19 votes
Accepted

What is the difference between a domain and a realm

Individually, the terms 'domain' and 'realm' mean nearly the same thing, but for different systems. Realms and realm names come from the Kerberos authentication protocol, where they serve practically ...
u1686_grawity's user avatar
18 votes

How can I get the Trust Relationship to the domain to stop failing?

I can't comment on the solution provided by music2myear, however there seems to be another step to the process. In the comments below the article linked in music2myear's answer, a more complete answer ...
Aaron St. Clair's user avatar
18 votes
Accepted

How can I get the Trust Relationship to the domain to stop failing?

You can fix this without removing/rejoining the domain if: A) You have a local admin account on the machine that you know the password for, or B) You have logged in to the machine with a domain ...
music2myear's user avatar
  • 41.8k
12 votes
Accepted

The connection was denied because the user account is not authorized

Instead of editing the User Rights Assignment on your workstations, consider using a Group Policy Preference (GPP) setting to modify the membership of the Remote Desktop Users group. By default, ...
I say Reinstate Monica's user avatar
9 votes
Accepted

How to list windows privileges for any user

You can use AccessChk in accomplish this task. Accesschk “domain\user” -a * will list all the permissions of a given domain user. You can call this program within a PowerShell script, concatenate ...
Ramhound's user avatar
  • 42.8k
9 votes
Accepted

Does a domain joined Windows 10 computer have built-in tools to query AD/LDAP?

Windows has the ADSI interface available to programs, which supports general LDAP access. PowerShell has access to ADSI via System.DirectoryServices types: The [System.DirectoryServices....
u1686_grawity's user avatar
7 votes
Accepted

How to join local AD domain during Windows 10 install?

You can automate the whole process using unattend.xml which is can be placed in the c:\windows\system32\sysprep folder. This is only part of the file: <?xml version="1.0" encoding="utf-8"?> &...
cybernard's user avatar
  • 14k
6 votes

How to list windows privileges for any user

For anybody looking for a PowerShell script, this ought to do it: gwmi Win32_UserProfile | foreach-object { $sid = New-Object System.Security.Principal.SecurityIdentifier($_.SID) $user = $sid....
Ben N's user avatar
  • 41k
5 votes

Windows 7: Disable Lock Workstation After 10 Minutes Using Group Policy

The answer to the actual question you asked: User Configuration\Policies\Administrative Templates\Control Panel\Personalization. The required settings are: 'Enable screen saver', 'Screen saver ...
CAD bloke's user avatar
  • 853
5 votes
Accepted

Full name of Windows user name (in Domain) using Python

Based on the comments from @Bob, the following is working on Windows and is pure Python but it requires to install pywin32 (based on this Recipe): import win32api import win32net user_info = win32net....
Jean-Francois T.'s user avatar
5 votes

How are emails related to or linked with the domain?

First of all, don't confuse two different types of domains. The term "domain controller" comes from Active Directory (AD). It's true that each AD domain is also a DNS domain, and each AD ...
u1686_grawity's user avatar
4 votes

Full name of Windows user name (in Domain) using Python

The more direct way to do this is to query Active Directory. You'd perform a lookup on the user, followed by getting the displayName attribute. (This maps to the Full Name displayed in Windows.) You ...
Bob's user avatar
  • 61.7k
4 votes

Windows 10 is ignoring time changes on Samba 4 DC

Finally some random w32time related posts let me to the solution. First, logging helps: w32tm /debug /enable /file:c:\temp\ntpDebug.log /size:102400 /entries:0-300 w32tm /resync -> Sending resync ...
user375251's user avatar
4 votes

How are emails related to or linked with the domain?

It's mail server & DNS settings. Domain name amazon.com belongs to Amazon and Amazon DNS (A setting) points this domain name to an IP (in fact to a pool of IPs because it's a large company with a ...
Dri372's user avatar
  • 203
3 votes
Accepted

GPO not applied to Windows 7 and higher

Based on the date of your question I believe I know the answer to your problem. There has been MS Security update released on 14/6/2016 which changed behaviour of GPOs with user settings! A lot Up ...
Vita's user avatar
  • 56
3 votes

Why can't I use PSExec on a Windows domain without disabling the firewall?

