software:microsoft:windows:activedirectory
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
software:microsoft:windows:activedirectory [2018/05/23 16:20] – [Computer login] superwizard | software:microsoft:windows:activedirectory [2024/03/02 22:28] (current) – [Viewing the active Directory with ADSIEDIT.MSC] superwizard | ||
---|---|---|---|
Line 1: | Line 1: | ||
+ | ====== Active Directory ====== | ||
+ | |||
+ | -------------------------------------------------------------------------------------------------------------------------------------------------\\ | ||
+ | |||
+ | ====== Configure Microsoft Entra hybrid join ====== | ||
+ | |||
+ | <WRAP center round box > | ||
+ | Bringing your devices to Microsoft Entra ID maximizes user productivity through single sign-on (SSO) across your cloud and on-premises resources. You can secure access to your resources with Conditional Access at the same time. | ||
+ | |||
+ | https:// | ||
+ | |||
+ | </ | ||
+ | |||
+ | |||
+ | ====== Viewing the active Directory with ADSIEDIT.MSC ====== | ||
+ | |||
+ | http:// | ||
+ | |||
+ | Active Directory Search Expression = http:// | ||
+ | |||
+ | Also: http:// | ||
+ | |||
+ | ====== List Active Directory Email Addresses ====== | ||
+ | |||
+ | dsquery user -limit 0 | dsget user -ln -fn -email > | ||
+ | |||
+ | ADSIEdit: | ||
+ | |||
+ | http:// | ||
+ | |||
+ | File: ListEmailAddresses.zip | ||
+ | |||
+ | http:// | ||
+ | |||
+ | Control Panel' | ||
+ | |||
+ | http:// | ||
+ | |||
+ | If all you want is the primary SMTP address then the following will do the trick: | ||
+ | |||
+ | http:// | ||
+ | |||
+ | Another Script | ||
+ | |||
+ | http:// | ||
+ | |||
+ | |||
+ | |||
+ | http:// | ||
+ | |||
+ | |||
+ | |||
+ | |||
+ | ====== Server4 Aphelian Connection to Active Directory ====== | ||
+ | |||
+ | Host info | ||
+ | Name: activedirectory | ||
+ | Host: etspowergroup.local | ||
+ | Port: 389 | ||
+ | Version: 3 | ||
+ | Base DN: DC=ETSPowerGroup, | ||
+ | | ||
+ | User Info | ||
+ | User DN: Matthew Jados, | ||
+ | Password: | ||
+ | |||
+ | ====== Mac OS/ | ||
+ | |||
+ | http:// | ||
+ | |||
====== Well Known Security Identifiers ====== | ====== Well Known Security Identifiers ====== | ||
Line 11: | Line 81: | ||
====== Computer login ====== | ====== Computer login ====== | ||
+ | <WRAP center round box > | ||
+ | |||
+ | 2022-04-05 | ||
+ | |||
+ | Deny User or Group to Sign in Locally in Windows 10 | ||
+ | |||
+ | From < | ||
+ | |||
From: https:// | From: https:// | ||
Line 20: | Line 98: | ||
A better way would be to do it in the security policy (secpol.msc) | A better way would be to do it in the security policy (secpol.msc) | ||
- | Security Settings > Local Policies > User Rights Assignments > Allow log on locally. Remove the " | + | Security Settings > Local Policies > User Rights Assignments > **Allow log on locally**.\\ |
+ | Remove the " | ||
+ | add those users you want to allow to log on. | ||
From: https:// | From: https:// | ||
Line 26: | Line 106: | ||
ChristopherO | ChristopherO | ||
Mace | Mace | ||
- | ChristopherO Feb 15, 2012 at 6:54 AM | + | ChristopherO Feb 15, 2012 at 6:54 AM \\ |
- | You could certainly do this in 2003. If you want to be granular, you will need to update the Users group on each computer - remove Domain Users and add in the specific accounts/ | + | You could certainly do this in 2003.\\ |
+ | If you want to be granular, you will need to update the Users group on each computer\\ | ||
+ | - remove Domain Users and add in the specific accounts/ | ||
+ | If it's going to be the same for a large number of computers (ie, users in the Sales group can log into any computer in the Sales department) you can use Restricted Groups in Group Policy - just remember, with Restricted Groups it will remove ALL other users/ | ||
From: https:// | From: https:// | ||
Line 34: | Line 117: | ||
From: http:// | From: http:// | ||
+ | |||
+ | </ | ||
====== Remote Login Active Directory ====== | ====== Remote Login Active Directory ====== |
software/microsoft/windows/activedirectory.1527092402.txt.gz · Last modified: 2018/05/23 16:20 by superwizard