As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

$ in computer object SAMAccountName

In active directory all machine accounts '$' sign in end of the Sam Account Name. for ex 'samAccountName = client-1$' is there any reason behind it?
Sandy Santhosh's user avatar
1 vote
1 answer
35 views

How to block Microsoft forcing Office 365 Semi-Annual systems to the Monthly update channel?

For years, my company has followed the usual software patching strategy of every IT department I've ever worked for, which is to validate new software versions in testing before rolling the upgrade ...
Wes Sayeed's user avatar
  • 1,892
-1 votes
1 answer
27 views

How to find what user is logged into a computer in Active Directory? Windows Server 2022

Is there a way in Active Directory to query a Computer object to find the last user who logged in? I have a couple of computers that are not active and I would like to locate them or username know.
avocadoLambda's user avatar
0 votes
1 answer
18 views

How Object-GUID replicated

since Object-GUID is a non replicated attribute, then how All DCs have same object-GUID for an object? how object-GUID is replicated to all DC
Sandy Santhosh's user avatar
-1 votes
1 answer
18 views

Domain user directory being created as /home/username@domain instead of /home/username

I am using an amazon linux 2023 box and i joined the instance to domain using realmd. The issue is that when i try to login with my AD credentials, the user directory is being created as /home/...
Mervin Hemaraju's user avatar
0 votes
0 answers
133 views

SSH using AD credentials only works for username@domain@x.x.x.x and not username@x.x.x.x [duplicate]

I built a new server using Amazon Linux 2023 and I join it to our domain avengers using realmd. I am however getting an issue where i can't login to the server with this command mervin@10.10.10.1 but ...
Mervin Hemaraju's user avatar
-1 votes
0 answers
15 views

Group Policy directories, files remain as "opened" in Computer Management

Similar question but no response. Can someone help - Group Policy directories remain as "opened" in Computer Management On my Windows 2016 server DC, I see number of opened directory as ...
Adi's user avatar
  • 1
1 vote
0 answers
17 views

Hybrid Azure AD Join - Not joining correctly

Another day, another Hybrid Azure AD Join issue. Having set up Hybrid Join, it looked like it was working.  The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
AngryDog's user avatar
0 votes
0 answers
22 views

Domain Joining using WMIC command with a batch file

With a batch I was able to successfully join Office Systems on domain but for some reason a few are stuck and I did try the same command with changing fjoinoptions=2 and 3 but still unable to get them ...
user avatar
0 votes
1 answer
45 views

When I add the "Edge Policies" to my DC, my other GPOs go missing

I followed the steps in the link below to install the Edge policy templates into Active Directory. https://pureinfotech.com/install-microsoft-edge-group-policy-templates-windows-10/ However, after ...
user1913559's user avatar
0 votes
0 answers
14 views

Hybrid AD Joined and Autopilot

I've been working on setting up our Autopilot onboarding with our Hybrid AD. I have managed to join a device to the domain successfully, but I have noticed some differences against when we do this ...
AngryDog's user avatar
0 votes
0 answers
23 views

hybrid azure ad join devices

We have a hybrid active directory set up between our servers held in a DC and our Azure AD.I am currently working on the configuration of our Autopilot and Intune deployment. At the moment we deploy ...
AngryDog's user avatar
2 votes
1 answer
65 views

How can I send DNS Resource Record updates from Linux to a Windows Active Directory DNS zone that only accepts secure updates?

My company has an existing Windows AD DNS zone that I do not directly manage (but i know the folks who do manage it). The zone will accept dynamic updates, but the updates must be "secure". ...
user3629081's user avatar
0 votes
0 answers
22 views

Delegate administration and maintenance of Update Services (WSUS) to User

We are running Update Services on a Windows Server 2016 server that delivers updates to the systems on the domain. I need to delegate maintenance of this to a non-admin user. The user must be able to ...
Lakshmi Anand K's user avatar
0 votes
0 answers
16 views

Samba Domain with readonly Active Directory and OpenLDAP

I have a working Samba Windows Domain getting its users from an OpenLDAP database, but now I need to get these users from an Active Directory database. I have full access to the OpenLDAP database but ...
Rodrigo Antunes's user avatar
-1 votes
1 answer
48 views

Can not access company website from within LAN domain

This is probably something simple but I'm having a brain fart trying to sort this out. I'm trying to mimic an existing physical location setup by a previous engineer. I've set up a new physical site [...
MrGamecase's user avatar
0 votes
0 answers
19 views

