Tagged Questions

1
vote
1answer
25 views

Win Group Overlap: Authenticated Users and System

I'm seeing some weird behaviour with a few of my ACEs at the minute, particularly when denying the Authenticated Users instead of the usual Domain\Domain Users. As a consequence of this, I can only ...
1
vote
2answers
68 views

ADSIEdit freezes gettings properties of a group with hundred of thousands members

Doing performance testing on an AD-LDS (Server 2008 R2 64 bits), we created a milion user in a single OU. We also created a single group object and made those milion users member of that group. When ...
3
votes
3answers
1k views

How do you discover what permissions an AD group has, if you have no documentation?

You just got hired at company A and the old administrator is no longer there. Requests start coming through for adding users to the internet restrict group. When you look at the groups none of the ...
1
vote
2answers
217 views

Using Active Directory Security Groups as Hierarchical Tags

Because active directory security groups can... hold objects regardless of OU. be used for reporting, documentation, inventory, etc. be referenced by automated processes (Get-QADGroupMember). be ...
5
votes
3answers
1k views

How can I restrict Windows AD logon to a certain group?

Our organisation has an AD; all users are in the one OU. I administer a section of the users. We have a bunch of computers that I only want to allow logon by users in a particular AD group (i.e. users ...
0
votes
1answer
300 views

Permissions required to look up a domain user's group memberships

I am writing some code to look up the members of particular domain groups. Does the user that this application runs as need any particular permissions on the domain to get this information? ...