Questions tagged [active-directory]
Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard. Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.
1,099
questions
0
votes
0
answers
14
views
Enabling Null Sessions on an Active Directory Environment
I did setup an active directory environment with virtual machines and I'd like to enable null sessions on rpc and smb protocols.
the purpose is to be able to extract domain usernames with the ...
0
votes
2
answers
3k
views
Is it possible to remove cURL command?
I am a new Tier2, Tier3 is requesting I attempt to write a script to remove the curl command from student PC's, is this possible? Should I suggest disabling curl via AD group policy?
- 439
0
votes
0
answers
23
views
Find out Active Directory username with correct case on Windows
What's the simplest way for a user to find out what their username is in Active Directory with the case (capital or lower-case letters) exactly as it's canonically stored in AD, in Windows 10/11?
For ...
- 304
0
votes
1
answer
24
views
Why (Get-ADDomainController).Name is different from $env:LOGONSERVER and also different from nltest /dsgetdc:myDOMAIN
Why does (Get-ADDomainController).Name returns a different result from $env:LOGONSERVER.Substring(2) ? :
PS C:\> (Get-ADDomainController).Name
PAR-DC02
PS C:\> $env:LOGONSERVER.Substring(2)
PAR-...
- 1,803
0
votes
0
answers
20
views
change the default download location from c drive to R drive for all apps
We have implemented a new policy in the company to lock the C drive for all employees. We have created a new partition using a PowerShell script. However, the issue is that when the C drive is locked, ...
- 1
5
votes
3
answers
3k
views
enable Google Chrome policies otherwise only available with Active Directory
There are a number of settings for Google Chrome which are applied as "policies". Under the hood, these are registry entries, typically located at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome. ...
CommunityBot
- 1
0
votes
2
answers
49
views
While Function - Loop on failure to match input password for new AD user creation script
I am creating a script with basic variables to create users in AD via PS7 rather than remoting in to AD and manually creating. It runs through several questions and then my script will run at the end ...
0
votes
0
answers
5
views
Group-Policy Not Applied: Access Denied [migrated]
I created a new AD-Group in our Users folder, added all users i need. Within our GPO's "FolderRedirection" in the security filter tab i've removed the authenticated users and added the new ...
- 1
3
votes
1
answer
15k
views
Use Office 365 account to login to Windows 10
Windows 10 has a new feature where you should be able to use our Office 365 Active Directory account to login.
This is the feature:
http://answers.microsoft.com/en-us/insider/forum/insider_apps-...
CommunityBot
- 1
0
votes
1
answer
51
views
Ubuntu unable to join AD
I have setup an AD server in my private network. I can successfully join the domain from windows PCs. But when I try to join my ubuntu clients (ubuntu 23.04) I get errors that get me nowhere on google....
- 331
0
votes
0
answers
15
views
How to add an external email (group) as an AD guest user?
How to add an external distribution list or group email as a guest user in my AD?
Example: [email protected]
Above is an example of an external DL. Can this be added as a guest user in my ...
- 222
1
vote
1
answer
3k
views
Global catalog: Cannot find user via powershell
Short description
My customer has a multidomain forest. I recently found at least one user, that I cannot find by the parameter identity via a powershell Get-AdUser query.
Info about the user
...
- 2,279
4
votes
1
answer
4k
views
Active Directory domain in home network - how to add computer
I had used AD domain before, but the domain was set up already, so I do not have much hands-on experience with setting up everything from scratch, and I am still new to networking side of things, so ...
CommunityBot
- 1
6
votes
3
answers
2k
views
Does a domain joined Windows 10 computer have built-in tools to query AD/LDAP?
I'm on a domain joined Windows 10 Computer and want to query the attributes of my own user account. Are there any built-in tools for that?
It is not an admin computer and I don't have RSAT installed. ...
- 1,175
0
votes
0
answers
18
views
How can I completely delete a user in Windows via the command line? [duplicate]
There is a user Alice that logged in a lot of windows machine using your AD account. In every computer, the windows create the user's files like: c:\users\alice
Now I want to complete remove this user ...
- 157k
2
votes
2
answers
1k
views
Has anyone seen a recently enabled AD account disable itself once the user attempts to login?
This usually happens within the same hour of re-enabling a user's account. The user will contact us because they have been disabled due to inactivity, we re-enable the account and then they will ...
- 41.8k
0
votes
2
answers
11k
views
ldapsearch - how to display “lastLogonTimestamp” & convert windows lastlogontimestamp to date in bash
I want to search Active Directory for inactive users that have no login for x days/months. I've got such a ldapsearch query:
ldapsearch -h domain.test -p 389 -D "cn=login,ou=test,dc=domain,dc=test" -...
