Questions tagged [active-directory]
Active Directory (AD) is Microsoft's implementation of the LDAP protocol or X.500 standard. Its purpose is to manage objects from a networked computer and make them available for users and administrators of the network.
1,095
questions
1
vote
1
answer
5k
views
Samba4 Domain and Active Directory compatibility?
I'm running a testing AD lab at home which has a AD forest with single domain. The functional level is 2016. I'm trying to move to Samba4 domain controllers for licensing issues and also testing new ...
- 25
0
votes
0
answers
41
views
Do I need On Prem AD if using using Azure Active Directory?
I work for a small company and we are at the point where we need to set up a domain and centrally manage resources. My question is if I could set up Azure Active Directory and manage our resources ...
0
votes
1
answer
43
views
Can windows-activated laptop can be detected when it's on through ActiveDirectory or some other way?
I know it's a long shot, but since I'm not knowledgeable enough in this matter, I'd like to hear from experts.
I'd like to know when my brother's laptop is on. I don't have access to it and I don't ...
- 159
1
vote
0
answers
945
views
MapDrive via GPP with credentials
At work, one users from a specific domain (and forest) used to map netword drive via script (specified in ScriptPath attributes). All network drives are mapped via GPP, except one. Actually this ...
- 11
0
votes
0
answers
113
views
How to create user that have permission just system batch in Active Directory?
I need a create user account that have permission just systems batch in Active Directory? Specifically restrict user to execute batch files only in directory.
- 1
1
vote
1
answer
751
views
Powershell Remoting into Non-Domain server issue
Can anyone help with the following problem?
I am trying to remote into a server (SVR_A) that is not part of the domain from the server (SRV_B) in a company domain.
The IP address range of SRV_B is 10....
- 113
0
votes
0
answers
41
views
Active directory and folder access
Allow Active Directory userA to access folderA on Virtual Machine, when logged from computerA. Restrict access to same user and same folder, when logged from computerB. Is this possible? How?
0
votes
1
answer
20k
views
Why isn't Bitlocker Recovery Password appearing in Active Directory?
Per Microsoft's recommendation, I enabled Bitlocker on a new Windows 10 VM after joining it to my local Active Directory domain. After enabling Bitlocker, I went to go check that the recovery password ...
0
votes
0
answers
537
views
How to configure DNS to join an Active Directory domain while maintaining internet access?
I have two virtual machines both running Windows Server 2019 Datacenter on my workstation. The first, lets say LIGERSERV, is an already-configured Active Directory server with a Active Directory-...
1
vote
1
answer
1k
views
How can I check if a Windows account belongs to an AD group?
Is there any command or tool I can run from my desktop, not from AD server, that I can pass a Windows account and get a list of groups it belongs to?
Or pass a group and see the users it contains?
- 21
0
votes
0
answers
2k
views
AD: No TGT after logon
I’m investigating a domain where logon does not seem to produce a TGT.
After logon with a test account, klist tgt outputs this:
Current LogonId is 0:0x71647be1
Error calling API ...
- 195
0
votes
0
answers
858
views
TEMP.Font Driver Host folders are created in the c:\users folder
One or two months ago we are encountering a pretty weird problem.
When we log out and log in with another user a folder will be created in the c:\users folder named TEMP.Font Driver Host. If we do it ...
- 56
0
votes
1
answer
10k
views
Active Directory - Restrict User to login only one PC at a time
I want to implement a policy which is related to specific users on domain. What I want to achieve is:
If a user login, let's say, to PC1 he should not be able to use any other PC using his credentials ...
- 1
0
votes
0
answers
287
views
Network share not accessible after adding new domain controller
I've got a bit of a weird one. Several users are connecting to our internal network shares from PCs that are not joined to our active directory domain. This has worked fine up until now when they are ...
- 11
1
vote
1
answer
706
views
Bind9 as non-recursive public DNS forwarder for AD
We use Active Directory. We have two local networks in domain, one in our building and one on Amazon. We are using two domain controllers on each local network. All 4 of them are synchronized over VPN....
- 11
0
votes
0
answers
378
views
Change password complexity rules on GPO in windows server
I need to customize the password complexity requirement in active directory GPO. But I cannot find the way to change the password complexity in GPO. The default password complexity contains
Capital ...
0
votes
0
answers
275
views
Join a Linux (ubuntu 18.04) Instance to AWS Directory Service (Directory type: Microsoft AD)
I followed the document https://docs.aws.amazon.com/directoryservice/latest/admin-guide/join_linux_instance.html
Everything was working fine, but suddenly started to fails.
