 answers
538 views

Does a domain joined Windows 10 computer have built-in tools to query AD/LDAP?

I'm on a domain joined Windows 10 Computer and want to query the attributes of my own user account. Are there any built-in tools for that? It is not an admin computer and I don't have RSAT installed. ...
user avatar
0 votes
0 answers
28 views

How do I configure my Windows 10 so I can get read and execute rights but not copy rights on two .exe files, assuming it's possible?

I want to have in my user account read and execute rights on a couple of executables but without the ability to copy them. Searching in internet it doesn't seem possible with regular permission ...
user avatar
0 votes
0 answers
18 views

Creating an AD User that can only access the Network and C Drive [migrated]

Hello fellow Superusers I am trying to create a User that can only acccess the Internet and using the installed Office. The User should have no access to printers, network drives or other productive ...
user avatar
0 votes
0 answers
27 views

Back up Windows 10 Active Directory machine password

I am the (interim) administrator responsible for a number of shared workspaces. I need to do some extensive updates. I usually perform changes on one "source" system and then distribute the ...
user avatar
  • 205
0 votes
0 answers
16 views

Integrating active Directory with Rhel IdM

Has anyone managed to integrate Active directory and Rhel IdM? I read that idm uses active synchronization to integrate user data stored in an Active Directory domain and the user data stored in the ...
user avatar
0 votes
0 answers
15 views

Email Password Change Notifications to Different User in Active Directory

I have a Server 2019 DC, the users on this machine are to change passwords every 90-days. When we're coming up on that change, users receive emails warning them of this fact. I have a few ghost users ...
user avatar
0 votes
0 answers
10 views

How to add all devices to an AD group?

I have a group which requires all devices to be added. There is no group for this I can see in AD. Is there another way to add all devices?
user avatar
  • 1
0 votes
0 answers
99 views

When joining a domain on Linux I get the error:Couldn't join realm: Insufficient permissions to join the domain

This is weird because I could join via Adminsistrator but not via a user I created on the DC I can join normally on Windows clients
user avatar
  • 1
0 votes
1 answer
74 views

Win 10 - Task scheduler not running when specifying a domain account as local admin

I have a gpo that adds a domain account to be a member of the local administrator group on a domain joined pc. I can see the user is part of that group, and have the task scheduler set to run whether ...
user avatar
0 votes
0 answers
23 views

RHEL / CentOS restrict SSH access for certain Windows AD groups

I am trying to restrict SSH users belonging to a Windows AD group through access.conf present in /etc/security. I am facing issue where my AD group name is having spaces, round brackets Eg : Test ...
user avatar
0 votes
0 answers
8 views

How to view all machines that pull group policy from a given DC?

We are planning to retire a domain controller in the near future. I want to see all of the machines in our domain that connect to and pull Group Policy and other domain information from this ...
user avatar
0 votes
0 answers
5 views

Having Issue on Configuring Windows Server 2016 Active Directory

Logged in to windows Server 2016 as an administrator, I have enable Active Directory Domain Services on Windows Server 2016 by adding role. The Active Directory Users and Computers is listing under ...
user avatar
  • 141
0 votes
1 answer
40 views

Recently took over a Domain, cannot manage the domain controller (Ubuntu system supposed to be hosting Windows AD via SAMBA) [MSP]

Guys (and gals and everything in-between), I'm stumped. I'm an MSP and recently took over a new client. The prior IT left on not so great circumstances, and I'm inheriting their mess. One of my recent ...
user avatar
0 votes
0 answers
58 views

How to force users to change their Windows Hello Pin

We changed our password policy in the Microsoft Endpoint Manager and now require a longer PIN. The issue is, in testing we noticed you're only asked to change the Windows Hello PIN, when logging in ...
user avatar
0 votes
1 answer
19 views

How to make a standard image/installation for an new PC in AD?