CommunityBot
- 1
0
votes
1
answer
4k
views
Windows (10 and Server 2019): Why suddenly Search Active Directory button is greyed out (disabled)?
I do not understand this unexpected behavior: I'm making some experiments with VMWare Workstation 16 Pro and few virtual machines with Windows 10 Pro (20H2) and Windows Server 2019 Standard. I put ...
CommunityBot
- 1
1
vote
0
answers
17
views
Need help in creating custom objectclasses and attributetypes in openldap
I am trying to create an custom attribute in openldap. For which i am suppose to create an objectclasses. Here my ldif file below.
Ldif File Content
dn: cn=schema,cn=config
changetype: modify
add: ...
Shubham Mitkary
0
votes
1
answer
5k
views
Share a folder without admin credential
In our domain, users have "User" permission level, every time some user want to share a folder it will be prompt admin credential to finish, is there a way to allow domain users to freely share ...
CommunityBot
- 1
-2
votes
1
answer
94
views
Is Shadow Admins Really a risk factor in Active Directory?
From my understanding shadow admin is,A user account becomes a shadow admin if it has strong privileges over an existing admin account.
Similarly, any other account with strong privileges over the ...
- 1
2
votes
1
answer
137
views
New-ADUser -Manager from different domain
My Powershell script to create new users does not work when the "Manager" is located in a different domain.
For example, I am creating a user in the domain contoso.com, but the manager is ...
- 182
0
votes
1
answer
5k
views
One user on our domain cannot login on his original PC only
So a user says he went out to lunch and afterwards could not log into his PC. It just hangs whereas it actually does log in in safe mode and other accounts like my admin on the domain also can log in.
...
CommunityBot
- 1
5
votes
1
answer
4k
views
Windows 10 64 domain computer cannot access Linux (Raspberry Pi3) samba share
Samba server:
Raspberry Pi3, running osmc media server (I believe this is a down-scaled Raspbian version).
Samba version: 4.2.10
Domain controller:
Windows 2012
Windows client:
Windows 10 Evt. 64-...
CommunityBot
- 1
0
votes
1
answer
4k
views
How to enable the WMI service on many machines to find MS-Office licenses using the Volume Activation Management Tool 2.0 using Active Directory?
I installed the Volume Activation Management Tool 2.0 from Microsoft to scan all the computers on my network to find out how many valid MS Office licenses we have installed on all of the machines.
...
CommunityBot
- 1
3
votes
1
answer
6k
views
mount.cifs: Any way to mount with kerberos using the machine credentials
When a Linux machine joins a domain, a computer account is created in Active Directory.
Can this account be used to mount a network share with cifs and Kerberos?
CommunityBot
- 1
0
votes
0
answers
22
views
Managing SSH access and who has access
I'm currently implementing AD and some of the users access external servers via SSH (not hosted within the AD) and I'm looking for a way to monitor who is accessing them and maybe limit them. As far ...
1
vote
1
answer
4k
views
Logon failure trying to print using Samba
I'm trying to set up a CUPS print server on a Knoppix system for use by Windows clients in an Active Directory domain. So far, I've had success with printing over IPP. Now I want to explore the ...
CommunityBot
- 1
0
votes
1
answer
10k
views
Active Directory - Restrict User to login only one PC at a time
I want to implement a policy which is related to specific users on domain. What I want to achieve is:
If a user login, let's say, to PC1 he should not be able to use any other PC using his credentials ...
CommunityBot
- 1
0
votes
1
answer
7k
views
PsExec Access Denied on remote computer
I am trying to start a program remotely using PsExec, however when attempting to connect I get the error message "Access is denied.".
Most of the answers found here on SU or on other forums ...
CommunityBot
- 1
3
votes
1
answer
6k
views
Authentication against LDAP on Apache fails with password mismatch
I want to accomplish LDAP authentication on my Linux machine, but can't get it working. Currently, I get the following error in the Apache log: AH01617: user john.doe: authentication failure for "/": ...
CommunityBot
- 1
3
votes
3
answers
6k
views
How can I tell if an active directory group is a security or distribution group?
I need to check if an active directory group is a security or distribution group. As somebody who doesn't know much about active directory - how do I go about doing this?
- 99
0
votes
1
answer
5k
views
Inactivity limit VS Screen saver timeout GPO Policy
We are trying to decided between, the Computer vs User GPO Policies to force the screen to lock for our user workstations. Both seem to have the same overall effect of evoking the screen saver, ...
