Questions tagged [active-directory]

Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard.  Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

Linux Kerberos and Ldap problems

i am currently facing some problems with an Debian server which has joined our Active Directory. The server sends out LDAP and Kerberos packages to multiple AD Controllers on different locations ...
0
votes
0answers
11 views

Token-auth-based network file access

We have some NAS devices currently exposed to employees via CIFS (active directory backend for user perms/groups). We are developing a Slurm cluster for processing access-restricted data. Up until now,...
1
vote
0answers
17 views

How to handle Win file server permissions when connecting from Linux?

Situation: We have a file server in Windows Server 2012 R2, and until now the workstations are running Windows. We are trying to use Linux in some workstations (CentOS 8), since all our apps run on a ...
1
vote
1answer
21 views

How to not apply a GPO to only one user?

I have a group policy applied at the domain level for complex passwords. I have one user that I want to have a simple password. From my research, I went to the delegation tab of the specific GPO, and ...
0
votes
0answers
12 views

DDNS Registration over VPN

Trying to do DDNS registration at work within active directory for VPN clients. I deployed VPN profiles using power shell, so the DNS suffix is set and registration is also checked. The PC's every ...
0
votes
1answer
22 views

Azure AD user replication to onsite AD server

I have recently been playing around with Office 365 / Azure AD / Physical (onsite) AD servers. I have managed to create a setup as to where onsite AD users are replicated to the Azure AD portal, and ...
1
vote
0answers
40 views

How to identify the cause of an Active Directory lockout on client computer?

For several months I have been suffering Active Directory lockouts from my Windows 10 laptop, which I use in a networked, business environment. This happens around 4 times each day. Our IT ...
0
votes
0answers
15 views

Server 2016 Standard Security Group automaticlly removing users [migrated]

I currently run a windows server 2016 Standard server as a DC. I am getting an issue where when I add a user to a security group after a few minuites they then are no longer a member of the group. ...
0
votes
3answers
32 views

Is it possible to add a field to the Windows login screen?

Is it possible to add a custom field to the Windows login screen? So besides username and password I'd have to enter a value (which will be checked) for the third field? I assume some changes to ...
0
votes
2answers
36 views

PowerShell Script for creating AD Users - OU subdirectories

I'm working on a PowerShell Script to create users in Active Directory. $pwd = ConvertTo-SecureString -String "Start1234" -AsPlainText -Force New-ADUser -Name "Markus Xidl" ` -SamAccountName "...
0
votes
0answers
263 views

Couldn't join realm: Insufficient permissions to join the domain

I'm getting the following error when I try to join the linux machine to AD: $ realm join proxmox.local --computer-ou="CN=TEST,CN=Computers,DC=proxmox" --verbose * Resolving: _ldap._tcp.proxmox.local ...
0
votes
1answer
246 views

How do i execute powershell command's with pipes in python?

import subprocess subprocess.Popen('powershell.exe [Get-ADPrincipalGroupMembership %USERNAME% | select name]') os.system('powershell.exe Get-ADPrincipalGroupMembership %USERNAME% | select name]') I ...
0
votes
0answers
21 views

Is it possible to join a standalone server to a domain?

A small company I work for is using a Windows 2019 Server machine with 5 people. They log in via RDP to do their work. To make that possible, we bought RDS CAL User licenses. Apparently, since ...
0
votes
1answer
39 views

runas requested operation requires elevation on active directory

I am having trouble understanding what is going on with "runas". Situation: CLIENT is W10 Pro joined & logged in to Active Directory Domain FOODOM. USER is member of FOODOM and default Domain-...
0
votes
0answers
25 views

Restricted Active Directory user to only enumerate users and groups and allow SSO

We use MailStore for archiving our mails. MailStore allows to integrate into Active Directory (e.g. to fetch user info and allow them to login with their AD credentials). See official documentation ...
0
votes
1answer
23 views

How do I customize an ADFS website?

