Questions tagged [ad-lds]
AD LDS is Active Directory Lightweight Directory Services and was previously known as ADAM (Active Directory Application Mode).
65
questions
0
votes
0
answers
24
views
adamsync moving objects to LostAndFound on user object delete on Server 2022 replica in mixed OS environment
We are in the process of migrating our ADLDS instance from Server 2012 to Server 2022. We have brought up the two new replicas and they are replicating and functioning as expected. We run a daily ...
- 246
0
votes
0
answers
108
views
Application Requires Cross Domain Authentication - No trust
I've an application that going forward is going to require cross domain authentication using an AD service account across 2 separate organisations - for example domain A application needs to ...
0
votes
1
answer
279
views
Getting config from newly installed ad lds
I just installed ad lds on my dev machine and am quite sure of what I specified as dn. I've never used ad lds before.
However, I cannot connect to it used ADSI Edit.
The specified domain either does ...
- 139
0
votes
1
answer
595
views
How can I determine if AD LDS has been configured
I've inherited an environment, and am diagnosing some of the smaller issues I am coming across.
One of these issues, is that an existing AD DC has also had the AD LDS role installed. I don't think it ...
- 1,733
0
votes
0
answers
112
views
I need help to remove mail attributes from AD LDS domain for Bulk Users
Where am I going wrong in the script here? It doesn't give me any error. But it doesn't remove
$cred= get-credential "s2\svcfimadamadmapeu"
$CSV= Get-content '.\input.csv'
function ...
- 1
2
votes
1
answer
525
views
How to connect to AD-LDS without sending passwords in plaintext?
I created an AD-LDS instance using the Administrative Tools Active Directory Lightweight Directory Services Setup Wizard.
I can connect to the instance with ldp.exe on localhost:389.
However, I can ...
- 297
1
vote
1
answer
538
views
Properly adding sAMAccountName to AD LDS schema when using userProxyFull
An application to work needs sAMAccountName attribute populated. But I also want to have this LDS instance to be a synced subset of the AD DS catalog. The synchronization works unless I try to sync ...
- 119
0
votes
1
answer
163
views
dirsync query shows changes to an AD object that doesn't appear to exist
AdamSync is crashing periodically. In troubleshooting we found that it's throwing an exception when it encounters what it thinks is an empty DN. I replayed the query using the dirsync cookie stored in ...
- 246
1
vote
1
answer
5k
views
How can I add a certificate to a Windows service's certificate store from the command line?
I want to add a certificate to the certificate store belonging to a Windows service, from the command line. So far, the only thing I've found is:
certutil -service -store ADAM_Instance-Name\My
When ...
- 185
1
vote
0
answers
314
views
Change the DC in an ADLDS application directory partition name (the Naming Context)
I have a server on which I used the Active Directory Lightweight Directory Services Setup Wizard to create a new application directory partition:
I need to rename the DC part of the Partition name ...
- 209
3
votes
1
answer
3k
views
Creating a new AD LDS instance without the Setup Wizard?
Is the installation of a new unique instance of AD LDS (using either cmd or PowerShell) possible? All resources I can find online just use the Active Directory Lightweight Directory Services Setup ...
- 209
1
vote
0
answers
129
views
Ubuntu Server openLDAP + Windows Server AD LDS?
Is possible to have a Ubuntu server with openLDAP + Samba and a Windows Server with AD LDS, taking the DDBB from the Ubuntu?
If it's possible could you point me where to find information about this?
...
0
votes
1
answer
1k
views
ADFS 4 with AD LDS (The object does not exist)
I have tried everything possible with my limited knowledge but I can't figure out whats wrong so hoping someone can just point the right direction.
I have an ADFS 2016 server which works fine with ...
- 208
2
votes
1
answer
5k
views
When is AD LDS really required
I have a question regarding to the purpose of AD LDS.
Currently I am playing around with windows server infrastructure to have a better understanding of their inner workings and aim to build a ...
- 21
1
vote
3
answers
15k
views
Removing ADLDS in Windows Server
I installed active directory Light directory service accidentally as i already has ADDS installed after installation all services are stopped in Server Manager and unable to do refresh i want to ...
1
vote
1
answer
230
views
Where are user rights stored in AD LDS?
I've installed an AD LDS on a Windows 7 Machine in the context of an local user (ws-cs-03\rseuser).
This user can access and administrate the AD-LDS instance.
Question:
Where is the information ...
