Questions tagged [active-directory]

A Microsoft technology that constitutes an LDAP directory service with centralized management functionality for user accounts, computer accounts, groups, and configuration management across many Windows servers and desktops.

Active Directory is a directory service created by Microsoft for managing Windows environments.

It is used for:

  • A centralized Authentication/Authorization source for Kerberos and NTLM protocols.
  • Providing a single authentication/authorization domain for member servers and workstations.
  • Providing LDAP services.
  • Providing centralized configuration methods of Windows workstations and servers through Group Policy and other methods.
  • Multi-site replication of directory-database data.

Non-Windows support is generally provided through the Samba package on POSIX operating systems (Linux, macOS, BSD, Solaris, etc). All modern Samba releases allow machines to join a domain as if they were a Windows machine.

For a list of ports which must be open in a firewall for AD to work properly, see

Some useful links are below

9888 questions
6 answers

How can I find out what AD groups I'm a member of?

I'm running a Windows XP desktop in a corporate environment. How can I find out what AD groups I belong to?
  • 3,933
  • 6
  • 26
  • 35
9 answers

Find name of Active Directory domain controller

How can I find out the name/IP address of the AD domain controller on my network?
  • 2,211
  • 4
  • 17
  • 9
9 answers

Command line to list users in a Windows Active Directory group?

Is there a command line way to list all the users in a particular Active Directory group? I can see who is in the group by going to Manage Computer --> Local User / Groups --> Groups and double clicking the group. I just need a command line way to…
2 answers

What is Active Directory Domain Services and how does it work?

This is a Canonical Question about Active Directory Domain Services (AD DS). What is Active Directory? What does it do and how does it work? How is Active Directory organized: Forest, Child Domain, Tree, Site, or OU I find myself explaining some…
  • 100,183
  • 32
  • 195
  • 326
3 answers

Is there a way to view the members of an Active Directory group if you aren't a domain admin and can't log into to a domain controller?

Is there a way to view the members of an Active Directory group if you aren't a domain admin and can't log into to a domain controller?
Alan Hecht
  • 1,403
  • 2
  • 11
  • 10
8 answers

How can I figure out my LDAP connection string?

We're on a corporate network thats running active directory and we'd like to test out some LDAP stuff (active directory membership provider, actually) and so far, none of us can figure out what our LDAP connection string is. Does anyone know how we…
  • 1,443
  • 3
  • 11
  • 8
5 answers

Windows Active Directory naming best practices?

This is a Canonical Question about Active Directory domain naming. After experimenting with Windows domains and domain controllers in a virtual environment, I've realized that having an active directory domain named identically to a DNS domain is…
Anton Gogolev
  • 1,572
  • 3
  • 16
  • 22
1 answer

What is ADFS (Active Directory Federation Services)?

So I've been told that our PHP application may need to support authentication using ADFS. For a non-Microsoft person, what is ADFS? How does it differ to things like LDAP? How does it work? What kind of information would be included in a typical…
Simon East
  • 1,484
  • 1
  • 14
  • 18
5 answers

Active Directory explained

If you had to explain Active Directory to someone how would you explain it?
15 answers

Get list of AD groups a user is a member of

Suppose I have the user id of a user in Active Directory. I'd like to get a list of all AD groups in which that user is currently a member of. How can I do this from the Windows command line? I've tried the following: dsget user "DC=jxd123"…
  • 1,864
  • 7
  • 37
  • 50
4 answers

Your system administrator does not allow the use of saved credentials to log on to the remote computer

At our office, all of our Windows 7 Clients get this error message when we try and RDP to a remote Windows 2008 Server outside of the office: Your system administrator does not allow the user of saved credentials to log on to the remote…
5 answers

How to delete domain user profile from a computer?

I'm wondering how to safely remove a domain user profile from a computer that is a part of a domain. I don't want to delete the account from the domain itself, I just need to remove the profile from this computer, to do some cleanup. I'm currently…
  • 1,001
  • 2
  • 11
  • 21
4 answers

Any difference between DOMAIN\username and username@domain.local?

I'm trying to troubleshoot an obscure authentication error and need some background information. Is there any difference between how Windows (and programs like Outlook) process DOMAIN\username and username@domain.local? What are the proper terms…
Josh Kelley
  • 963
  • 1
  • 7
  • 17
7 answers

How to allow active directory users to remote desktop in?

This is my first time setting up or even using active directory. I set it up, and added the computers(Actually VMs in Hyper V) to the active directory, and if if I use hyper-V to connect to the VMs, I am able to use users from the active directory…
  • 621
  • 1
  • 6
  • 7
7 answers

If a Windows shop moves "everything" to the cloud, does it still need Active Directory?

Taking a spin off of this question: Do I really need MS Active Directory? in a new direction for 2014. Taking into account a basic Windows infrastructure: domain controllers Exchange 2007/2010/2013 Sharepoint SQL File Servers / Print Servers AD…
  • 32,352
  • 26
  • 126
  • 188
2 3
99 100