Surely, there must be a way to clone the programs/configurations of one PC to another one, such that the new PC can be installed automatically in Active Directory. You cannot configure 100 new PCs by ...
user avatar
  • 3
0 votes
1 answer
155 views

windows roaming profile alternative from the local admin perspective

i have to login daily to multiple (30) windows servers. while i am not a domain administrator, i do have admin rights for these 30 servers. sometimes i have to make changes to my home folder, like add ...
user avatar
  • 732
0 votes
1 answer
26 views

Authenticate against AD after ssh into Windows Server

Apparently after ssh into a Windows Server with a key-file the (domain) user is logged into the machine - but not authenticated against the AD Active Directory. So when when log4j tries to write a log-...
user avatar
0 votes
0 answers
30 views

Replicate Domain Controller on Azure

In my company, we have a Domain controller on premise that hosts DHCP and DNS. We want to create a failover VM on Azure and replicate those servers. How to do this? I have read that Azure doesn't ...
user avatar
  • 1
0 votes
0 answers
186 views

Windows 10 domain machine won't use NTLMv2 auth

I have several Windows 10 machines on a corporate domain which are unable to mount an SMB share. Other Windows clients outside the domain can mount the share just fine. The Samba server allows only ...
user avatar
  • 961
1 vote
0 answers
370 views

How can I find out what is using NTLM in my environment?

I have seen Event Logs in Windows Event Viewer with EventID 6038 from Source LsaSrv. My systems are: SQL server 2019 and Windows 10 20H2 machines. I am attempting to audit what is using NTLM ...
user avatar
0 votes
0 answers
28 views

Proper and reliable way of running commands on computers via Active Directory

I'm trying to create an automation application that will deal with users and services and accounts in computers that are connected to AD. I'm trying to get a reliable way with minimum changes required ...
user avatar
  • 1
0 votes
0 answers
25 views

How can I change the IsContainer property of an AD Group?

This question is related to an answer of another question: https://superuser.com/a/1555013/298965 Please, how do I access, view or change the IsContainer property of an AD Group? I have tried it in a ...
user avatar
  • 111
0 votes
0 answers
152 views

How to add a domain user to a computer for first offline logon?

I have a domain user to add to a PC to let he login for the first time remotely. Is it possibile? Usually only known users can log to the computer in offline mode, this is why usually I ask my users ...
user avatar
  • 2,154
0 votes
0 answers
54 views

active directory Domain Admin has no rights on Windows 10 PC

my Windows 10 PC is part of a Windows 2016 Active Directory. I have a regular unprivileged user and and a second user with domain Admin rights. The regular User is used for the Windows Login etc. The ...
user avatar
  • 1
1 vote
1 answer
15 views

How exactly are criteria of conditional access for client state (domain-joined) evaluated

When evaluating conditional access policies within AAD, Microsoft offers to check the device-state. This includes also checks for "Azure AD joined" and "Hybrid joined". If a client ...
user avatar
0 votes
0 answers
16 views

Configure Pulse Secure to ignore AD Domain in Windows settings

I need to use Pulse Secure to connect to a VPN using a computer that is connected to an AD domain from another organization. In the Edit Connection screen I have: Type: Policy Secure (UAC) or Connect ...
user avatar
0 votes
0 answers
32 views

How to allow specific email sender to send only as specific sender(s) when authenticating Postfix against LDAP?

In my Postfix config, I have smtpd_sender_login_maps pointing to a file ldap-senders.cf that contains the following: root@mail:/# cat /etc/postfix/ldap-senders.cf bind = yes bind_dn = cn=...
user avatar
1 vote
0 answers
396 views

How to configure PuTTY to use Windows Kerberos ticket?

Our network uses Active Directory (duh) and all end-user accounts are in AD (not local). I'm trying to configure PuTTY to use the ticket I obtain automatically, when logging into my Windows ...
user avatar
0 votes
1 answer
33 views

After joining computer to Active Directory domain, network connection keeps dropping

I'm working to build out an active directory deployment for my network, but when I join one of my test computers to the domain it seems that the computer gains some sort of idle timeout for the ...
user avatar
  • 3
0 votes
1 answer
288 views

Automatically add AD users to linux group

I need to add users to a specific group on Linux automatically to allow running some programs from another user with no password prompt like: su nopswduser -c 'echo Hello' I'm adding group to local ...
user avatar
0 votes
1 answer
24 views

Does a DC prioritize DNS servers listed in the Server Manager DNS page or the DNS Servers pointed to by its network interface?