Establish Trust Between Two Active Directory Domains with a Common Root

In my lab environment, I'd like to create a trust relation between two Active Directory domains that share a common root. One is home.acme.com and the other is work.acme.com. When I create both ...
Christopher King's user avatar
0 votes
0 answers
40 views

bad password count in different sites

What happens if a user try wrong password in different DC (sites), how come the lockout occurs after meeting threshold bad pwd count? Account lockout threshold value is 3 for eg i have 3 sites - Site ...
Sandy Santhosh's user avatar
2 votes
1 answer
49 views

gMSA and Read Only Domain Controllers

Windows Server 2019 Environment I have 2 writable DCs and 1 RODC out in a DMZ that will all need to use a gMSA for some software we are deploying. This is my first time ever making use of gMSAs / ...
The ITea Guy's user avatar
0 votes
2 answers
47 views

Windows Update Service gets stuck at Stopping state whenever I check for update on the domain controller

On my domain controller which is Running Windows Server 2016, whenever I check for updates, the updates start downloading and get stuck at 7% or sometimes stuck at checking for updates. I see that the ...
rocky_alpine's user avatar
-1 votes
0 answers
24 views

Some questions about AD

I'm studying AD and i have some questions, i can't find the answers just googling.. can you please help me? 1 is a linux DC the same of a windows one? Or has it less potential? And in case of a Linux ...
jagghy's user avatar
  • 1
0 votes
0 answers
36 views

Can I use a group in a root domain to filter application of a group policy object from this root domain for a computer in a child domain?

I have a root domain (root.local) with a child domain (child.root.local). I have a Group Policy Object in the root domain, e.g. GPO_root In the child domain I have a computer, computer_child. Is is ...
MofJinB's user avatar
-1 votes
0 answers
16 views

Why is AD DS DNS working only in Host-Only mode between 2 VM?

I'm using Parallels Desktop... Why when I put: my ADDS Windows Server VM in host-only my Windows 10 VM in host-only from my Windows 10 VM I can join the domain ...while host-only does not allow ...
vistaxp's user avatar
-2 votes
1 answer
36 views

What is the ILS_ANONYMOUS_USER account?

On a Microsoft Windows domain, on a public IP server, I found a login using the account ILS_ANONYMOUS_USER. This is Microsoft created domain wide account, not specific to one server. Is this right? ...
fcm's user avatar
  • 422
0 votes
1 answer
163 views

Best method for enabling bitlocker via GPO/scripting

I'm working on getting bitlocker deployed across an organization and am getting hung up on how I'm expected to actually enable it. We're using on-site AD on Server2012 (will be moving to 2022 this ...
tsz's user avatar
  • 229
0 votes
0 answers
28 views

I am unable to edit user information on 365 AAD in a Hybrid Environment

Let me start off with, I know that in a Hybrid environment AD edits need to be done on-prem. However, I have a special case that I can't for the life of me figure out. I have a user that somehow ...
Christopher J. Joubert's user avatar
-1 votes
0 answers
23 views

Migrating Windows Server 2012r2 DC to 2019 DC with new domain name

Background: My project is to setup new DC using Windows Server 2019, with same configurations as my old DC, which is 2012r2. I need to keep both DCs running for 2 months in seperate network. I have ...
Cody Hung's user avatar
0 votes
1 answer
23 views

Grant local impersonation user permission to share

We have a domain connected server (Windows Server 2016) named STORAGE. The server has a local "impersonation" user created by our Autodesk software called AutodeskVault. This user is only a ...
jrob007's user avatar
  • 103
0 votes
1 answer
28 views

AD Security by OU?

In our AD environment we maintain the Description field to help identify our computers. I found that I and others on my team can update some system in certain OUs but cannot update them in others. I ...
Ben Worrell's user avatar
0 votes
2 answers
64 views

Add member to kerberos domain programatically

I want to have an embedded device join a Linux based AD/DC domain. I have kerberos libraries (no executables) on the embedded device. I have an application on the embedded device that can ...
Richard Schmitt's user avatar
0 votes
1 answer
24 views

LDAP users to share a single SFTP folder on Linux

I need to setup a file transfer linux server. All users login via sftp using active directory credentials. I want all users to when logged into see a single directory /ftp-storage In the /ftp-storage ...
PrestonDocks's user avatar
1 vote
0 answers
24 views

Microsoft Active Directory Admin - Discriminate usable USB Disk devices

good morning, I have been trying for a while through policy management or other microsoft media to restrict the use of USB removable disks. I know that through Active Direcory I can enable and disable ...
Cris9400's user avatar
1 vote
0 answers
39 views

OpenLDAP gidNumber and group membership inconsistency

I encountered an interesting problem while examining a specific AD/OpenLDAP interop case. On the OpenLDAP server, there is a user1, whose gidNumber corresponds to a group1. There is another user2, ...
marismmm's user avatar
0 votes
1 answer
33 views

