IT Answers » Active Directory Administration

Integrating host without being a domain administrator

ginbees12 — Wed, 29 Aug 2012 08:21:30 +0000

New Question Created by ginbees12

Enabling a Smart card logon to AD using a value in subjectAltName that is not UPN

Advaita — Thu, 11 Aug 2011 21:06:20 +0000

Hello,

In the project I am working on, the client would like to authenticate Smart Cards that have a certificate with a value in subjectAltName that is not a UPN. The value will be an alphanumeric GUID@mydomain.com format. For example: 1891ADDA010@MYFIRM.ORG

How can AD be configured to do a one-to-one mapping based on this value in this X.509 certificate attribute?
From what I have read in all the KB articles AD requires a UPN in the subjectAltName for locating the user. The client is not happy about having to update that certificate with a UPN, as this would be solution specific to AD. Other directories such as eDirectory do not have this requirement.

Has anyone found a way around this restriction for AD and is it MS supported?
Thanks in advance!!

Using Active Directory login to calculate time cards

TeachMeIT — Mon, 08 Aug 2011 13:54:19 +0000

Can we create a simple app that uses AD login and logoff time to calculate users’ time cards? If so how can we do it?

Changing the Users Administrator password in the Active Directory

LeChat — Thu, 28 Jul 2011 23:30:54 +0000

New Answer by jigyasu2010

Adding last login and login machine to Active Directory

NewnanIT — Mon, 13 Jun 2011 14:53:35 +0000

Is it possible to add last login time and last login machine to our active directory? How can we do that and what needs to be done?

Setting Active Directory rules

ITKE — Mon, 06 Jun 2011 14:45:34 +0000

Can we set Active Directory rules that say when a user is able to log in to a domain computer and off hours should display a message telling the user they do not have access to the system at this time.

Mass disable of users via Active Directory by organizational unit

Troubleshooter24 — Thu, 05 May 2011 16:55:26 +0000

Can me mass disable users via active directory by organizational unit? If an entire group left the company at one time we need to disable the whole group’s access. Active directory running 2003 and 2008.

Blocking specific website via Active Directory

NewnanIT — Mon, 11 Apr 2011 15:52:28 +0000

Can I block specific websites on our domain via active directory?

mailbox access via Active Directory Users and Computers

Kellynissanarcelormittal — Tue, 18 Jan 2011 16:19:20 +0000

In order to get access to a subordinate’s calendar, I am told to start by going to the Active Directory Users and Computers tab and to open the Properties window for the user’s mailbox. Where is the Active Directory Users and Computers tab?

Windows Active Directory restoring deleted objects

Aravinda — Mon, 10 Jan 2011 07:20:55 +0000

How can we restore any deleted object that are in Tombstone without using any restore method.