Questions tagged [adlds]

Microsoft Active Directory Lightweight Directory Services (AD LDS) is a Lightweight Directory Access Protocol (LDAP) directory service that provides flexible support for directory-enabled applications, without the dependencies that are required for Active Directory Domain Services (AD DS).

AD LDS Features

Install from Media (IFM) Generation
With this feature, you can use a one-step Ntdsutil.exe or Dsdbutil.exe process to create installation media for subsequent AD LDS installations.
Audit AD LDS changes
With this feature, you can set up AD LDS auditing with a new audit subcategory to log old and new values when changes are made to objects and their attributes.
Data Mounting Tool
With this feature, you can view directory data that is stored online in snapshots that are taken at different points in time to better decide which data to restore, without having to restart the server.
Support for Active Directory Sites and Services
With this feature, you can use the Active Directory Sites and Services snap-in to manage replication among AD LDS instances. To use this tool, you must import the classes in MS-ADLDS-DisplaySpecifiers.LDF to extend the schema of a configuration set that you want to manage. To connect to an AD LDS instance that hosts your configuration set, specify the computer name and the port number of a server that hosts this AD LDS instance.
Dynamic list of LDAP Data Interchange Format (LDIF) files during instance setup
With this feature, you can make custom LDIF files available during AD LDS instance setup—in addition to the default LDIF files that are provided with AD LDS—by adding the files to the %systemroot%\ADAM directory.
Recursive linked-attribute queries
With this feature, you can create a single LDAP query that can follow nested attribute links. This can be very useful in determining group membership and ancestry.

101 questions
1
vote
3 answers

Does Active Directory Lightweight Directory Services (AD LDS) support DirSync?

I am writing code to track changes in an AD instance using Active Directory DirSync. I want to be able to write automated tests for this code. Rather than setting up a full AD instance, with all the accompanying complexity, it seemed like a good…
Martin Eden
  • 6,143
  • 3
  • 30
  • 33
1
vote
1 answer

Use windows authentication with Active directory Lightweight directory services?

I'm trying to use AD Lightweight Directory Services for user authentication in ASP.net application and dont want to use Forms authentication. Is there any way to authenticate it using windows authentication.
AshokD
  • 442
  • 4
  • 14
1
vote
2 answers

Retrieve an AD-LDS object ACL with Powershell get-acl

I have manually set some custom DACL on some AD-LDS objects using LDP. I am trying to write a script that exports those ACL (only DACL for now) in SDDL form. I can retrieve a AD-LDS object with this code: $obj = Get-ADOrganizationalUnit -Filter…
ixe013
  • 9,559
  • 3
  • 46
  • 77
1
vote
1 answer

AD LDS automatic sign

we have asp.net web application and we need to support "automatic login" using domain credential (windows principal) if users visit the website via intranet or we will prompt user to enter domain credential if visited through external network via…
WB-DEV
  • 13
  • 2
0
votes
1 answer

Setting an AD user active by default (on creation)

I wrote some code (Java and LDAP) to create a user in the Active directory. Is it possible to set a user active by default (when he is created) in the active directory when I create him or do I have to modify the user? (the user will always have a…
Andreas
  • 2,007
  • 5
  • 26
  • 37
0
votes
1 answer

Does AD LDS provides any callback APIs when the data within gets modified?

I am using AD LDS to store my application configuration data. I want to export the data from AD LDS to a folder everytime when the data gets modified in AD LDS. I could not find any APIs to get callback from AD LDS when there is a modification( i…
aJ.
  • 34,624
  • 22
  • 86
  • 128
0
votes
0 answers

Windows 10 - AD LDS - New-ADOrganizationalUnit - Unable to contact the server

I have installed ADLDS in my Windows 10 (21H2) machine, we don't have any domain controller, the idea is to use AD LDS for user management in our Plant SCADA application. I am trying to create an OU via powershell cmdlets. But i get the following…
0
votes
0 answers

Is there any solution to replicate multiple Active Directories to the one as a Proxy Active Directory?

We have multiple Active Directories in our company, such as : finance-dc1.company.com finance-dc2.company.com sale-dc1.company.com sale-dc2.company.com development-dc1.company.com development-dc2.company.com ... Our development team want to…
TheMah
  • 378
  • 5
  • 19
0
votes
1 answer

Creating a PrincipalSearcher takes very long

Creating an instance of a PrincipalSearcher for accessing a local ActiveDirectory takes about 11 - 22 seconds. Interestingly the time is always 11 or 22 seconds, +/- a few milliseconds. The OU I'm trying to read out consists of not more than 30…
0
votes
1 answer

Spring Boot LDAP - Eror code 80 when trying to auth users

I am trying to auth users through secured adlds server from a spring boot application, and I am facing an issue for 2 weeks now, and no solutions found in the internet worked for me. First I had an error that says that I need to bind the…
Hamza Khattabi
  • 549
  • 4
  • 11
0
votes
1 answer

Need to change objectsid of an AD LDS user object

I am a bit stuck with the following command in an Active Directory Lightweight Directory Services instance: try { New-AdObject -Server $ADLDSServer -Name $($person.CN) -OtherAttributes @{'ObjectSid' = $($ADUser.objectSID) } -Path…
StackLad
  • 25
  • 5
0
votes
1 answer

AD LDS User Password Management in ADSI

I am having some issues managing users (user type pbjects) in AD LDS, specifically managing passwords. According to this article, i should be able to set password for user object by going to right click -> Reset password. If I do that, the dialog…
concentriq
  • 359
  • 2
  • 6
  • 16
0
votes
0 answers

Bind to AD LDS and change users password

I am trying to pragmatically (using powershell) bind to an AD LDS (ADAM) directory and change a users password. I tried using this cmdlet Set-ADAccountPassword -Identity $identity -Server 'localhost:389' -Reset -NewPassword (ConvertTo-SecureString…
0
votes
0 answers

How to update AD LDS distinguishedName attribute to Single Value to No

Currently the Single Value is set to Yes. How do i modify it ? Why I am trying to do this is because I want to have a unique DN for each person. Let say I have 2 person name is cn=Alice, i can do a cn=Alice+sn=Paul so the dn will be unique According…
newbieprogrammer
  • 848
  • 7
  • 23
  • 46
0
votes
1 answer

Connection to AD LDS using C#

I have developed a console application in C# to connect to an AD LDS server. The console app is a simple app with the following code PrincipalContext context = new PrincipalContext(ContextType.ApplicationDirectory, <>,…
Rajesh Sharma
  • 29
  • 1
  • 4