- 2,145
4
votes
1
answer
1k
views
AD LDS cannot connect to port 389
I am trying to replicate an AD domain to a server hosting AD Lightweight Directory Services (AD LDS).
In the instance setup wizard, I am choosing "A replica of an existing instance". After I ...
- 41
0
votes
1
answer
778
views
Import sample Active Directory into LDAP [closed]
For development purposes so I can query and test a C# LDAP integration, I have set up an Active Directory Lightweight Directory Services (AD LDS) instance on my Windows 10 box. I need to populate ...
- 303
0
votes
1
answer
83
views
AD LDS data refreshing from script
I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account.
I cannot enable syncrepl ont ...
user326556
3
votes
1
answer
1k
views
Active Directory Module for PowerShell Get-ADObject and Set-ADObject don't work with custom attribute
I am trying to work with a custom attribute in an AD LDS instance that I did not create, using the Active Directory Module for PowerShell. Unfortunately, the cmdlets Get-ADObject and Set-ADObject are ...
- 174
3
votes
1
answer
7k
views
PowerShell AD LDS query with filter using wildcard not behaving as expected
I am the administrator for a learning management system website that stores its page structure in AD LDS. I am trying to run a query to get objects (pages on the site) matching a filter for ...
- 174
0
votes
1
answer
6k
views
AD LDS - LDAP - How to set group's rights on container
I installed AD LDS on a W2012R2. Everything is working fine. Now, I want to create new Roles, to grant to groups permissions to create/modify/delete users in a certain container. (I used this article)
...
- 302
1
vote
0
answers
1k
views
Migrating AD Lightweight Directory Services (LDS) or ADAM data to Azure Active Directory (WAAD)
We currently have an ADAM instance that we authenticate our ASP.NET web users against. We have a requirement to replace this instance with an Azure Active Directory instance instead with a new schema ...
0
votes
1
answer
843
views
Can the objectGUID be specified on creation or changed afterward?
Our system links users in an LDAP store to users in a SQL database. The database has been around longer than the LDAP store though, and we'd like to bring pre-existing users from the database into ...
- 403
2
votes
1
answer
3k
views
Configuring two AD LDS instances to synchronize with one another
I'm trying to find information on synchronizing multiple AD LDS instances with each other, but all the information I'm finding via Google is about synchronizing AD LDS to AD DS.
I would appreciate it ...
- 403
5
votes
1
answer
1k
views
What is MS-Membership Transitive.LDF?
When installing ad-lds, you have the option to import several LDF files. Some of them are described here: http://technet.microsoft.com/en-us/library/cc771943.aspx.
Can anyone tell me what the MS-...
- 403
1
vote
2
answers
3k
views
vCenter SSO without AD?
I have an ESXi Server with a vCenter virtual appliance image and an image of a Windows 2008 TS.
The Windows 2008 image has an external Ethernet connection configured to another network, so users can ...
- 33
1
vote
1
answer
6k
views
How do I import into ADAM / AD LDS - The specified instance type is invalid
I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid).
I've tested and recovered from errors that relate to
The import file is ASCII, ...
- 8,921
2
votes
0
answers
197
views
Forcing not-yet-known SID value in AD LDS userProxy account
We are dealing with a chained provisioning request, the goal being to create successively an AD account and an AD LDS userProxy account associated with the just created AD account.
The AD account SID ...
- 141
3
votes
3
answers
8k
views
AD LDS service account as local admin to allow SSL connection?
I am installing Active Directory Lightweight Directory Services (AD LDS, aka ADAM) on a Windows 2012 vm. After finally getting the configuration of the directory and synchronization handled, I am now ...
- 1,111
-4
votes
1
answer
788
views
Configure Active Directory on Windows 7 [closed]
I am to configuring Active Directory on Windows 7. I have followed this link and installed AD LDS.
But i am unable to create a new user in the active directory.
Also, I am able to browse the ...
- 93
1
vote
0
answers
2k
views
How can I set up working users in an AD LDS?
I need to set up a test Active Directory where I can freely change users and groups. After MUCH troubles I manged to set up the AD-LDS itself in a way that seems realistic to my uninitiated eyes. I've ...
- 111
2
votes
0
answers
293
views
AD LDS query fails to get second page of large number of groups
We hit the 1015 limit in AD DS, so we are exploring AD LDS as an alternative. To test the limit, I've created >32,000 groups, each nested inside another, with my user in the top and bottom level group....
