0
votes
0answers
38 views

AD showing two accounts with same name [on hold]

In AD sometimes we get a account with same name as one we have which is not created by anyone. One user is with user id and the other is with SID. Acount would be they for 10 minutes and then it will ...
1
vote
2answers
76 views

PowerShell - finding users who are Inactive AND not disabled

I wrote this cmdlet: Search-ADAccount -filter {(enabled -eq $true)} -Users Only -SearchBase "ou=FirstOU,dc=domain,dc=com" -AccountInactive -TimeSpan 30 But it outputs an error: Search-ADAccount : ...
3
votes
1answer
121 views

How can I trace the source of repeated account lockout against Exchange server?

I have an AD user account that is being repeatedly and frequently locked out, I have been able to trace the lockout to the Exchange server CAS array. However I am at a loss as to how to continue the ...
0
votes
1answer
57 views

Powershell - check if all users in a specific OU are disabled, disable if not

I tried to search for it but I didn't find anything. Could someone help me out with an example of a script that would do this?
5
votes
2answers
176 views

Delegating Control — Windows Active Directory

Attempting to make a site administrator user account for an Active Directory Domain. Using the Active Directory Delegate Authority Wizard. a user account has been grated rights in a OU. However, when ...
2
votes
2answers
127 views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
3
votes
1answer
139 views

Why would an interdomain trust account not require a password?

I am trying to understand why and interdomain trust account would have an account value of 2080 (INTERDOMAIN_TRUST_ACCOUNT – PASSWD_NOTREQD). During a routine audit, after we had recently set up a ...
1
vote
1answer
57 views

User Permission Issues Within Domain

I have user that is in Domain Admins group. I am trying to access folder that has full permissions for Domain Admins group but for some reason I get "You don't currently have permission to access this ...
0
votes
1answer
35 views

Linux service account management

We use Windows Active Directory for account management. As a security policy, we need to change password for service accounts at least every six months. What we are experiencing is, when we change the ...
0
votes
0answers
72 views

GPO to have Chrome profile follow user on AD network, includes laptops

I'm currently working on a Windows network with domain, about 50 +/- workstations. I'm going to be doing a new PC roll out within the next few months and I'd like to have Chrome, or Firefox for that ...
0
votes
1answer
119 views

How to get additional Account Info tab in ADUC with Taskpads

as a part of delegating tasks to admins , we require to enable Additional Account tab(which shows, last password reset, SID , GUID last logon/Logoff etc) in ADUC when user properties are viewed. How ...
0
votes
0answers
23 views

How to get a new SBS user to show up in Windows Storage Server?

We have an SBS domain, and a Windows Storage Server 2008 R2 Essentials. I've created a new user account on the SBS machine, but this new user is not yet available to set up on the Storage Server. How ...
2
votes
2answers
108 views

Autofilling some field in all AD accounts

Is there a way to auto-fill a field or set of fields for all AD accounts in one go? For example if I want to set address field for all employees or in a specific OU? Or perhaps if I need to set their ...
3
votes
4answers
2k views

What do I need to be cautious of when changing a User Logon Name in Active Directory?

I'm new to my current employer, being their only Sysadmin. I'm seeing a small handful of users who have User Logon Names which don't conform to the naming convention standard which majority of users ...
1
vote
2answers
264 views

Is there a way to restore or re-link an active directory user with a local cached version of the user from a corrupted domain?

I used to run an Active Directory installation. The AD server had died a few years back and I'd just been running on cached credentials since I didn't have hardware available to rebuild on and hadn't ...
0
votes
2answers
121 views

Migrate user accounts on Server 2003 using ADMT, cannot find source domain

I'm having trouble running ADMT in that I can't find the source domain. On the source computer I've looked up the domain as xxx.local and placed xxx into the Source 'Domain' name but it doesn't show ...
2
votes
2answers
99 views

