233 questions
0
votes
0
answers
57
views
Grabbing User Lockout location in C#
I would like if anyone knows a way to retrieve the lockout location of a user. Is the best way to do that is to read the eventlog from the domain and extract the location from the security event or is ...
- 29
0
votes
0
answers
47
views
Windows Server 2019 Default Administrator Permissions
I installed Windows Server 2019(Datacenter) on my laptop in preparation to start learning MS Sharepoint. Everything runs fine. I can install and uninstall applications with the default Administrator ...
- 130
0
votes
1
answer
124
views
"The service cannot accept control messages at this time" when trying to re-join Exchange Server to domain
An Exchange Server that was not running for an extended period of time, was brought back up again. A domain user could not interactively logon because the workstation lost the trust relationship with ...
- 315
0
votes
0
answers
70
views
How to resync date and time of vm with the host machine's time after guest additions installation
Recently I have been doing soc Home lab making course from let's defend platform.
The iso file is of 2022 version and while making this vm the server for windows was windows server 2022.
The problem ...
0
votes
0
answers
276
views
Active directory using Powershell on Windows server 2019, argument ‘NewDomain’ not recognised
I am trying to set up an active directory forest on Windows server 2019 through powershell. This server will be the only domain controller for now. I have set my static IP address, the DNS is set to ...
- 11
0
votes
1
answer
125
views
How to handle DC replication delay when enabling users and setting properties?
I am working on an application where I need to perform some operations on users fetched from a Domain Controller (DC). The operations involve enabling the users and then setting properties for them. ...
- 3
0
votes
0
answers
91
views
How to get information about Domain Controller, status and Replication status using LDAP and C#?
I am trying to use LDAP to get information about domain controllers and to know about its status and Replication status using C#. I am trying to do this approach remotely; for example, I am running ...
- 121
1
vote
2
answers
194
views
How to get Active Directory information remotely using c#?
I am trying to get Active directory information like AD replication status and other types of information. For now, I am just concentrating on the AD replication status. I used this code to login to ...
user23077506
0
votes
0
answers
43
views
Issue with User Required to Enter Username and Password on Logon in Windows 7
I am encountering an issue with a Windows 7 machine that is part of a domain. When a user attempts to log on, they are prompted to enter their username and password. Ideally, I would like the logon ...
- 111
0
votes
2
answers
928
views
PowerShell Script Install-ADDSDomainController Error
I'm having an issue with a PowerShell script I am writing to automate Domain Controller promotions in AD.
I get the following error when run:
Install-ADDSDomainController : Object reference not set to ...
- 1
1
vote
0
answers
297
views
Invoke-Command to a DC for replication not working in Windows 11
I have a weird problem hoping someone can help with this.
So I have 2 systems. One is Windows 10 22H2, one is Windows 11 23H2. Both are brand new installs. Both are on the domain, in the same OU, ...
- 55
0
votes
1
answer
4k
views
Switching from a hybrid AD (Active Directory) to cloud only
I am currently doing an internship, and at the moment, I am working on figuring out how the company where I am interning can transition from a hybrid Active Directory to a cloud-only setup. This is ...
0
votes
1
answer
922
views
Active Directory stops responding after loosing a domain controller
One of my domain controllers corrupted and the secondary DC has not come online since. I have found the following error message in the event log with event ID 1126.
Active Directory Domain Services ...
- 132
0
votes
0
answers
148
views
AD domain controller user replication with group membership
Trying to figure out why a PowerShell domain controller replication job for a user object does not sync groupmemberships (memberOf).
$users = 'wtst, tst'
$usersArray = $users.Split(',')
Invoke-...
- 635
0
votes
1
answer
1k
views
How to Get User belong to different group in Different domain along with passing authentication using powershell script?
How to Get User belong to different group in Different domain along with passing authentication using PowerShell script?
Should get different groups in different domain also how to pass authentication ...
2
votes
2
answers
982
views
Git commands (that use less.exe) takes too long on Windows
The following git commands take way too long to execute on my Windows PC:
git config --list
git branch
git push
git pull
Sometimes, Git throws the following error:
PS D:\SB\Code\...
- 729
0
votes
1
answer
1k
views
python ldap3 get domain controller list
I need some help with a script, I am trying to get a list of all the domain controllers for a domain. I am using python ldap3 and I am getting errors trying to connect. See below, any suggestions will ...