Is it normal that I can't connect with psexec to run a command as a local administrator from one Windows 7 machine to another without disabling the firewall? Yes. A firewall is meant to block ...
I say Reinstate Monica's user avatar
3 votes

How to change profile folder name without rebuilding user profile from scratch?

Although everything here is correct, all of you are missing one very important thing: THIS WON'T FIX THE PATHS OF ALREADY INSTALLED SOFTWARE THAT MAKES ENTRIES TO \USERS\USERNAME\APPDATA folder. ...
Mekkano's user avatar
  • 31
3 votes

How to link Windows 10 domain user account to Microsoft account?

Microsoft removed the ablity for domain joined user to sync with their Microsoft Account. Here is a work around Create a new local/non-domain Microsoft Account Go to Settings -> Accounts -> Other ...
fjch1997's user avatar
  • 171
3 votes

Windows 10 login error when working outside of corporate network

After changing your password, you need to log in once from within the corporate network. This way Windows can verify the new credentials against the logon server. Once you have done that, you can log ...
Wouter's user avatar
  • 1,651
3 votes

domain joined Windows 10 - Disable password requirement on wake up

I found out using gpresult that there is a setting being configured in Group Policy by domain controllers running in Windows Server 2012 or later (Computer Configuration→Windows Settings→...
anndreww12's user avatar
3 votes
Accepted

How to install (if possible) different MS Office version for different users in Windows 10

The Microsoft article Office installed with Click-to-Run and Windows Installer on same computer isn't supported says this : Click-to-Run is the technology used to install Office 365 subscription ...
harrymc's user avatar
  • 482k
3 votes
Accepted

Switch from Workgroup to Domain in cmd

You can't join a Domain without being able to see it on the network having access to a domain administrator account having access to a local administrator account When you left your corporate ...
Eugen Rieck's user avatar
  • 20.3k
3 votes
Accepted

Windows 10 login only accepting e-mail not local domain user

Today I wanted to create a local account to personalise another desktop for a specific type of work. Upon creation Trying to switch that user will show a wrong username / password. Attempting to type &...
Ramhound's user avatar
  • 42.8k
2 votes

How to link Windows 10 domain user account to Microsoft account?

This problem arises from the circumstance where you have a domain-joined Windows 10 computer running Windows version 1703 aka the Creator's Update. The answer is because Microsoft chose to remove ...
Gianpiero's user avatar
  • 141
2 votes

Possible to rejoin domain without domain admin right after wiping PC?

I'm not entirely sure what your question is, but it works as follows: A computer and a domaincontroller build a relationship. This relationship is stored on both the local pc and the server. When a ...
LPChip's user avatar
  • 61.6k
2 votes
Accepted

Downgrade User Profile from Domain to Workgroup

1) No, it is not possible. However, you can create a new local user and copy the profile of the domain user into the local profile. This will not copy registry settings unique to that user though, ...
Keltari's user avatar
  • 73.3k
2 votes

Determine own domain group memberships XP Professional

In more recent Windows versions you could use the whoami command: whoami /groups
aschipfl's user avatar
  • 638
2 votes
Accepted

connect to two domain controllers on two NICs

A Windows computer can only be joined to one Active Directory domain. However, this does not limit you to one AD domain's resources. Since your other NIC is connected to the other AD domain's ...
Keltari's user avatar
  • 73.3k
2 votes

Are there clear cut distinctions between Administrator and Standard Accounts on Domains?

The distinctions are exactly the same right out of the box, but can be muddied by an Administrator as the level of available control is much more granular. When a computer joins a Windows Server ...
Fazer87's user avatar
  • 12.7k
2 votes

The connection was denied because the user account is not authorized

None of these solutions seemed to work for us. What we ended up doing is opening control panel > opening user accounts > Manage User Accounts > Click the add button if your user is not there. We did ...
Oles Grinchak's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible