Questions tagged [ad-lds]

AD LDS is Active Directory Lightweight Directory Services and was previously known as ADAM (Active Directory Application Mode).

This is a role first made available in Windows Server 2008. ADLDS is a LDAP server. See http://go.microsoft.com/fwlink/?LinkId=96084 for an overview.

The following step by step guide should be useful to anyone new to ADLDS http://technet.microsoft.com/en-us/library/cc731246(v=WS.10).aspx .

65 questions
1
vote
0 answers

How can I set up working users in an AD LDS?

I need to set up a test Active Directory where I can freely change users and groups. After MUCH troubles I manged to set up the AD-LDS itself in a way that seems realistic to my uninitiated eyes. I've created some users but can't for the life of me…
Kempeth
  • 111
  • 3
1
vote
0 answers

ldifde command is failing with "Invalid Parameter: Bad argument '-i'. And also any equivalent PS Cmdlet?

OS - Windows Server 2008 R2 Localhost: DC as well as running an AD LDS instance Here are the command(s) I used: ldifde -i -u -f differences.ldf -s localhost:50004 -b myUserAccount MyDomain MyPassword -j . -c "cn=Configuration, dc=X"…
1
vote
2 answers

Active Directory LDS classes: what's the difference?

I'm creating some AD LDS objects. In AD I'm prompted with this window. What's the difference between 'container' and 'group'? Is there a web resource that lists the difference? I haven't been able to find one yet.
Dylan Klomparens
  • 634
  • 2
  • 9
  • 22
1
vote
0 answers

Create a AD-LDS partition under a child of the primary partition

I have a AD-LDS instance running on a Server 2008 R2. I have this application partition, created at installation : dc=enterprise,dc=example,dc=com I have succesfully followed this procedure to create application partitions. They are named…
ixe013
  • 1,018
  • 2
  • 10
  • 26
1
vote
1 answer

ADSIEdit freezes gettings properties of a group with hundred of thousands members

Doing performance testing on an AD-LDS (Server 2008 R2 64 bits), we created a milion user in a single OU. We also created a single group object and made those milion users member of that group. When we try to list the milion of users ADSIEdit times…
ixe013
  • 1,018
  • 2
  • 10
  • 26
1
vote
1 answer

Get logon information through ldap from AD server

I want to know users logged into the domain and from which IP. I know it is possible to see by monitoring AD eventlogs. However, I want to do it without any software on AD server itself. Is it possible to get that information by LDAP queries?
seaquest
  • 698
  • 2
  • 12
  • 25
1
vote
1 answer

Can I link proxy users from a single LDS instance to multiple domains?

I have an Active Directory Lightweight Directory Services set up. I have objects that represent users in the Active Directory (Domain_A). I have set their objectSID attribute, and users can authenticate to LDS with their Active Directory password. I…
ixe013
  • 1,018
  • 2
  • 10
  • 26
1
vote
1 answer

Does AD LDS support account lockout?

Does Active Directory Lightweight Directory Services support account lockout like how the full Active Directory domain services does?
Daniel A. White
  • 675
  • 1
  • 11
  • 20
1
vote
2 answers

Backing up an ADAM database - locking occurring

I'm having problems trying to backup an ADAM database on Windows. it keeps saying that the server is locked. I know that the database is used by IIS, so I've stopped all the applications and it still says that it is locked. What else do I need to…
Tim Almond
  • 125
  • 1
  • 5
1
vote
1 answer

Sharepoint and ADL-DS

Can I install SharePoint 2010 on Windows Server 2008 and using the Active Directory Lightweight Directory Services (formerly ADAM) for Authentication and autorization? Do I loose something in functionality?
1
vote
0 answers

Can an AD DS user be replicated/synched to AD LDS into a different container/organisational unit?

Have some data in the form of attributes to be shared on the directory attached to users and groups containers/OU or group policy. The current AD DS has OU and container groupings of users which doesn't match the way this data should be applied, so…
Greg Domjan
  • 231
  • 2
  • 4
  • 10
1
vote
3 answers

Entering new user data into AD LDS

I need some help configuring AD LDS (Active Directory Lightweight Directory Services). I'm not an administrator, have never configured domains and I don't have a clue how to add new users to existing domains. The thing is I need to develop an app on…
Robert Koritnik
  • 912
  • 5
  • 19
  • 35
1
vote
1 answer

Properly adding sAMAccountName to AD LDS schema when using userProxyFull

An application to work needs sAMAccountName attribute populated. But I also want to have this LDS instance to be a synced subset of the AD DS catalog. The synchronization works unless I try to sync this attribute too. I have figured out that…
ZorgoZ
  • 119
  • 5
0
votes
1 answer

dirsync query shows changes to an AD object that doesn't appear to exist

AdamSync is crashing periodically. In troubleshooting we found that it's throwing an exception when it encounters what it thinks is an empty DN. I replayed the query using the dirsync cookie stored in the ADLDS configuration. Dumping the returned…
Justin Cervero
  • 246
  • 1
  • 6
0
votes
3 answers

Active Directory - Lightweight Directory Services and Domain Password Policy

Greetings all, We have an active directory domain which enforces a strict password policy. Hooray! Now, for the project we are working on, we are going to be storing users of our website Microsoft's AD-LDS service as well as using that for…
Craig Beuker
  • 228
  • 2
  • 5