1
vote
1
answer
122
views
Issue with users connection with Active Directory
I have an issue with Active Directory and user logon:
This is my scenario:
SERVER LEVEL:
I've a forest with one domain and three controllers. if I check on the CMD console:
With the repadmin /...
- 35
0
votes
0
answers
76
views
Password Parameters have been changed on the Domain controller
Is there a way where we can check if the Password Parameters have been changed on the Domain controller, Eg. Minimum password length is changed from 10 to 15 value.
can we check from any particular ...
0
votes
2
answers
1k
views
How to get Client Side Extension (CSE) GUID of a policy area and MMC snap-in GUID of that same policy area?
I am trying to implement a GPO "Preference" without a domain according to this guide: https://sdmsoftware.com/tips-tricks/group-policy-preferences-in-the-local-gpo-yes/
and since I am not ...
- 3
0
votes
1
answer
1k
views
Ldap queries with multiple domains
I have question about LDAP queries and DC in general (in Microsoft AD):
Does a DC can contain only one domain? or sub domain can be also on it?
Does sub-domain reside in a separate DC?
if i want to ...
- 1
1
vote
0
answers
2k
views
DsGetDcName failing for Domain Controller
I have added two additional Windows Server 2012 domain controllers to my domain. When running dcdiag /v I receive a failure:
Doing primary tests
Testing server: Default-First-Site-Name\NEWDC
Starting ...
- 11
0
votes
1
answer
390
views
How to set HttpOnly and secure flag for domain controller project(not standalone) deploying in HA mode? I'm using wildfly 20
I'm using wildfly 20.If I set HttpOnly and secure flags in web.xml file it works in standalone project not with domain controller project. Please help with this
I tried with this
<session-config>...
- 1
2
votes
1
answer
1k
views
Why do these commands give different values for a Domain Controller GUID?
Evening Folks,
edited for clarity
I have to get the Domain Controller GUID for a Certificate Request. I have a script that is provided by our CA that will generate the request and pull the GUID. what ...
- 718
3
votes
3
answers
5k
views
PowerShell Script to check if a computer is a domain controller or not
This self-answered question addresses the following scenario:
How can I write a PowerShell script to check if a computer is a domain controller or not?
0
votes
2
answers
943
views
What determines what domain controller a IIS Web Application uses for any authentication routines?
We're running on Windows Server 2016. We've been having some slowdown with a web application running in IIS. After the software team determined it was not an issue between IIS and MS-SQL, I'm trying ...
- 11
-1
votes
1
answer
557
views
i have a problem when i try to join an additional domain controller to a domain of DC , cant find the domain
I can't make the ADC join the domain.
I have set the DNS entries for DC and ADC to the same IP address.
0
votes
1
answer
173
views
Is there a way to ensure that the AD entity I am reading is the most recent across different domain controllers?
We have agents that collect AD data from various DCs in the organization.the problem is that if we get an update about a change in the entity from 2 different DCs we want to know which entity change ...
- 1
0
votes
1
answer
2k
views
SSO Implementation for Desktop and Web Application with Windows Credential
I have a windows application and a web application. Both are having a different login screen. Is there a way to implement SSO with the help of windows credential so that user don't need to login again ...
- 61
0
votes
0
answers
172
views
Write-eventlog fails when running from task scheduler
So I've been looking for a solution to this problem for the last 2 days, here is the breakdown. i am simply trying to write an event log to the system log on one of my domain controllers, when i run ...
0
votes
0
answers
1k
views
How to capture user login Wireshark
I want to simulate the user domain login to his windows machine, and then capture the traffic in Wireshark
So, I create a new user in the active directory and then open Wireshark and run the following ...
- 27
1
vote
1
answer
2k
views
Script every AD user on every DC
I am beginner in scripting with powershell. My boss asked me to create a script that will get information about the last logon from every user in our domain on every DC. I have created the following ...
0
votes
1
answer
4k
views
I can ping the DC, Domain, IP, but cannot join the domain
So, setting up a brand new domain for the very first time (never set up a brand brand new domain) of Azure boxes (but not AAD - using traditional AD over Azure) trying to get these boxes to ...
- 120
1
vote
1
answer
2k
views
DsGetDcName and how to "attempt to use the domain controller"
In my program, I am calling DsGetDcName to get a domain controller.
