Questions tagged [active-directory]
A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.
10,047
questions
0
votes
0
answers
7
views
$ in computer object SAMAccountName
In active directory all machine accounts '$' sign in end of the Sam Account Name.
for ex 'samAccountName = client-1$'
is there any reason behind it?
1
vote
1
answer
35
views
How to block Microsoft forcing Office 365 Semi-Annual systems to the Monthly update channel?
For years, my company has followed the usual software patching strategy of every IT department I've ever worked for, which is to validate new software versions in testing before rolling the upgrade ...
- 1,892
-1
votes
1
answer
27
views
How to find what user is logged into a computer in Active Directory? Windows Server 2022
Is there a way in Active Directory to query a Computer object to find the last user who logged in? I have a couple of computers that are not active and I would like to locate them or username know.
0
votes
1
answer
18
views
How Object-GUID replicated
since Object-GUID is a non replicated attribute, then how All DCs have same object-GUID for an object?
how object-GUID is replicated to all DC
-1
votes
1
answer
18
views
Domain user directory being created as /home/username@domain instead of /home/username
I am using an amazon linux 2023 box and i joined the instance to domain using realmd.
The issue is that when i try to login with my AD credentials, the user directory is being created as /home/...
- 115
0
votes
0
answers
133
views
SSH using AD credentials only works for username@domain@x.x.x.x and not username@x.x.x.x [duplicate]
I built a new server using Amazon Linux 2023 and I join it to our domain avengers using realmd.
I am however getting an issue where i can't login to the server with this command mervin@10.10.10.1 but ...
- 115
-1
votes
0
answers
15
views
Group Policy directories, files remain as "opened" in Computer Management
Similar question but no response. Can someone help - Group Policy directories remain as "opened" in Computer Management
On my Windows 2016 server DC, I see number of opened directory as ...
- 1
1
vote
0
answers
17
views
Hybrid Azure AD Join - Not joining correctly
Another day, another Hybrid Azure AD Join issue.
Having set up Hybrid Join, it looked like it was working. The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
- 11
0
votes
0
answers
22
views
Domain Joining using WMIC command with a batch file
With a batch I was able to successfully join Office Systems on domain but for some reason a few are stuck and I did try the same command with changing fjoinoptions=2 and 3 but still unable to get them ...
Farhan Siddiqui
0
votes
1
answer
45
views
When I add the "Edge Policies" to my DC, my other GPOs go missing
I followed the steps in the link below to install the Edge policy templates into Active Directory.
https://pureinfotech.com/install-microsoft-edge-group-policy-templates-windows-10/
However, after ...
- 211
0
votes
0
answers
14
views
Hybrid AD Joined and Autopilot
I've been working on setting up our Autopilot onboarding with our Hybrid AD. I have managed to join a device to the domain successfully, but I have noticed some differences against when we do this ...
- 11
0
votes
0
answers
23
views
hybrid azure ad join devices
We have a hybrid active directory set up between our servers held in a DC and our Azure AD.I am currently working on the configuration of our Autopilot and Intune deployment. At the moment we deploy ...
- 11
2
votes
1
answer
65
views
How can I send DNS Resource Record updates from Linux to a Windows Active Directory DNS zone that only accepts secure updates?
My company has an existing Windows AD DNS zone that I do not directly manage (but i know the folks who do manage it). The zone will accept dynamic updates, but the updates must be "secure". ...
- 315
0
votes
0
answers
22
views
Delegate administration and maintenance of Update Services (WSUS) to User
We are running Update Services on a Windows Server 2016 server that delivers updates to the systems on the domain. I need to delegate maintenance of this to a non-admin user. The user must be able to ...
0
votes
0
answers
16
views
Samba Domain with readonly Active Directory and OpenLDAP
I have a working Samba Windows Domain getting its users from an OpenLDAP database, but now I need to get these users from an Active Directory database. I have full access to the OpenLDAP database but ...
-1
votes
1
answer
48
views
Can not access company website from within LAN domain
This is probably something simple but I'm having a brain fart trying to sort this out.
I'm trying to mimic an existing physical location setup by a previous engineer.
I've set up a new physical site [...
0
votes
0
answers
19
views
Establish Trust Between Two Active Directory Domains with a Common Root
In my lab environment, I'd like to create a trust relation between two Active Directory domains that share a common root. One is home.acme.com and the other is work.acme.com. When I create both ...