I'm learning DNS and trying to figure out the path of a DNS request made by a host in one of our domains. More specifically, if there is a DNS server listed on the DC interface when running ipconfig, ...
user avatar
0 votes
2 answers
101 views

Make OU's Add users to AD, make Groups and add users to groups PowerShell

I'm trying to write a script, but it stops working after making all OU's. The OU's are all made perfectly only the users and groups don't get created which in turn doesn't add the users to the ...
user avatar
0 votes
0 answers
15 views

Questions re: non-Microsoft management systems for a mixed Windows/Mac environment

I work for a company with about 700-800 devices to manage. As a result of COVID, we are now a fully remote enterprise, with users spread all over the globe on several continents. Right now we have a ...
user avatar
2 votes
1 answer
100 views

Connect to a non-domain client from a domain computer BUT as domain user? (Windows RDP)

I am currently searching if there is a way to manage authentications towards a non-domain client by using ActiveDirectory groups and users. Scenario: I have a seperated LAN which is network ...
user avatar
0 votes
0 answers
77 views

Completely disable password login on AD

Is it possible to completely prevent users from logging in with passwords in Active Directory (win 10+ only)? The idea would be to only allow biometrics (Hello), certificates and maybe webauthn-like ...
user avatar
0 votes
0 answers
25 views

How to remember the credentials for a folder share path

When I log into my account (Domain) from PC1 and try to access a shared folder present in a Non-domain PC, I am prompted with a window to enter username and password. But when I log into my domain ...
user avatar
1 vote
1 answer
43 views

How do I know if/when a domain user enters the admin password?

I am working it the IT department in my company. My two colleagues in my department are very intimate with some other domain users. Last week, I was asked to install a new IDE on those domain users' ...
user avatar
  • 3,021
0 votes
1 answer
68 views

How many same time login possible for one user account ( domain)

I am using Active directory 2016 and want to use same user login in multiple locations same time.
user avatar
0 votes
0 answers
16 views

Active Directory 2016 desktop control and shortcuts

I want to restrict domain users from creating/copying files or folders in desktop , but I want to allow them to place shortcut of the files( which are located on other drives) to desktop. Is it ...
user avatar
0 votes
0 answers
16 views

How to add NT AUTHORITY\BATCH and \SERVICE to an Active Directory group

I'm starting a new AD forest/domain (totally unlinked to the existing AD, it's a separate physical network) but have to comply to the approved AD security baseline. On the Primary Domain controller, ...
user avatar
1 vote
2 answers
683 views

MDT Move Join Domain To End of Task Sequence

I'm working on setting up MDT to deploy computers from blank to ready-to-go. I can deploy a computer, but I run into a bunch of issues because of our domain's restrictive policies. The simplest ...
user avatar
  • 610
0 votes
0 answers
6 views

Adding an existing local user account to AD (Windows 10) [duplicate]

We'll have Active Directory at the office and I'm wondering if it is at all possible to use an existing local user account in Windows 10 and make it into an AD-account? The main idea being that all ...
user avatar
1 vote
0 answers
37 views

What is the meaning of the plus (+) sign in the User section of my Git bash shell prompt?

I recently installed Bash for Windows to use Git on my office laptop with Windows 10, an OS I'm not so familiar with. When I open this bash terminal I expect the prompt would show you your username ...
user avatar
  • 11
1 vote
1 answer
60 views

What is my username in Active Directory?

I have a list of usernames net user /domain, which means my PC is in AD. whoami - iis apppool\www.site.com, echo %USERNAME% - MyUsername123$. There is no www.site.com or MyUsername123$ in the list of ...
user avatar
  • 11
0 votes
0 answers
20 views

How to set DNS settings to Automatic

Most of the systems are getting network settings from the DHCP server but due to some requirement I scheduled a script to set the custom DNS IP's on all network adapters using the below scripts, now I ...
user avatar
0 votes
1 answer
26 views

How can the Apache KARAF built-in Krb5LoginModule (JAAS) be application-specific?

I have an environment containing an Active Directory, a Windows client and an Apache KARAF with the built-in SSH server and a realm using the Krb5LoginModule (JAAS). What I'm trying to do is to ...
user avatar
0 votes
0 answers
42 views

Collect Group Members & Administrator from different group on AD (PowerShell)

I need your help about a PowerShell script and I’m a newbie on PowerShell. I have to collect members and administrators of different groups from AD, in .csv format. I have a specific way for that on ...
user avatar
0 votes
0 answers
56 views

Windows 10 randomly logs user out while they are using it

This will be quite a long one so lets start here: 2x users are having the same exact issue with both Dell 5590's on windows 10. I pick one of them to be a Guinea Pig and test some solutions. Both ...
user avatar
0 votes
0 answers
39 views

Issue after removing computer from Active Directory domain

I need some hints about an issue I faced it's a bit irritated. Let me explain the whole scenario and maybe you have some ideas behind it. One of the computers has Windows 10 LTSC 2019 x64 and it's ...
user avatar
  • 1

1
2 3 4 5
21