Questions tagged [domaincontroller]

An Domain Controller (DC) is a Windows server which responds to security authentication requests (logging in, checking permissions, etc.) within the Windows Server Active Directory domain.

For a complete description, see https://en.wikipedia.org/wiki/Domain_controller

231 questions
2
votes
1 answer

How to make sure domain controller is online?

I have a powershell script that runs everyday. Today it failed because the domain controller i was using became unavailable. Before I can continue with the rest of the script i want to make sure I can connect to a available DC. $LdapServer =…
Ninja Cowgirl
  • 10,421
  • 8
  • 33
  • 41
2
votes
1 answer

Constructed attributes in Active Directory Global Catalog (get password expiry for accounts)

Building a custom authentication service on top of Active Directory (using LDAP), we now need to see if an account's password is expired or not (and preferably also when the password expires/expired). We need to see this when querying for accounts…
2
votes
1 answer

Add other domain user in TFS server

I have a two domain named domain1.in and domain1.in. Now i installed and create a collection project in domain1.in server. I would like to add the domain2.in user in domain1 TFS. I don't know whether its possible or not. Please help me.
user3085540
  • 275
  • 3
  • 12
  • 27
2
votes
2 answers

How to get a computer's Distinguished Name (DN) with C++

I can't seem to find a way to get a DN of a workstation (computer) with C++ and WinAPIs. Any ideas how to do this? PS. The workstation is connected to a domain controller. PS2. I need the DN of a computer and not the logged on user.
c00000fd
  • 20,994
  • 29
  • 177
  • 400
2
votes
0 answers

Use Google Apps as a Domain Controller

Is it possible to use google apps as a domain controller. Specifically I want to remove our local dependence on a local windows DC. I want to have it so that users sit down at their workstations and when they log in they are authenticated against…
MindWire
  • 3,969
  • 7
  • 34
  • 46
2
votes
1 answer

How can PrincipalContext / UserPrincipal.FindByIdentity() use a read-only domain controller?

Active Directory (AD DS) has a concept of 'read-only domain controllers' (RODC). Probably for backward compatibility, the default is that read-only domain controllers are ignored: you have to specify explicitly that you allow connecting to a…
1
vote
1 answer

Query domain controllers & NTP servers time w32tm /monitor format output

I'm using the following to measure the time offset between our domain controllers and ntp servers. $Servers = "ntp.xxxxx,ntp.xxxxx,dc1,dc2,dc3,dca,dcb,dcc" $ListDomains = "domain1","domain2" Foreach ($Server in $ListServers) { $time = (w32tm…
user1131196
  • 77
  • 1
  • 3
  • 12
1
vote
1 answer

Issue with users connection with Active Directory

I have an issue with Active Directory and user logon: This is my scenario: SERVER LEVEL: I've a forest with one domain and three controllers. if I check on the CMD console: With the repadmin /replsummary command, all of them says that there are no…
Zero
  • 13
  • 4
1
vote
1 answer

Why do these commands give different values for a Domain Controller GUID?

Evening Folks, edited for clarity I have to get the Domain Controller GUID for a Certificate Request. I have a script that is provided by our CA that will generate the request and pull the GUID. what I don't understand is why their command produces…
Fitzgery
  • 558
  • 5
  • 14
1
vote
1 answer

Script every AD user on every DC

I am beginner in scripting with powershell. My boss asked me to create a script that will get information about the last logon from every user in our domain on every DC. I have created the following script: Import-Module ActiveDirectory function…
1
vote
1 answer

DsGetDcName and how to "attempt to use the domain controller"

In my program, I am calling DsGetDcName to get a domain controller. Microsoft's documentation for DsGetDcName says this: By default, this function does not ensure that the returned domain controller is currently available. Instead, the caller…
JeffR
  • 765
  • 2
  • 8
  • 23
1
vote
1 answer

Trigger a Logon Event on specific Domain Controller

Our Problem: We are using FortiGate in our company with ~2200 Clients. Most of them are using Notebooks. Some people can't connect to the Internet, when they come to the office after days working in home office. Our Fortigate is configured to watch…
1
vote
2 answers

Active Directory - Get LastLogonDate from all Domain Controllers for multiple users

The following script works perfectly, but I think it's way too complex and slow for what it needs to do. Basically, for a list of users in a variable (manually or obtained from Get-ADUser, doesn't matter), I want to query all Domain Controllers and…
Aubs
  • 180
  • 2
  • 10
1
vote
1 answer

Kerberos new user credential flow

I understand that the principle of Kerberos is to allow authentication between users and services on an unsecured network. Tickets generated by the authentication and ticket-granting service support secure communications and don't require a password…
mattdevops
  • 37
  • 5
1
vote
1 answer

where is ca certs file in ldap3?

I am using ldap3 and want to create a conncetion over SSL. I have seen that in order to so I must create a Tls object with the arugment "ca_certs_file". My problem is, I cannot understand from where can I retrieve such a file. from ldap3 import…
1 2
3
15 16