Questions tagged [ad-lds]
AD LDS is Active Directory Lightweight Directory Services and was previously known as ADAM (Active Directory Application Mode).
61
questions
0
votes
0answers
24 views
I need help to remove mail attributes from AD LDS domain for Bulk Users
Where am I going wrong in the script here? It doesn't give me any error. But it doesn't remove
$cred= get-credential "s2\svcfimadamadmapeu"
$CSV= Get-content '.\input.csv'
function ...
2
votes
1answer
126 views
How to connect to AD-LDS without sending passwords in plaintext?
I created an AD-LDS instance using the Administrative Tools Active Directory Lightweight Directory Services Setup Wizard.
I can connect to the instance with ldp.exe on localhost:389.
However, I can ...
2
votes
0answers
68 views
Properly adding sAMAccountName to AD LDS schema when using userProxyFull
An application to work needs sAMAccountName attribute populated. But I also want to have this LDS instance to be a synced subset of the AD DS catalog. The synchronization works unless I try to sync ...
0
votes
1answer
57 views
dirsync query shows changes to an AD object that doesn't appear to exist
AdamSync is crashing periodically. In troubleshooting we found that it's throwing an exception when it encounters what it thinks is an empty DN. I replayed the query using the dirsync cookie stored in ...
1
vote
1answer
2k views
How can I add a certificate to a Windows service's certificate store from the command line?
I want to add a certificate to the certificate store belonging to a Windows service, from the command line. So far, the only thing I've found is:
certutil -service -store ADAM_Instance-Name\My
When ...
1
vote
0answers
163 views
Change the DC in an ADLDS application directory partition name (the Naming Context)
I have a server on which I used the Active Directory Lightweight Directory Services Setup Wizard to create a new application directory partition:
I need to rename the DC part of the Partition name ...
1
vote
1answer
2k views
Creating a new AD LDS instance without the Setup Wizard?
Is the installation of a new unique instance of AD LDS (using either cmd or PowerShell) possible? All resources I can find online just use the Active Directory Lightweight Directory Services Setup ...
1
vote
0answers
89 views
Ubuntu Server openLDAP + Windows Server AD LDS?
Is possible to have a Ubuntu server with openLDAP + Samba and a Windows Server with AD LDS, taking the DDBB from the Ubuntu?
If it's possible could you point me where to find information about this?
...
0
votes
1answer
955 views
ADFS 4 with AD LDS (The object does not exist)
I have tried everything possible with my limited knowledge but I can't figure out whats wrong so hoping someone can just point the right direction.
I have an ADFS 2016 server which works fine with ...
2
votes
1answer
3k views
When is AD LDS really required
I have a question regarding to the purpose of AD LDS.
Currently I am playing around with windows server infrastructure to have a better understanding of their inner workings and aim to build a ...
1
vote
2answers
9k views
Removing ADLDS in Windows Server
I installed active directory Light directory service accidentally as i already has ADDS installed after installation all services are stopped in Server Manager and unable to do refresh i want to ...
1
vote
1answer
141 views
Where are user rights stored in AD LDS?
I've installed an AD LDS on a Windows 7 Machine in the context of an local user (ws-cs-03\rseuser).
This user can access and administrate the AD-LDS instance.
Question:
Where is the information ...
4
votes
1answer
755 views
AD LDS cannot connect to port 389
I am trying to replicate an AD domain to a server hosting AD Lightweight Directory Services (AD LDS).
In the instance setup wizard, I am choosing "A replica of an existing instance". After I ...
0
votes
1answer
617 views
Import sample Active Directory into LDAP [closed]
For development purposes so I can query and test a C# LDAP integration, I have set up an Active Directory Lightweight Directory Services (AD LDS) instance on my Windows 10 box. I need to populate ...
0
votes
1answer
57 views
AD LDS data refreshing from script
I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account.
I cannot enable syncrepl ont ...
3
votes
1answer
1k views
Active Directory Module for PowerShell Get-ADObject and Set-ADObject don't work with custom attribute
I am trying to work with a custom attribute in an AD LDS instance that I did not create, using the Active Directory Module for PowerShell. Unfortunately, the cmdlets Get-ADObject and Set-ADObject are ...