- 111
0
votes
0
answers
40
views
bad password count in different sites
What happens if a user try wrong password in different DC (sites), how come the lockout occurs after meeting threshold bad pwd count?
Account lockout threshold value is 3
for eg
i have 3 sites - Site ...
2
votes
1
answer
49
views
gMSA and Read Only Domain Controllers
Windows Server 2019 Environment
I have 2 writable DCs and 1 RODC out in a DMZ that will all need to use a gMSA for some software we are deploying. This is my first time ever making use of gMSAs / ...
- 153
0
votes
2
answers
47
views
Windows Update Service gets stuck at Stopping state whenever I check for update on the domain controller
On my domain controller which is Running Windows Server 2016, whenever I check for updates, the updates start downloading and get stuck at 7% or sometimes stuck at checking for updates. I see that the ...
- 16
-1
votes
0
answers
24
views
Some questions about AD
I'm studying AD and i have some questions, i can't find the answers just googling.. can you please help me?
1 is a linux DC the same of a windows one? Or has it less potential? And in case of a Linux ...
- 1
0
votes
0
answers
36
views
Can I use a group in a root domain to filter application of a group policy object from this root domain for a computer in a child domain?
I have a root domain (root.local) with a child domain (child.root.local).
I have a Group Policy Object in the root domain, e.g. GPO_root
In the child domain I have a computer, computer_child. Is is ...
- 1
-1
votes
0
answers
16
views
Why is AD DS DNS working only in Host-Only mode between 2 VM?
I'm using Parallels Desktop...
Why when I put:
my ADDS Windows Server VM in host-only
my Windows 10 VM in host-only
from my Windows 10 VM I can join the domain
...while host-only does not allow ...
- 1
-2
votes
1
answer
36
views
What is the ILS_ANONYMOUS_USER account?
On a Microsoft Windows domain, on a public IP server, I found a login using the account ILS_ANONYMOUS_USER.
This is Microsoft created domain wide account, not specific to one server.
Is this right?
...
- 422
0
votes
1
answer
163
views
Best method for enabling bitlocker via GPO/scripting
I'm working on getting bitlocker deployed across an organization and am getting hung up on how I'm expected to actually enable it. We're using on-site AD on Server2012 (will be moving to 2022 this ...
- 229
0
votes
0
answers
28
views
I am unable to edit user information on 365 AAD in a Hybrid Environment
Let me start off with, I know that in a Hybrid environment AD edits need to be done on-prem. However, I have a special case that I can't for the life of me figure out.
I have a user that somehow ...
-1
votes
0
answers
23
views
Migrating Windows Server 2012r2 DC to 2019 DC with new domain name
Background: My project is to setup new DC using Windows Server 2019, with same configurations as my old DC, which is 2012r2. I need to keep both DCs running for 2 months in seperate network.
I have ...
0
votes
1
answer
23
views
Grant local impersonation user permission to share
We have a domain connected server (Windows Server 2016) named STORAGE. The server has a local "impersonation" user created by our Autodesk software called AutodeskVault. This user is only a ...
- 103
0
votes
1
answer
28
views
AD Security by OU?
In our AD environment we maintain the Description field to help identify our computers.
I found that I and others on my team can update some system in certain OUs but cannot update them in others.
I ...
0
votes
2
answers
64
views
Add member to kerberos domain programatically
I want to have an embedded device join a Linux based AD/DC domain. I have kerberos libraries (no executables) on the embedded device. I have an application on the embedded device that can ...
0
votes
1
answer
24
views
LDAP users to share a single SFTP folder on Linux
I need to setup a file transfer linux server. All users login via sftp using active directory credentials.
I want all users to when logged into see a single directory /ftp-storage
In the /ftp-storage ...
- 215
1
vote
0
answers
24
views
Microsoft Active Directory Admin - Discriminate usable USB Disk devices
good morning, I have been trying for a while through policy management or other microsoft media to restrict the use of USB removable disks. I know that through Active Direcory I can enable and disable ...
- 11
1
vote
0
answers
39
views
OpenLDAP gidNumber and group membership inconsistency
I encountered an interesting problem while examining a specific AD/OpenLDAP interop case. On the OpenLDAP server, there is a user1, whose gidNumber corresponds to a group1. There is another user2, ...