Have List of user but I want to find out if they are added to specific ADGroupMember

I have been trying to understand how to import my csv file and export of specific adgroup they are added or even they are not added Import-CSV " C:\Users\user.csv" | ForEach-Object { Get-...
K0n2113's user avatar
  • 11
-1 votes
0 answers
47 views

Kerberos Ticket Issue - Event KDC_ERR_S_PRINCIPAL_UNKNOWN

I started seeing this entry in several systems and can't seem to figure out why. Assume a domain name of corp.com In the event log for server name it shows cifs/corp.com target name = cifs/corp.com@...
Jessie's user avatar
  • 180
0 votes
0 answers
22 views

convert local machines to MS 365/Intune managed

Currently we have a 365 account - 50 users, and 50 local machines with local logins. According to my reading, 365 can manage configs on these machines and allow to specify which 365 users can log into ...
Steve H's user avatar
0 votes
0 answers
25 views

Shared drive for Windows EC2 intances launched within an autoscaling group

I am looking to be able to share a single network storage between my fleet of Windows EC2 instances that are used as application webservers running IIS. These instances need to be able to access the ...
JDT's user avatar
  • 1
6 votes
2 answers
1k views

How NTFS folder access is checked in a Active Directory domain?

I understand that both NTFS folders and AD objects use security descriptors and DACL’s to check user/process access MS Learn - How access check works However, how does the access check resolves ACE’s ...
Grasshopper's user avatar
0 votes
1 answer
51 views

Convert AD-integrated DNS zones to Primary DNS zones

We have inherited a domain with 2008 R2 domain controllers running DNS on them. We want to add Windows Server 2019 to the domain then demote the 2008 R2 domain controllers to just DNS servers. We are ...
Glenn Dalton's user avatar
0 votes
0 answers
23 views

OpenLDAP meta backend with different directory structure

I am working on a project and we need to "combine" two completely different Active Directory (AD) servers to one. I have found that OpenLDAP might provide a solution by providing a reverse ...
Guusda's user avatar
  • 1
0 votes
2 answers
64 views

With multiple RDP certificates, do all get checked?

If a Windows host has multiple RDP certificates. Do all get checked while connecting or only the first found? I have a RDP certificates deployed from an Root CA with now invalid OCSP location in the ...
Synertry's user avatar
0 votes
1 answer
46 views

Linux, Basic password authentication against 2 different AD without joining domain

We have AIX and Linux servers running with basic password authentication against a Windows AD using Kerberos, so it are local users with a username identical to their sAMAccountName in the AD and all ...
akm's user avatar
  • 1
0 votes
1 answer
118 views

Could not establish WMI connection access is denied

I set up a lab to test domain joining multiple computers with a script from Microsoft. After I ran the script it came back with could not establish a WMI connection with the computer with the ...
Hagen_21's user avatar
0 votes
0 answers
28 views

Exchanging AD user groups with an external -not trusted- server for authentication and authorization

I'm not really sure how to short and precisely describe my problem. Thus, I was unable to find a solution or at least a hint via google. We have a Microsoft AD domain and are currently planning to use ...
PJ87's user avatar
  • 1
0 votes
1 answer
36 views

RRAS VPN using Wrong Server Authentication Cert

I've got a RRAS VPN setup using IKEv2 and certs issued by the domain's CA. It has a cert for the public domain and I know this is getting presented to the client. How ever it seems that either the ...
Arcath's user avatar
  • 513
0 votes
1 answer
77 views

Windows AD cert renewal implementation vs cert copying

Windows PKI policy has a setting for what I think is automated renewal of AD template issued certificates when they expire. It must be also enabled on the certificate authority (CA) side. Question - ...
Seva Alekseyev's user avatar
0 votes
1 answer
36 views

Is Azure AD (only) enough for simple identity requirements

I'm looking at helping out a small business, who currently operates four very small branch offices (ranging from 4 - 10 windows PCs). Currently, shared accounts are used on these machines - obviously ...
R3uben's user avatar
  • 3
0 votes
1 answer
70 views

WWW A-record Hack for Internal Users No Longer Works on my Server 2022 AD Domain

I have one of those notorious public websites for my company running on a third-party host that has the same domain name as our internal Active Directory domain network. So that our internal users can ...
HighConcept's user avatar
0 votes
1 answer
96 views

Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards

Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards. The event occurs with the computer's account, not a user's ...
Karbashi's user avatar
0 votes
2 answers
180 views

How to disable AD account without deleting user's mailbox in Office365?

One of our users recently switched roles to a new position where they will not need computer access anymore, except for checking emails. I need to disable their AD account while not removing their ...
justdoingmyjob's user avatar

1
2 3 4 5
201