AD

16 Topics

SSRS group adding
Hi everybody, I have an SQL server with SSRS. The reports work fine, but the reports are only available with the administrator profile. So I thought I would like to add another "profile" which is only for reading data. I created a new AD group, which is 'DOMAIN\users_test' but when I want to add the group on SSRS webpage I've got the following error message: "The user or group name 'DOMAIN\users_test' is not recognized." I have no idea what should I do. Can you give me some advice? Thank you. PN
pnany
Jan 20, 2025 Place SQL Server
51Views
0likes
0Comments
MFA on RDP (with AD, RDG, NPS)
Hi, everyone. In the company where I work we have an AD domain and RDP servers (MP) that some employees access from outside via RDG. We have already installed ADFS and NPS but I am still not clear which products and which license levels are necessary to enable 2FA on RDP via RDG. Does anyone have a clearer idea than me? Thanks
FulvioPalma
Dec 13, 2024 Place Azure
460Views
0likes
2Comments
Active Directory on-premise, basic rules.
Hello everyone! Not sure this is correct place to ask but i didn't found more suitable group. I want to ask a question regarding Active Directory groups basics. Everyone remember the rule: if we have two AD domains (in one tree), and we want to add some user from first domain into the group in the second, we need to create a group in the first domain add the user into it and add this group into the group in the other domain. But not the other way: to add a user directly from the first domain into the group in the second domain. I want to ask everyone, is this rule actual in 2020? This rule basically based on the technical limitations or this is just the best practice?
Solved
aero2466
Aug 04, 2024 Place Windows Admin Center
3KViews
1like
3Comments
ADLDS
I'm trying to run the ADLDS Setup wizard in Server 2022. I'm getting this error at the last step.
jbrailer
Jun 26, 2024 Place Windows Server for IT Pro
683Views
0likes
1Comment
GPO stettings for Privacy Windows 10 and Windows 11
Hello, I have set a security policy in GPO for some privacy & security settings. But I cannot find these settings in GPO. I don't want to edit this using the Windows registry, does anyone perhaps know where these settings are available? Let apps show me personalized ads by using my advertising ID Let websites show me locally relevant content by accessing my language list Let windows improve start and search results by tracking app launches Show me suggested content in the Settings app
Lukasz_Florek
Apr 17, 2024 Place Windows management
2.2KViews
0likes
2Comments
Add to the search of inactive users multiple OUs
Hi all I came with a script that works fine what it does is to find users that haven't logged on in more than 90 days in an specific OU and then it disables them, however I need the script to search for 2 more OUs instead of only one but I couldn't make it work, this is the script: #Script to disable users that not login for more than 90 days #Create the report file $FileName = "DisabledUsers" + (Get-Date).ToString("dd-MM-yyyy") + ".csv" New-Item -Path "C:\temp" -Name $FileName -ItemType File Add-Content -Path C:\temp\$fileName -Value "Account,Disabled date,Last Logon Date" $DisabledDate = Get-Date -Format dd/MM/yyyy $UsersToDisable = Get-ADUser -Filter 'Enabled -eq $True' -SearchBase “OU” -Properties LastLogonDate,WhenCreated | where {$_.LastLogonDate -lt (get-date).AddDays(-90) -and $_.WhenCreated -lt (get-date).AddDays(-90)} foreach($User in $UsersToDisable){ foreach($User in $UsersToDisable){ if($User.DistinguishedName -notlike "OU"){ Disable-ADAccount -Identity $User.SamAccountName -Confirm:$false if((Get-ADUser -Identity $User.SamAccountName)){ $Account = $User.SamAccountName $LastLogon = $User.LastLogonDate $Value = "$Account,$DisabledDate,$LastLogon" Add-Content -Path C:\temp\$FileName -Value $Value } } } In this part Get-ADUser -Filter 'Enabled -eq $True' -SearchBase “OU” i tried to create above something like this: $OU = 'OU1','OU2' and then tried to pipe it but it did not work. Any thoughts how could I make it work? Many thanks!
Solved
tincho1984
Jan 24, 2024 Place Windows PowerShell
896Views
0likes
3Comments
MS Bookings - How to change the auto created user account
Hello all, when I create a new shared booking calendar, an account is automatically created with the name of the booking calendar. Is there any way to change this automatically generated AD user and refer to the already existing one? Surely this cannot be a normal function?! Example: Existing user A (user_a@xy) wants to have a booking calendar. I create a calendar for user A. A new user is created in the background (user_a1@xy) and the new booking calendar is assigned to this new user. This behavior spams the AD with unnecessary users and makes it very confusing. The problem has already been reported, but unfortunately no meaningful feedback came out. https://answers.microsoft.com/en-us/msoffice/forum/all/ms-bookings-how-to-change-the-auto-created-user/df3b3a7f-8639-4525-bbf7-dacf2d4fdc47 How can I prevent this, or change the calendar back to the correct user? Thanks
windata
Oct 04, 2023 Place Microsoft Bookings
5.6KViews
0likes
2Comments
manipulation with users and groups in root domain
Hi, we have problem with application server which resides in tree domain dm1.domain.com, we need to manipulate users and groups (crerate user, add to group e.t.c) in our root domain dm.domain.com, this application server (linux based) uses AD ldap to connect to tree domain, there is no direct connection to root domain controllers. Wee need to create users and groups through this application server in root domain. Is this possible to configure somehow? Thanks
osozu
Aug 15, 2022 Place Windows Server for IT Pro
2.2KViews
0likes
10Comments
Request Computer Certificate from CA in another AD Forest
Hello I am wondering if there is a way to generate a certificate request for a computer in one AD forest and use the CSR to generate the certificate on the CA in another AD forest. Does anyone know if this is possible? I cannot find documentation on this in my Google searches. Thanks in advance!
Solved
charlie4872
Jun 24, 2022 Place Windows Server for IT Pro
1.3KViews
0likes
2Comments
Hybrid Azure AD join without VPN
Have configured Hybrid Azure AD join successful , dsregstus AD Join yes AAD join Yes. User changed the password(New Password) from corp network and went to home.User is on cached credentials(old Password) didnt connect VPN. User able to connect with cached credentials(old password) not changed password(New password) . Does the user needs to connect VPN in order to use changed password(New Password). We don’t want to allow users to use VPN. How the user can use changed password(New password)
Solved
JE
Jan 11, 2022 Place Microsoft Intune
9.2KViews
0likes
2Comments