3
votes
1answer
6k views
PowerShell AD LDS query with filter using wildcard not behaving as expected
I am the administrator for a learning management system website that stores its page structure in AD LDS. I am trying to run a query to get objects (pages on the site) matching a filter for ...
0
votes
1answer
5k views
AD LDS - LDAP - How to set group's rights on container
I installed AD LDS on a W2012R2. Everything is working fine. Now, I want to create new Roles, to grant to groups permissions to create/modify/delete users in a certain container. (I used this article)
...
1
vote
0answers
1k views
Migrating AD Lightweight Directory Services (LDS) or ADAM data to Azure Active Directory (WAAD)
We currently have an ADAM instance that we authenticate our ASP.NET web users against. We have a requirement to replace this instance with an Azure Active Directory instance instead with a new schema ...
0
votes
1answer
294 views
Can the objectGUID be specified on creation or changed afterward?
Our system links users in an LDAP store to users in a SQL database. The database has been around longer than the LDAP store though, and we'd like to bring pre-existing users from the database into ...
2
votes
1answer
2k views
Configuring two AD LDS instances to synchronize with one another
I'm trying to find information on synchronizing multiple AD LDS instances with each other, but all the information I'm finding via Google is about synchronizing AD LDS to AD DS.
I would appreciate it ...
4
votes
1answer
777 views
What is MS-Membership Transitive.LDF?
When installing ad-lds, you have the option to import several LDF files. Some of them are described here: http://technet.microsoft.com/en-us/library/cc771943.aspx.
Can anyone tell me what the MS-...
1
vote
2answers
2k views
vCenter SSO without AD?
I have an ESXi Server with a vCenter virtual appliance image and an image of a Windows 2008 TS.
The Windows 2008 image has an external Ethernet connection configured to another network, so users can ...
1
vote
1answer
6k views
How do I import into ADAM / AD LDS - The specified instance type is invalid
I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid).
I've tested and recovered from errors that relate to
The import file is ASCII, ...
2
votes
0answers
177 views
Forcing not-yet-known SID value in AD LDS userProxy account
We are dealing with a chained provisioning request, the goal being to create successively an AD account and an AD LDS userProxy account associated with the just created AD account.
The AD account SID ...
3
votes
3answers
7k views
AD LDS service account as local admin to allow SSL connection?
I am installing Active Directory Lightweight Directory Services (AD LDS, aka ADAM) on a Windows 2012 vm. After finally getting the configuration of the directory and synchronization handled, I am now ...
-4
votes
1answer
743 views
Configure Active Directory on Windows 7 [closed]
I am to configuring Active Directory on Windows 7. I have followed this link and installed AD LDS.
But i am unable to create a new user in the active directory.
Also, I am able to browse the ...
1
vote
0answers
2k views
How can I set up working users in an AD LDS?
I need to set up a test Active Directory where I can freely change users and groups. After MUCH troubles I manged to set up the AD-LDS itself in a way that seems realistic to my uninitiated eyes. I've ...
2
votes
0answers
262 views
AD LDS query fails to get second page of large number of groups
We hit the 1015 limit in AD DS, so we are exploring AD LDS as an alternative. To test the limit, I've created >32,000 groups, each nested inside another, with my user in the top and bottom level group....
0
votes
0answers
2k views
ldifde command is failing with "Invalid Parameter: Bad argument '-i'. And also any equivalent PS Cmdlet?
OS - Windows Server 2008 R2
Localhost: DC as well as running an AD LDS instance
Here are the command(s) I used:
ldifde -i -u -f differences.ldf -s localhost:50004 -b myUserAccount MyDomain ...
0
votes
1answer
1k views
manage Windows users with AD LDS
I have a Windows 2008R2 server with about 30 users, which log in with remote desktop to use some application installed on the server itself
I would move the users from local users to AD LDS, so I can ...
0
votes
1answer
116 views
Setting up ADLDS and managing it with internal ADLDS users
I configured ADLDS according to this blog post. I went further and followed this Microsoft article about allowing internal users to access ADLDS thru ADSI Edit but whatever I do i get access denied (...
1
vote
2answers
265 views
Active Directory LDS classes: what's the difference?
I'm creating some AD LDS objects. In AD I'm prompted with this window.