- 11
0
votes
1
answer
33
views
Have List of user but I want to find out if they are added to specific ADGroupMember
I have been trying to understand how to import my csv file and export of specific adgroup they are added or even they are not added
Import-CSV " C:\Users\user.csv" | ForEach-Object { Get-...
- 11
-1
votes
0
answers
47
views
Kerberos Ticket Issue - Event KDC_ERR_S_PRINCIPAL_UNKNOWN
I started seeing this entry in several systems and can't seem to figure out why. Assume a domain name of corp.com
In the event log for server name it shows cifs/corp.com
target name = cifs/corp.com@...
- 180
0
votes
0
answers
22
views
convert local machines to MS 365/Intune managed
Currently we have a 365 account - 50 users, and 50 local machines with local logins.
According to my reading, 365 can manage configs on these machines and allow to specify which 365 users can log into ...
- 1
0
votes
0
answers
25
views
Shared drive for Windows EC2 intances launched within an autoscaling group
I am looking to be able to share a single network storage between my fleet of Windows EC2 instances that are used as application webservers running IIS. These instances need to be able to access the ...
- 1
6
votes
2
answers
1k
views
How NTFS folder access is checked in a Active Directory domain?
I understand that both NTFS folders and AD objects use security descriptors and DACL’s to check user/process access
MS Learn - How access check works
However, how does the access check resolves ACE’s ...
- 163
0
votes
1
answer
51
views
Convert AD-integrated DNS zones to Primary DNS zones
We have inherited a domain with 2008 R2 domain controllers running DNS on them. We want to add Windows Server 2019 to the domain then demote the 2008 R2 domain controllers to just DNS servers. We are ...
0
votes
0
answers
23
views
OpenLDAP meta backend with different directory structure
I am working on a project and we need to "combine" two completely different Active Directory (AD) servers to one. I have found that OpenLDAP might provide a solution by providing a reverse ...
- 1
0
votes
2
answers
64
views
With multiple RDP certificates, do all get checked?
If a Windows host has multiple RDP certificates. Do all get checked while connecting or only the first found?
I have a RDP certificates deployed from an Root CA with now invalid OCSP location in the ...
- 83
0
votes
1
answer
46
views
Linux, Basic password authentication against 2 different AD without joining domain
We have AIX and Linux servers running with basic password authentication against a Windows AD using Kerberos, so it are local users with a username identical to their sAMAccountName in the AD and all ...
- 1
0
votes
1
answer
118
views
Could not establish WMI connection access is denied
I set up a lab to test domain joining multiple computers with a script from Microsoft.
After I ran the script it came back with could not establish a WMI connection with the computer with the ...
- 1
0
votes
0
answers
28
views
Exchanging AD user groups with an external -not trusted- server for authentication and authorization
I'm not really sure how to short and precisely describe my problem. Thus, I was unable to find a solution or at least a hint via google.
We have a Microsoft AD domain and are currently planning to use ...
- 1
0
votes
1
answer
36
views
RRAS VPN using Wrong Server Authentication Cert
I've got a RRAS VPN setup using IKEv2 and certs issued by the domain's CA. It has a cert for the public domain and I know this is getting presented to the client.
How ever it seems that either the ...
- 513
0
votes
1
answer
77
views
Windows AD cert renewal implementation vs cert copying
Windows PKI policy has a setting for what I think is automated renewal of AD template issued certificates when they expire.
It must be also enabled on the certificate authority (CA) side. Question - ...
- 197
0
votes
1
answer
36
views
Is Azure AD (only) enough for simple identity requirements
I'm looking at helping out a small business, who currently operates four very small branch offices (ranging from 4 - 10 windows PCs). Currently, shared accounts are used on these machines - obviously ...
- 3
0
votes
1
answer
70
views
WWW A-record Hack for Internal Users No Longer Works on my Server 2022 AD Domain
I have one of those notorious public websites for my company running on a third-party host that has the same domain name as our internal Active Directory domain network. So that our internal users can ...
0
votes
1
answer
96
views
Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards
Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards.
The event occurs with the computer's account, not a user's ...
- 1
0
votes
2
answers
180
views
How to disable AD account without deleting user's mailbox in Office365?
One of our users recently switched roles to a new position where they will not need computer access anymore, except for checking emails. I need to disable their AD account while not removing their ...
- 103