I need to customize some content on an existing ADFS sign in site. By navigating to https://fqdn/adfs/ls/IdpInitiatedSignon.aspx, I can view the site as it is. But changes that I make with varying ...
0
votes
1answer
19 views

Failed logon to an application via AD

My problem at work is we use an application which authenticates via AD. The application processes an event within it, and user must authenticate thru AD. The problem is this application will routinely ...
0
votes
0answers
20 views

Replace SID for Windows Profile

My account was deleted and recreated in the Active Directory. Now everytime I login to a Windows 10 PC I previously logged into, it creates a new profile as myusername.domain. Is it possible to ...
0
votes
0answers
20 views

Synology DS: New domain user can access shared folder

I have a Synology DS215+ with DSM 6.0-7321 which is joined to a AD domain. Everything works fine with existing domain users. Now there is a new user that was added to the domain some days ago. He is ...
0
votes
1answer
42 views

Active directory authentication and LDAP

i am studying Active Directory directory services (AD) and all connected things (LDAP, kerberos, ...). I don't fully understand, how LDAP objects and AD interact between each other. So can you comment ...
0
votes
2answers
43 views

Deny log on specific user to computer

Hi there I am having a bit of a simple task problems. We have pretty simple configured MS server 2012 in our school. The thing is we want to deny access few PCs from ONE user so our students can only ...
0
votes
0answers
36 views

Windows GPO Lock Screen

I configured the GPO in the computer section to lock the screen after 10 minutes inactivity and applied it to all clients. That works so far but I need to exclude some clients which don't need it. So ...
0
votes
0answers
28 views

Secure way to query Active Directory without password

I am coding an application that needs to query an active directory server with ldap. If I do the bind with user and password it works ok. I do not want the app to have a user and password credentials. ...
1
vote
1answer
75 views

Pulling a specific User group - Powershell

So I currently have a script that imports samaccountnames from a csv and gets Name, samaccountname, user group, and the group description. Outputs each in an individual line. the script below: ``` ...
0
votes
1answer
172 views

Group name and description - Powershell

I am by no means a powershell professional and could use a little guidance with something I need to accomplish. I need to generate a csv from AD that contains the following columns: Name, ...
0
votes
1answer
17 views

Okay to delete SQLServer2005 security groups?

Our office has three servers running WS2016 Standard, we upgraded from SBS 2011 a couple years ago. Some things still exist from that time. I don't think the following security groups are related to ...
0
votes
0answers
122 views

Why can't i connect to local file share after i've disconnected from windows built in vpn?

I have a Windows Server 2019 machine with the Active Directory, DNS, File Server and Remote Access roles installed. The server has a static IP address assigned (192.168.X.X for example). I then ...
0
votes
0answers
28 views

Active user accounts from local domain and unused FSP objects in Foreign Security Principals Container

I have primary local domain: Accounts.root.corp. There is 2 way external trust relationship with external domains: infra1.local and infra2.local. In my local domain Accounts.root.corp under Foreign ...
0
votes
0answers
34 views

How to find what causes frequent account lock out?

My Active Directory account frequently gets locked out. I'm trying to understand why this happens. I guess I have invalid password somewhere cached on my system I have removed all credentials from ...
0
votes
0answers
280 views

How can i install DSQUERY or LDP.exe on windows 10?

How can i install DSQUERY or LDP.exe on windows 10? Were can i obtain it? Enabling the Active Directory Services in windows 10 did not make dsquery available. Thanks!
0
votes
1answer
21 views

How to map one property to another in Active Directory?

Is it possible to configure a property in AD to be mapped to another property using Azure AD Connect? Or does it have to be done via PowerShell? The end goal being to map the value of IPPhone to ...
2
votes
1answer
123 views

how to use ldap 'Security Group' for httpd hosted Nagios wesite's authentication?

Here is what we are trying to achive: We want to authenticate windows active directory users who are part of perticular "Security Group", for NagiOS. I've created below new configuration file, for ...
0
votes
0answers
8 views

Azure Directory custom actions / permissions

I am about to develop a user management system for our software cause customers demand it. The easiest way to approach this would be Active Directory since every of our customers is using that for ...
0
votes
1answer
109 views

what are the benefits of upgrading the domain functional level?