What's the difference between 'container' and 'group'? Is there a web resource that lists the difference? I haven't been able ...
6
votes
1answer
1k views
Replication of lockoutTime attribute is not urgent on AD-LDS
I have two LDS servers on the same subnet. They replicate well. If I change an attribute, it gets replicated after 15 seconds.
LDS is configured to honor password policies. When a user makes too ...
1
vote
0answers
686 views
Create a AD-LDS partition under a child of the primary partition
I have a AD-LDS instance running on a Server 2008 R2. I have this application partition, created at installation :
dc=enterprise,dc=example,dc=com
I have succesfully followed this procedure to ...
0
votes
1answer
455 views
Email address as rdn in Active Directory Application Mode - ADAM
Is it OK to use an email address as the CN attribute in ADAM (I don't mean the email/mail attribute)?
I have a requirement that calls for ADAM for authentication and the user's email address as the CN ...
3
votes
1answer
985 views
Dynamic group membership to work around no nested security group support for Active Directory
My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS). These legacy administration ...
1
vote
1answer
206 views
ADSIEdit freezes gettings properties of a group with hundred of thousands members
Doing performance testing on an AD-LDS (Server 2008 R2 64 bits), we created a milion user in a single OU. We also created a single group object and made those milion users member of that group.
When ...
2
votes
1answer
176 views
Microsoft HPC cluster - AD or AD LDS?
The instructions for deploying an HPC Cluster (e.g. step 1.5 on this page in TechNet) are very clear that HPC cluster nodes "must be members of an Active Directory domain".
Does the Active Directory ...
2
votes
1answer
2k views
How many users can be in a AD LDS group?
Microsoft published the recommended maximum limits for users in an Active Directory group. It basically says :
Starting with Windows Server 2003, the ability to replicate discrete changes to linked ...
3
votes
2answers
1k views
Active Directory LDS Structure Best Practices [closed]
I'm looking for guidance in structuring an LDS directory and finding only best practices targeted at Domain Services. Does anyone here have references for the hierarchical structure we set up in the ...
1
vote
1answer
316 views
Get logon information through ldap from AD server
I want to know users logged into the domain and from which IP. I know it is possible to see by monitoring AD eventlogs. However, I want to do it without any software on AD server itself.
Is it ...
3
votes
2answers
2k views
AD LDS High availability
We are currently using CAS for multiple directory authentication. AD for internal users, AD LDS for external users. I've read that NLB is a possible solution, but wondering if this is possible with ...
1
vote
1answer
2k views
Can I link proxy users from a single LDS instance to multiple domains?
I have an Active Directory Lightweight Directory Services set up. I have objects that represent users in the Active Directory (Domain_A). I have set their objectSID attribute, and users can ...
1
vote
1answer
2k views
Does AD LDS support account lockout?
Does Active Directory Lightweight Directory Services support account lockout like how the full Active Directory domain services does?
0
votes
2answers
8k views
How to add a user in Active Directory with name longer than 20 characters?
I am using Windows 2008 R2 Server and trying to add a user in Active Directory.
I am able to save user ID of length less than 20 characters. But when I try to increase this value to 30 characters I ...
2
votes
3answers
11k views
Install lightweight Active Directory on Windows 7 for Development purposes without domain?
Is there a way to install lightweight Active Directory on Windows 7 for Development purposes without domain? I've downloaded the "AD LDS" for Windows 7 and installed it but it seems to require a ...
0
votes
2answers
562 views
Stand alone or free application to backup ADAM / AD LDS database files
Do you know any small standalone and free tool, that can be run in console, to backup / restore ADAM / AD LDS database files (like adamntds.dit, edbres00001.jrs etc.).
I tried to stop ADAM service ...
1
vote
2answers
225 views
Backing up an ADAM database - locking occurring
I'm having problems trying to backup an ADAM database on Windows. it keeps saying that the server is locked.
I know that the database is used by IIS, so I've stopped all the applications and it still ...
0
votes
1answer
2k views
Windows Server 2003 vs 2008 & ADAM vs AD LDS
Comparing Window Server 2003 to 2008, I know that ADAM (active directory application mode) has been replaced with AD LDS (active directory lightweight directory services). I am just wondering, if ...
