IT Answers » Active Directory Users and Computers

Integrating host without being a domain administrator

ginbees12 — Wed, 29 Aug 2012 08:21:30 +0000

New Question Created by ginbees12

How do i find which user was the last to log onto a PC in an AD Domain?

Themaineventer — Thu, 02 Feb 2012 21:28:38 +0000

I’m part of an AD domain and i’d like to know which was the last user to log onto the machines in that domain and the date that happened? I’d also like that information for all the machines in each container.

So for example if the London container contains 50 PC’s, can i find out who was the last user to log onto each PC and the date this occurred?

Adding last login and login machine to Active Directory

NewnanIT — Mon, 13 Jun 2011 14:53:35 +0000

Is it possible to add last login time and last login machine to our active directory? How can we do that and what needs to be done?

Setting Active Directory rules

ITKE — Mon, 06 Jun 2011 14:45:34 +0000

Can we set Active Directory rules that say when a user is able to log in to a domain computer and off hours should display a message telling the user they do not have access to the system at this time.

Re-join clients to Windows Server 2003 Enterprise Edition

Dipz — Thu, 21 Apr 2011 08:58:36 +0000

Hello All,

For some reasons, I needed to format and re-install my Windows 2003 Enterprise server. I re-setup it with same fqdn name and other stuffs alongwith AD as they were before.

Now, all clients (WinXP) can connect and use the server resources but everytime they connect to sever, following errors are logged:

Event ID: 5513
The computer COMP1 tried to connect to the server \\SERVER using the trust relationship established by the EXAMPLE domain. However, the computer lost the correct security identifier (SID) when the domain was reconfigured. Reestablish the trust relationship.

Event ID: 2723
The session setup from computer 'COMP1' failed because the security database does not contain a trust account 'COMP1$' referenced by the specified computer.

Event ID: 5805
The session setup from the computer COMP1 failed to authenticate. The following error occurred: 
Access is denied.

I tried to re-join the client machine from client, but by doing so it creates separate user profile folder in ‘Documents and Settings’, and user’s earlier preferences are gone.
Is there any other way to re-join client machines to the domain?

Thanks in advance.

Better way to enroll users in Active Directory

Mgarczynski — Thu, 30 Dec 2010 16:46:56 +0000

I have just reviewed the steps given to me by my Network Admin for enrolling a new user in A/D and I can’t believe it’s this complicated and requires this many steps. The summary steps are : 1. On the A/D server open the A/D users and computers 2. Add the user entering his name, username, password, and group memberships. 3. Create User shared folder on File server with MD \\FileServerusers%username% 4. Select new folder properties, sharing tab. 5. Select Permissions, Everyone, Full Control. 6. Select Security Tab, then advanced button. uncheck Allow interitable permissions and copy option. 7. On Security tab, remove domain user and everyone. add the %username% with full control. 8. Select Advanced button, Owner tab and give ownership to Administrator Profile. 9. Log onto a Terminal Server, which creates Profile folder, My Documents, and other application folders. 10. Return to File Server, Select User Shared Folder Properties, Security tab, Advanced button, Ownership Tab, then take give ownership to Administrator as the ownership of the share and sub folders transferred to the user. We are running Win Server 2008 R2 A/D and Win Server 2003 file server. We are a small company with 250 users. I can’t believe it’s this difficult to create a profile or that larger companies have to spend this much time creating profiles. Any ideas or suggetions are appreciated.

Active Directory site with Child Domain

JimmyIT — Wed, 15 Dec 2010 16:03:10 +0000

I have 3 AD servers, one forest, one tree, one site My main AD server holds all of the FSMO roles.Until now, there hasn’t been a need to have any sort of sync or network connection between our office and any of our other offices.
we’ve been asked to support their network, possibly

long-term. They currently use OD, and I’m planning on migrating all of the users and computers into a new AD server, that I will be installing.

Once we realize the benefits that this will provide us, I can see me

being asked to do the same things to at least our other US offices. Our current domain is city.company.com, though we’ve been

slowly moving to just company.com. I think the most logical way to

name the sites moving forward is city.company.com.

Should I consider creating a parent child relationship, or just go

with trusts?

Setting up a message once users login to their Active Directory workstations

TeachMeIT — Mon, 29 Nov 2010 18:19:07 +0000

Question Edited by Serena3

Precautions in re-installing the Active Directory Users and Computers

Amardeep1981 — Wed, 03 Nov 2010 08:27:20 +0000

What are the precautions to be used while re-installing the Active Directory? Please suggest about how to back up the Active Directory Users and Computers

When i browse my active directory i don’t see any caption except the “user”

Amardeep1981 — Wed, 03 Nov 2010 08:01:09 +0000

When i browse my active directory i don’t see any caption except the “user”