Some changes to audited AD user account not showing up in audit logs

In our Active Directory domain, we have some strange things happening to a certain user account: In the security rights for that user object, the "Include inheritable permissions from this object's ...
1
vote
1answer
253 views

logging AD events when disabling an account via exchange

I have been googleing around for a few days now trying to figure this out. Any help would be greatly apprecited (links, hints, etc). Thanks! concept I want to generate an alert when an account is ...
2
votes
1answer
233 views

Restricting access to Share using both an AD user using a specific Computer

The Environment: One AD domain that is not managed by local admins (can’t edit, can’t add GPO, etc.) Users have accounts here. Call this AD alpha This AD Alpha has a trust to a local AD domain (Call ...
2
votes
2answers
769 views

How can I get DSADD to assign home folder of newly created user account?

I use the following command to create 15 user accounts: FOR /L %i in (1,1,15) DO dsadd user "cn=Grade 6 Student %i,ou=Accounts Student,OU=School Name, dc=curric,dc=schoolname,dc=wan" -samid g6%i -upn ...
3
votes
2answers
4k views

User account being frequently locked out

We are running in a Windows 2008 / Windows 7 environment. One on my users is being locked out of his Active Directory account on a daily basis. This occurs between 10 and 18 hours after each reset. ...
7
votes
3answers
39k views

How to delete domain user profile from a computer?

I'm wondering how to safely remove a domain user profile from a computer that is a part of a domain. I don't want to delete the account from the domain itself, I just need to remove the profile from ...
3
votes
5answers
2k views

Restore “lost” user after Active Directory removal?

Is it possible to restore lost users after Active Directory unistallation ? (I forgot to switch users to local users) The computer run Windows Server 2008 R2 Entreprise, and all the registry linked to ...
3
votes
3answers
338 views

Active Directory examples of hierarchy

i am in the process of restructuring the hierarchical structure of the local active directory server of the institution i am working for. I was wondering if anyone knew of any place i could find best ...
1
vote
1answer
130 views

Any issues with computer on one domain in a separate forest and user account in another domain/forest?

I have a few of my sites with a trust relationship among two different forests with a single domain in each AD forest. I'll skip all the politics and details that don't matter and just ask the ...
-1
votes
3answers
477 views

Windows 2003 Active Directory: Log failed login attempts with the password used?

Windows 2003 Active Directory: Log failed login attempts with the password used? I want to log not only the username but the password used also for debugging purpose. Is there a way to do that? One of ...
7
votes
2answers
5k views

Can you find out when a new user was created in Active Directory on Windows 2003 Server?

As the question title says, I am trying to find out when a user account was created in Active Directory. The operating system is Windows Server 2003.
0
votes
1answer
74 views

I changed the password complexity and now only administrators can log in windows server, what i can do?

I there: I changed the password complexity disabling it via a GPO and its included the server machine because i applied the GPO as a domain policies and now, only domain administrators can log into ...
1
vote
4answers
1k views

How to Automatically Create Home Directory for Active Directory User on Solaris (using PowerBroker)

I have a number of existing users in Active Directory that need a home directory created. They don't log directly in to Solaris but into a service running on that box. If I login as them their home ...
2
votes
2answers
517 views

Delay between creating AD account and seeing it in Exchange

Wondering if there is a delay between the Creating a new user account in the AD management console and the user appearing in the Exchange Management Console. Using Exchange Server 2007, created the ...
1
vote
0answers
200 views

Exchange 2010 permissions issues after user account name changed

This is an odd one! When users have a name change here we actually rename their user login account, not just the Display Name like many places do. Exchange 2010 is fairly new here, so this is the ...
0
votes
1answer
590 views

Windows domain login to temporary user

We have a Windows domain with about 60 user accounts. Sometimes when a user logs in to his computer (already his account is created and has files there), Windows logs him to a temporary user, ...
1
vote
1answer
176 views

Why the users of main Domain controller can't logon from child domain in the other site to it's Domain?

I've A & B site , every site have 1 server , the A have main domain innovation.com the first domain controller , the other is alex.innovation.com the second domain controller . the both server is ...
3
votes
1answer
192 views

Change what fields are copied when copying an account in Active Directory?