1
vote
0
answers
2k
views
ldifde command is failing with "Invalid Parameter: Bad argument '-i'. And also any equivalent PS Cmdlet?
OS - Windows Server 2008 R2
Localhost: DC as well as running an AD LDS instance
Here are the command(s) I used:
ldifde -i -u -f differences.ldf -s localhost:50004 -b myUserAccount MyDomain ...
- 31
0
votes
1
answer
1k
views
manage Windows users with AD LDS
I have a Windows 2008R2 server with about 30 users, which log in with remote desktop to use some application installed on the server itself
I would move the users from local users to AD LDS, so I can ...
0
votes
1
answer
128
views
Setting up ADLDS and managing it with internal ADLDS users
I configured ADLDS according to this blog post. I went further and followed this Microsoft article about allowing internal users to access ADLDS thru ADSI Edit but whatever I do i get access denied (...
- 3,725
1
vote
2
answers
305
views
Active Directory LDS classes: what's the difference?
I'm creating some AD LDS objects. In AD I'm prompted with this window.
What's the difference between 'container' and 'group'? Is there a web resource that lists the difference? I haven't been able ...
- 644
6
votes
1
answer
2k
views
Replication of lockoutTime attribute is not urgent on AD-LDS
I have two LDS servers on the same subnet. They replicate well. If I change an attribute, it gets replicated after 15 seconds.
LDS is configured to honor password policies. When a user makes too ...
- 1,018
1
vote
0
answers
769
views
Create a AD-LDS partition under a child of the primary partition
I have a AD-LDS instance running on a Server 2008 R2. I have this application partition, created at installation :
dc=enterprise,dc=example,dc=com
I have succesfully followed this procedure to ...
- 1,018
0
votes
1
answer
569
views
Email address as rdn in Active Directory Application Mode - ADAM
Is it OK to use an email address as the CN attribute in ADAM (I don't mean the email/mail attribute)?
I have a requirement that calls for ADAM for authentication and the user's email address as the CN ...
- 226
3
votes
1
answer
1k
views
Dynamic group membership to work around no nested security group support for Active Directory
My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS). These legacy administration ...
- 1,024
1
vote
1
answer
234
views
ADSIEdit freezes gettings properties of a group with hundred of thousands members
Doing performance testing on an AD-LDS (Server 2008 R2 64 bits), we created a milion user in a single OU. We also created a single group object and made those milion users member of that group.
When ...
- 1,018
2
votes
1
answer
198
views
Microsoft HPC cluster - AD or AD LDS?
The instructions for deploying an HPC Cluster (e.g. step 1.5 on this page in TechNet) are very clear that HPC cluster nodes "must be members of an Active Directory domain".
Does the Active Directory ...
- 455
2
votes
1
answer
3k
views
How many users can be in a AD LDS group?
Microsoft published the recommended maximum limits for users in an Active Directory group. It basically says :
Starting with Windows Server 2003, the ability to replicate discrete changes to linked ...
- 1,018
3
votes
2
answers
1k
views
Active Directory LDS Structure Best Practices [closed]
I'm looking for guidance in structuring an LDS directory and finding only best practices targeted at Domain Services. Does anyone here have references for the hierarchical structure we set up in the ...
- 210
1
vote
1
answer
391
views
Get logon information through ldap from AD server
I want to know users logged into the domain and from which IP. I know it is possible to see by monitoring AD eventlogs. However, I want to do it without any software on AD server itself.
Is it ...
- 698
3
votes
2
answers
2k
views
AD LDS High availability
We are currently using CAS for multiple directory authentication. AD for internal users, AD LDS for external users. I've read that NLB is a possible solution, but wondering if this is possible with ...
1
vote
1
answer
2k
views
Can I link proxy users from a single LDS instance to multiple domains?
I have an Active Directory Lightweight Directory Services set up. I have objects that represent users in the Active Directory (Domain_A). I have set their objectSID attribute, and users can ...
- 1,018
1
vote
1
answer
3k
views
Does AD LDS support account lockout?
Does Active Directory Lightweight Directory Services support account lockout like how the full Active Directory domain services does?
- 675
0
votes
2
answers
10k
views
How to add a user in Active Directory with name longer than 20 characters?
I am using Windows 2008 R2 Server and trying to add a user in Active Directory.
I am able to save user ID of length less than 20 characters. But when I try to increase this value to 30 characters I ...
- 11