I decided clean all and ...
- 101
1
vote
1
answer
2k
views
How to figure out my Kerberos principal on Windows?
On a Unix system with Kerberos configured, I'd use klist...
How does one query his Kerberos principal(s) on Windows?
(Using the Active Directory, not MIT implementation.)
- 664
0
votes
1
answer
376
views
How to prevent BYO devices connecting to AD domain
My client has a computer lab several with Windows 10 PCs connected via ethernet to the company's active directory domain. each individual at the company has their own credentials with which to login.
...
- 2,731
0
votes
1
answer
56
views
Does Windows automatically checks in the background stored Windows credentials?
I have a situation where a Windows 10 PC (named "A") apparently tried to connect every day to another Windows 10 PC (named "B") using stored Windows credentials. I know I manually ...
- 105
0
votes
1
answer
149
views
Cannot Restart Windows 10 workstation
I have a Windows 10 Pro (version 20H2) workstation that is joined to an Active Directory environment and it will not restart.
I first noticed that it would not restart when remotely attempting this ...
- 1,638
-4
votes
2
answers
2k
views
How to export AD user properties with PowerShell to .csv file?
I have a problem exporting AD user properties to .csv file which are members of a particular AD group.
This is my code
$ExportPath= "C:\Users\group_list.csv"
$groupname = "group1"
$...
- 13
0
votes
1
answer
87
views
How can I determine when a user logs in to a workstation using a certificate as opposed to a username and password?
We have rolled out smart cards and Yubikeys to most of our users. We need to collect metrics on the usage of these MFA devices. Right now we have custom code that runs on the client that does an OK ...
- 101
0
votes
0
answers
64
views
OpennSSH for windows: %u gives <domainname>/<username>
I'm using OpenSSH 8.1 for Windows and I'm trying to chroot users to their AD home dir [D:\homes\sub\<username>] using %h in the config file, however the chroot-directory redirects the user to ...
- 101
1
vote
1
answer
666
views
PS script generating single alert for multiple windows event ID
I have created PS script to notify me via email when any account in Active Directory is deleted. I attached script with the relevant EVENT.
Using ADUC (GUI) on the AD server, If I delete single user ...
- 129
1
vote
0
answers
56
views
Share drives time out
I have a client that wants their users to be able to be in their network drives for long periods of time without being timed out and having to sign back in.
Currently the users sign in with their ...
- 21
2
votes
1
answer
782
views
Updated Windows 10 Pro and Active Directory Users and Groups disappeared
In its place is something called "Active Directory Lightweight Directory Services Setup Wizard".
If I go to Control Panel > Programs and Features > Turn windows features on or off &...
- 213
0
votes
1
answer
291
views
How to use a Fingerprint Sensor to Login to windows programs that ask for a username and password?
There are Windows programs that ask for a username and password but don't allow alternatives like Fingerprint login.
In my specific case, i have a POS (Point of Sales) that needs to be used by ...
- 29
1
vote
0
answers
42
views
Find out if using Azure Active Directory?
We are looking for an easy way to find out if someone is using Azure Active Directory or Standard Active Directory.
If I spoke to a standard user with no admin privileges, is there a way they would be ...
- 11
0
votes
2
answers
315
views
Working remotely over VPN with Win10 and Windows Server (AD, SMB)?
We have a small accounting office (5-7 staff members) in which each staff member has a Win10 PC that connects to a local Windows Server 16 system over LAN. The server handles Active Directory, DNS (...
- 101
1
vote
2
answers
7k
views
Rename the client computer from Active Directory Users and Computers (ADUC)
I am new to Active Directory concepts. I am practicing with AD Objects. In AD, I can change the user object names but I cannot able to rename the computer object name. It can be done via netdom ...
0
votes
0
answers
285
views
add two locations to domain controller
hi guys I wanna add a domain controller that ties into our existing domain controller at a different site, two different networks, and site to site VPN is not my first choice, is there any way I can ...
3
votes
2
answers
8k
views
Windows 10 ssh login for active directory users
I tried to setup an sshd using the addon feature of windows 10 as described here. I did do the Initial Configuration of SSH Server as required. However when I tried to connect over ssh like this:
ssh ...
- 131
0
votes
3
answers
2k
views
How do I reset a local Windows machine password from the domain administrator login?