I've noticed that all of the address with the exception of the street address is copied when copying an Active Directory user account. Is there a way to change this? We're currently running a 2003 AD ...
0
votes
1answer
2k views

Account Expiration mechanic Active Directory

This is probably very simple but I have been searching for a while and cannot seem to find the answer I need. I am basically wondering what the switch to set the "Account Expires End of:" option in ...
3
votes
1answer
343 views

VPN to a customer's site locking out my local AD account

We have an account lockout policy on our domain which was put in place purely to stop brute force attacks. It locks out an account for 10 minutes after 50 bad logon attempts within a 10 minute period. ...
1
vote
3answers
18k views

How to tell where user account is logged in

In a windows 2003/2008 mixed domain, is it possible to find out where on the network a particular account is logged into? The account keeps getting locked out, and we think the account may be logged ...
9
votes
1answer
693 views

Can a user account that is disabled in Active Directory still receive email?

I'm reading Learning Exchange Server 2003 by Boswell, and there's a section in there that mentions that a disabled account in AD cannot receive email and that it will be bounced back. Currently, what ...
0
votes
1answer
100 views

Account for Performing Dirctory Lookups in AD

I have a question about accounts that can be used to perform directory lookups. I need to have an account that can perform lookups for an application, however it needs to have the minimum permissions ...
0
votes
2answers
645 views

Parallel login to user account in Microsoft Active Directory is it good?

I have discovered that users in my Active Directory domain can log in to their account many times parallely. I mean for example 2 machines and on each login to the same account. Is it good? I see ...
3
votes
5answers
2k views

Active Directory Account locks for no apparent reason

I've been troubleshooting this problem for two years and it keeps coming back. Our Mac users authenticate to our Active Directory server which is running Windows Server 2008 Standard. One of the Mac ...
2
votes
1answer
726 views

How to differentiate between users and computers in EventID 4768 - Active Directory?

I monitor EventID 4768 on an Active Directory server to catch user logons. So far so good ... I observed that all events with user set to $ are computers. My problem is, that as far as I can see, I ...
1
vote
3answers
6k views

Can a Windows Active Directory user have aliases?

I've just created a simple AD on our Windows 2008 r2 server. I've added a few employees into that directory. Now, is it possible to create some aliases for a single account. eg. name = ...
1
vote
1answer
742 views

Joining Samba to Active Directory with local user authentication

I apologise that this is somewhat incoherent, but hopefully someone will be able to make enough sense of this to understand what I'm trying to achieve and provide pointers. I have a machine with two ...
4
votes
2answers
3k views

How to secure Outlook Web Access against Brute Force attack?

I'd like to secure Outlook Web Access with Exchange 2010 against a brute force attack using account lockout. What is the best way to do this? I have the following group policy: Computer ...
2
votes
3answers
3k views

New AD user request form and workflow

I'm wondering if anyone is providing a solid solution for creating New Network User Account Request forms, and attaching workflows to them to automate account creation? I'm currently investigating a ...
0
votes
2answers
5k views

Local user accounts have disappeared after installing Active Directory and running dcpromo

I'm kinda newbie in this Windows 2008 Server R2 configuration stuff, so I would appreciate any help regards the issue I'm facing. After a Windows 2008 Server R2 clean install I created a couple of ...
0
votes
1answer
744 views

Mass/bulk create user account in Active Directory with Exchange mailboxes

Hey, Every couple of months we have to create 30+ accounts so I was wondering what's the best way to bulk-create the accounts and their mailboxes. We have AD on 2003 and Exchange 2007.
1
vote
2answers
1k views

active directory users have auto-created private user share

Currently using server 2008 and a logon vbscript to auto mount 3 drives. I'd like to have a mapped network drive that goes to a user-private share automatically. Is this possible to rig up in a login ...
2
votes
2answers
312 views

Account management in a dual directory (Active Directory + LDAP) environment

We currently have AD and OpenLDAP deployed at our organization. I was wondering if anyone has worked in a similar setup and would like to share some of the steps taken to keep the sysadmins sane. ...