CommunityBot
- 1
1
vote
0
answers
18
views
How to apply GPO on Local station? [closed]
I have created in the past some rules manaed by the console on the active directory.
I would like to apply the GPO managed by the AD, on a standalone station not connected to the AD.
how can I convert ...
- 42.8k
2
votes
1
answer
10k
views
'net ads join -U username' failing with an error 'NT_STATUS_IO_TIMEOUT'
I am attempting to provide access to Ubuntu shared directories using Active Directory users and group using Samba. I am following this article to install and configure AD and Unix so that access can ...
CommunityBot
- 1
0
votes
0
answers
62
views
backing up an AD DC whose Windows Server (2019) installation has died or fixing a 0xc00002e2
I have a Windows Server 2019 AD DC where it's just that one and no backup DC (I know, I know) which died yesterday after doing Windows Updates. now whenever it tries to boot it BSODs with 0xc00002e2 ...
- 1
3
votes
2
answers
6k
views
Samba Winbind not working in Debian 8
I am setting up a new samba environment based on Debian Jessie.
Installation of PDC was succesfully and Windows clients were able to join. Have a problem at joining the Linux clients.
I was following ...
CommunityBot
- 1
1
vote
2
answers
13k
views
Domain authentication without joining the domain
I am DBA in an Active Directory environment. I often work from home using my private PC (I connect via VPN). My private PC is not joined to the Active Directory domain.
Is it possible to use domain ...
CommunityBot
- 1
1
vote
2
answers
5k
views
Why I can't see the users that I have created
I have created 4 users on Active Directory Users and Computer:
But I can't see the users on my computer management under "local users and groups" nor on my sql server!
So, why I does not have "local ...
CommunityBot
- 1
9
votes
2
answers
579
views
Create "homework only" account on Windows
Like most kids, my kids love computers, and if I let them, they'd camp out on it every waking hour Facebooking and playing video games. So we have an app that limits their time each day (trying to ...
CommunityBot
- 1
5
votes
1
answer
9k
views
QNAP TS-809U: Domain Users / Groups disappear and the server has to be rejoined to the AD Domain
We have a TS809U that we have joined to the domain. Shares and access rights works as the should with the domain users and everything is just the way it should be. But after a couple of weeks/a month ...
CommunityBot
- 1
2
votes
1
answer
8k
views
Windows Azure Directory Sync Generic Failure
Ok so I have a domain that I want to sync to Office365 but when I start the Windows Azure Active Directory Sync tool Configuration Wizard I get an error with the following details:
System.Management....
CommunityBot
- 1
8
votes
1
answer
16k
views
Enable SMB file sharing on OS X - "Incorrect Password"
I have a Mac running Snow Leopard connected to an Active Directory domain. I can share folders on the Mac and view files from Windows without problems.
When I try to enable my Mac account for write ...
CommunityBot
- 1
0
votes
1
answer
6k
views
Group Policy Confusion (Printers configured under users?)
I'm befuddled. Active directory usually makes a bit more sense than this.
The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
CommunityBot
- 1
0
votes
2
answers
11k
views
Restrict Active Directory user by IP Address or Machine Name
I am needing to create a Windows Active Directory account for use with a Microsoft Dynamics CRM system to a set of SQL Server 2008 R2 servers. This user is requiring elevated privileges in my SQL ...
CommunityBot
- 1
0
votes
1
answer
4k
views
How to get user last logon date on a specific server?
Need to export a table with user names (samAcountNames) along with their last logon date\time on to specific server on network (who is a member of a domain).
According to google search, i can do it ...
CommunityBot
- 1
0
votes
0
answers
29
views
Are OneDrive preferences stored per PC or per account?
In an Azure Active Directory environment, where all accounts are in AD, and we are using Office 365 OneDrive - are the OneDrive preferences stored per PC, or per AD account? I.e. if a user logs onto ...
CommunityBot
- 1
0
votes
0
answers
341
views
How to tell whether machine is on AD Domain when running as SYSTEM
I have a batch script run as the SYSTEM user, and I need to find out whether the machine is on an AD Domain or not. I don't know, or need to know, the AD Domain name, just whether it's on any AD ...
- 42.8k
0
votes
1
answer
93
views
Active Directory - ß vs. ss
I'm trying to unify the streetaddress attribute of our users. In German, the character ß can also be represented as ss.
Some users have Examplestraße as streetaddress value, while others have ...
- 454k
1
vote
1
answer
104
views
Running GitHub Actions unders specific, existing Windows user
I am trying to run a GHA workflow in a GitHub-hosted runner for Windows (windows-latest) under a specific, already existing Windows user instead of the default C:\Users\runneradmin.
Options involving ...
- 1,519