We're giving an old Windows 8.1 machine away to somebody who needs it and want to take it off the domain. before doing this we need to know the local administrator password.
Logged in to the machine ...
0
votes
1
answer
4k
views
Trying to user Powershell to remove bulk computers from AD
I have a simple task I am trying to accomplish. We are decommissioning a lot of old machines, and as part of the process I need to remove the hostnames from AD. I download the list of systems to be ...
0
votes
0
answers
362
views
Script to check installed software on several PCs
I want to run a script that returns me a txt file with the installed software on each computer of my company.
I can do this physically if I execute a PowerShell Script.
*Get-ItemProperty HKLM:\...
- 31
0
votes
1
answer
280
views
How can I change my HOMEPATH on a Windows server only when using RDP?
(Windows 2012r2 Server)
I am currently in a domain environment and our Homepaths are controlled via Active Directory.
For a special app when a user logs into RDP the app only runs if the users ...
- 1
1
vote
2
answers
714
views
How to set up a scheduled reminder notification for all my company's PC's?
Recently due to the pandemic crisis there is a need to be more conscious and responsible.
I'm looking for a way to send a scheduled notification for all my company PC's that informs them at a specific ...
- 31
0
votes
3
answers
1k
views
Keyboard shortcut to select the full directory path of the active window
Need to select (then copy) the full directory path of the active window by keyboard shortcut. Is it possible?
For example, I need to put into the clipboard (so I can insert into command prompt, ...
- 113
1
vote
1
answer
4k
views
Windows User Folders Called Username.Hostname After Leaving ActiveDirectory Domain/Demoting Server from AD Controller
After demoting a Windows Server 2019 from an ActiveDirectory domain controller to a regular server (which naturally deletes all user accounts except for the Administrator account) I recreated a few ...
- 113
0
votes
0
answers
754
views
AD Account are being locked but only some are showing as 4740 in Domain controller
We have been seeing increasing number of AD Account lockouts.
Some of these lockouts show up in event viewer as 4740 events but most do not show up at all. My account has been locked out almost once ...
- 846
2
votes
1
answer
456
views
Using a LDAP proxy to debug LDAP requests
I currently fail to configure an application using LDAP/ActiveDirectory properly. The application - from my point of view - is a black box. Therefore, I cannot see what goes wrong with the LDAP ...
- 243
2
votes
0
answers
358
views
appcmd.exe set config doesn't check if username or password is invalid and sets it anyways
I'm using winexe from my backend api to run commands on Windows Domain Server.
I want to set IIS App Pool Identity as an Account from Active Directory.
The problem is that while using this command
%...
- 113
0
votes
0
answers
55
views
Linux Kerberos and Ldap problems
i am currently facing some problems with an Debian server which has joined our Active Directory.
The server sends out LDAP and Kerberos packages to multiple AD Controllers on different locations ...
- 3
1
vote
0
answers
142
views
How to handle Win file server permissions when connecting from Linux?
Situation: We have a file server in Windows Server 2012 R2, and until now the workstations are running Windows.
We are trying to use Linux in some workstations (CentOS 8), since all our apps run on a ...
- 137
1
vote
1
answer
1k
views
How to not apply a GPO to only one user?
I have a group policy applied at the domain level for complex passwords. I have one user that I want to have a simple password. From my research, I went to the delegation tab of the specific GPO, and ...
- 11
0
votes
1
answer
168
views
Azure AD user replication to onsite AD server
I have recently been playing around with Office 365 / Azure AD / Physical (onsite) AD servers. I have managed to create a setup as to where onsite AD users are replicated to the Azure AD portal, and ...
- 129
1
vote
0
answers
193
views
How to identify the cause of an Active Directory lockout on client computer?
For several months I have been suffering Active Directory lockouts from my Windows 10 laptop, which I use in a networked, business environment. This happens around 4 times each day. Our IT ...
- 111
0
votes
3
answers
271
views
Is it possible to add a field to the Windows login screen?
Is it possible to add a custom field to the Windows login screen? So besides username and password I'd have to enter a value (which will be checked) for the third field? I assume some changes to ...
- 245
0
votes
2
answers
2k
views
PowerShell Script for creating AD Users - OU subdirectories
I'm working on a PowerShell Script to create users in Active Directory.
$pwd = ConvertTo-SecureString -String "Start1234" -AsPlainText -Force
New-ADUser -Name "Markus Xidl" `
-SamAccountName "...
- 94