Microsoft's documentation for DsGetDcName says this:
By default, this function does not ensure that the returned domain
controller ...
- 835
1
vote
1
answer
2k
views
Trigger a Logon Event on specific Domain Controller
Our Problem:
We are using FortiGate in our company with ~2200 Clients. Most of them are using Notebooks. Some people can't connect to the Internet, when they come to the office after days working in ...
- 31
0
votes
1
answer
2k
views
Remove old domain name from Active Directory
I have setup Active Directory on Windows Server 2019 with forest name as abc.def.net but we got to know that we need to change this domain name to ab.de.net.
Although I managed to make changes but now ...
0
votes
2
answers
2k
views
How to set username/password in windows server for accessing a Domain Controller?
I cannot connect to Domain Controller (Active Directory) from a windows server due to DM's user/password. I get the error:
The following Domain Controller could not be contacted: xxx. The user name ...
- 401
1
vote
2
answers
2k
views
Active Directory - Get LastLogonDate from all Domain Controllers for multiple users
The following script works perfectly, but I think it's way too complex and slow for what it needs to do.
Basically, for a list of users in a variable (manually or obtained from Get-ADUser, doesn't ...
- 340
0
votes
0
answers
44
views
In Exchange Admin Center, from where the mobile data is generated, can we manipulate or append to that data?
In Exchange Admin Center, from where the mobile data is generated, can we manipulate or append to that data?
any powershell command, script, any other language code or exe or anything, that can help ...
- 45
0
votes
0
answers
165
views
Error: Validation input failed The server cannot handle directory requests
We had a application which needs user credentials for installation. Till some time back it was working fine. But all of a sudden it was throwing "Error: Validation input failed The server cannot ...
1
vote
1
answer
8k
views
User login history in whole Domain
I'm actually looking for a way to get login history for a specific username.
I have tried these ways but didn't work:
1. eventid 4624
It only shows logins to the DC itself, Not in the entire domain. E....
0
votes
1
answer
1k
views
Ansible - Gather Facts failed on Windows DC
I´m currently trying to create update Jobs for Windows Servers which mostly works. But on all my DCs (expect one, don´t know why this one is working) gathering facts failed with this error message:
...
- 46
0
votes
1
answer
2k
views
Edit/Add GPO on DC via Powershell
I'm given the task to migrate all the printers installed on workstations via GPO to another server.
As for now all printers are installed in a local decentralized Distribution Point, we want to move ...
1
vote
1
answer
1k
views
In PowerShell, how can I determine if the DNS server I'm using, is a domain controller?
I want to make sure, that the DNS server I use, is a domain controller. I know the domain name. Can I check that with PowerShell? Such as to resolve some DC specified DNS record:
Resolve-DnsName -Name ...
- 11
1
vote
1
answer
3k
views
DCPROMO fails with error "Access is denied" if the user does the promotion isn't granted the "trusted for delegation" user right
I need to transfer FSMO roles from Windows Server 2012 R2 to Windows Server 2019. It works well with clean Datacenter editions of both systems but not with existing Windows Server 2012 R2 Essentials.
...
- 11
0
votes
2
answers
2k
views
Connect local devices to Azure Active Directory Domain Services
Can't find clear documentation to connect local devices to Azure AD Domain Services (AADDS).
Have already successfully setup Azure WAN + Azure Hub + User point-to-site VPN connection.
But don't have ...
- 177
0
votes
2
answers
8k
views
unicodePwd Attribute in AD
Can someone explain how the unicodePwd attribute works in AD.
Specifically, when I open the "ADSI Editor", then open a users properties and look at the attributes, the "unicodePwd" ...
- 37
1
vote
1
answer
447
views
Kerberos new user credential flow
I understand that the principle of Kerberos is to allow authentication between users and services on an unsecured network. Tickets generated by the authentication and ticket-granting service support ...
- 57
0
votes
1
answer
383
views
Can I join a local personal workstation to a Google Cloud Active Directory Domain?
My company's members all work remotely and there is no central office or HQ. They are interested in a cloud AD to create and manage group policy's. I created one using these steps in Google Cloud ...
- 11
1
vote
1
answer
2k
views
where is ca certs file in ldap3?
I am using ldap3 and want to create a conncetion over SSL. I have seen that in order to so I must create a Tls object with the arugment "ca_certs_file". My problem is, I cannot understand ...
- 41