I have a domain in Europe, mycompany.eu and another domain in the USA, mycompany.com, they are in a trust relationship, although I don't know which one. I noticed that the functional level of my ...
0
votes
0answers
170 views

Error opening network folder

I have a file server with SMB2 protocol that authenticates users through AD. I am mapping the drive by network IP. However, at some point, I can not open the drive, gives mapping error not found. ...
1
vote
1answer
506 views

Azure AD Sync Error - Existing Admin Role Conflict

I have an issue with our Azure AD tenant syncing with my domain AD account. When we set up the tenant (along with Office 365), we used a generic ID in the format user@company.onmicrosoft.com. My ...
0
votes
1answer
45 views

getting the Active Directory objectGUID of a domain joined windows computer

In Microsoft Active Directory, each registered computer has an objectGUID field. Is this data stored locally on the domain-joined computer? I'm interested in retrieving the objectGUID value by ...
0
votes
0answers
24 views

Mapped drives still directed to demoted DC server

I upgraded a domain controller from Server 2008 to 2016 earlier, everything is working fine but its login script is still mapping the drives to old demoted server 2008 any solution to fix this problem ...
0
votes
2answers
298 views

winbind id command doesn't show user info

I added a RedHat 7 machine to AD with winbind. [root@redhat7 ~]# net ads info LDAP server: <ldap_server_ip> LDAP server name: <ldapservername>.<domain>.com Realm: <DOMAIN> ...
2
votes
1answer
69 views

Linux Active Directory login failed because of password

I have a Linux machine that has a connection to the AD. kinit command works correct (it has no output when I run it). But when I try to login to this Linux, I get "Access denied" error. Dec 20 16:33:...
0
votes
0answers
112 views

DNS Replication in Multi Domain Forest

I am currently working with the AD of a costumer that has the following structure: - One forest - One parent domain > Joe.local - Two Child domains > hello.joe.local and bye.joe.local I am relatively ...
0
votes
1answer
54 views

How to change user on a corporate Macbook? [closed]

So, I just got a Macbook @ work. Someone else had it before and when I start it I only see their name. I can't find any way of switching user. No place to enter username. The computer is connected to ...
0
votes
1answer
233 views

program dsa.msc for managing active directory - where can I get it from?

On a machine with windows 10, I have installed the %SystemRoot%\system32\dsa.msc program. I am not sure how I have installed it there, where I got it from, but It does a good job on having a look at ...
0
votes
0answers
76 views

Cant login to Windows domain from Lock Screen when VPN is ON

Hello I have problem with using VPN (FortiClient) and Windows Domain Login. Everytime when VPN is ON my local internet connection is cutted off If I am afk and Windows Lock Screen turns on (due idle ...
0
votes
0answers
54 views

Roaming profile sync issues - Especially Favorites folder

I have been experiencing errors with the User Profile service failing to upload part of a profile at log off after recent upgrades from windows 7 to 10 1803. This error is evident on the windows 10 ...
0
votes
0answers
84 views

Disable or change Windows 10 password expiration reminders

I'm on a corporate laptop, and they have a fairly short password expiration policy, such that about half the time, I get a reminder to change my password long before it's actually expired. Seems like ...
0
votes
0answers
17 views

How to change the password of a windows service through GPO

THis is a follow up to my previous question here --Can I change the Logon type of a windows service through GPO So I have a custom windows service which is configured to run in a specified user ...
0
votes
1answer
36 views

“Minimal security” with Active Directory Group Policy

I have setup a Raspberry Pi with Samba 4 as a Active Directory Domain Controller on my home network. But I have a simple question: Whenever a computer joins my domain it is assign a rather strict ...
0
votes
0answers
36 views

VM can connect to SQL SERVER but not to ping the server

my schema is like this: Windows Server 2016 with NAT adapter and Only Host Adapter using 192.168.3.2 255.255.255.0 acting as Active Directory Domain Service with DNS and DHCP enabled. The DHCP is ...
0
votes
0answers
63 views

Powershell ACL failing

Errors when running my code below to add Modify access to a folder. I've seen that a common solution is ensuring the AD user exists. I have double check all users I use exists, but continue to get the ...

1
2 3 4 5
20