Tag: Active Directory

How to implement Interactive Authentication using MSAL dotNET

Posted on Raphael Gab-Momoh By Raphael Gab-Momoh 5 Comments on How to implement Interactive Authentication using MSAL dotNET
How to implement Interactive Authentication using MSAL dotNET

MSAL is the acronym for Microsoft Authentication Library; according to Microsoft, (MSAL) can provide secure access to Microsoft Graph, other Microsoft APIs, third-party web APIs, or your web API. Furthermore, MSAL supports many application architectures and platforms, including .NET, JavaScript, Java, Python, Android, and iOS. Microsoft provides a robust identity ecosystem, but applications must be…

Read More “How to implement Interactive Authentication using MSAL dotNET” »

AWS/Azure/OpenShift

Configure logon hours for users in Active Directory

Posted on Temitope Odemo By Temitope Odemo No Comments on Configure logon hours for users in Active Directory
Configure logon hours for users in Active Directory

In this article, I will show you how to Perform the Time of day restriction: How to Configure logon hours for users in Active Directory. Please see how to Resolve Account restrictions are preventing this user from signing in: User Account Password has expired. There are times you may want to restrict users’ access to…

Read More “Configure logon hours for users in Active Directory” »

Windows Server

How to set an account expiration date in Active Directory

Posted on Temitope Odemo By Temitope Odemo No Comments on How to set an account expiration date in Active Directory
How to set an account expiration date in Active Directory

The account expiration date is used for access control purposes. Let us assume an organization temporarily create an AD account for someone that needed access to one of your servers or a workstation, there is every possibility that you can forget to disable the account when the person completes his task. This can open the way…

Read More “How to set an account expiration date in Active Directory” »

Windows Server

Create and Delete AD DS Partition with NTDSUTIL.EXE

Posted on Imoh Etuk By Imoh Etuk No Comments on Create and Delete AD DS Partition with NTDSUTIL.EXE
Create and Delete AD DS Partition with NTDSUTIL.EXE

AD DS partition Windows Server serves as a platform for building and deploying infrastructure within the corporate environment. This infrastructure deployment usually consists of applications, networks, user accounts, and web services. In this article, we shall learn Create and Delete AD DS Partition with NTDSUTIL.EXE. Ntdsutil.exe is a command-line tool that provides management facilities for…

Read More “Create and Delete AD DS Partition with NTDSUTIL.EXE” »

Windows Server

Install and configure Active Directory Domain Services on Windows Server

Posted on Imoh Etuk By Imoh Etuk No Comments on Install and configure Active Directory Domain Services on Windows Server
Install and configure Active Directory Domain Services on Windows Server

In this write-up, I will take you through the step-by-step guide on how to install and configure Active Directory Domain Services on Windows Server 2022. Before we delve into the hands-on session of this write-up, let’s take a look at some of the amazing new features that Windows Server 2022 brings. A quick peep into…

Read More “Install and configure Active Directory Domain Services on Windows Server” »

Windows, Windows Server

Allow RDP access for non administrators: Add User to Remote Desktop Users Group in Active Directory

Posted on IT Expert By IT Expert 3 Comments on Allow RDP access for non administrators: Add User to Remote Desktop Users Group in Active Directory
Allow RDP access for non administrators: Add User to Remote Desktop Users Group in Active Directory

Remote Desktop is a feature that you can use to connect to devices remotely. With this feature, you can control other devices as if you had local access. RDP is designed to support different types of network topologies and multiple LAN protocols. In this article, we’ll show how to Allow RDP access for non administrators:…

Read More “Allow RDP access for non administrators: Add User to Remote Desktop Users Group in Active Directory” »

Windows Server

Service Principal Name: How to add or reset and delete SPNs

Posted on IT Expert By IT Expert 2 Comments on Service Principal Name: How to add or reset and delete SPNs
Service Principal Name: How to add or reset and delete SPNs

In this article, we shall discuss the steps resolving “Service Principal Name: How to add or reset and delete SPNs”. A service principal name (SPN) is a unique identifier of a service instance. SPNs are used by Kerberos authentication to associate a service instance with a service logon account. For example, to enable the MBAM server to…

Read More “Service Principal Name: How to add or reset and delete SPNs” »

Windows

Service and Network Port requirements for Active Directory

Posted on IT Expert By IT Expert 1 Comment on Service and Network Port requirements for Active Directory
Service and Network Port requirements for Active Directory

Active Directory communication involves the following ports and as a system administrator, you must be familiar with some of the following ports already. In this article, we will discuss the Service and Network Port requirements for Active Directory. You may want to see the following related guides: Pass-Through Authentication with on-Premise AD, reasons to deploy AAD, Microsoft Azure Active…

Read More “Service and Network Port requirements for Active Directory” »

Windows

Fix an appropriate resource file could not be found for the file for BitLocker Management

Posted on IT Expert By IT Expert No Comments on Fix an appropriate resource file could not be found for the file for BitLocker Management
Fix an appropriate resource file could not be found for the file for BitLocker Management

In this article, I will walk you through how to “Fix an appropriate resource file could not be found for the file for BitLocker Management: The system can not find the file specified”. The Central Store is a file location that the Group Policy tools check. It consists of a folder structure created in the…

Read More “Fix an appropriate resource file could not be found for the file for BitLocker Management” »

Windows Server

How to configure a service account for Kerberos delegation

Posted on IT Expert By IT Expert 1 Comment on How to configure a service account for Kerberos delegation
How to configure a service account for Kerberos delegation

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Kerberos delegation is to enable an application to access resources hosted on a different server t. For some related content on Active Directory, see the following guides. The sign-in method you are trying to use is not…

Read More “How to configure a service account for Kerberos delegation” »

Windows Server

Restore AD Objects: How to restore deleted user accounts in Active Directory with Microsoft LDP and PowerShell

Posted on IT Expert By IT Expert No Comments on Restore AD Objects: How to restore deleted user accounts in Active Directory with Microsoft LDP and PowerShell
Restore AD Objects: How to restore deleted user accounts in Active Directory with Microsoft LDP and PowerShell

Active Directory (AD) is a widely used directory system, the ability to restore unwanted changes in your AD infrastructure is crucial. When AD objects are deleted, they are placed in the Deleted Objects container (AD recycle bin). There are several methods to restore deleted user accounts, computer accounts, and security groups. These objects are known…

Read More “Restore AD Objects: How to restore deleted user accounts in Active Directory with Microsoft LDP and PowerShell” »

Windows Server

Fix insufficient access rights to perform this operation when trying to enable Active Directory Recycle Bin

Posted on IT Expert By IT Expert No Comments on Fix insufficient access rights to perform this operation when trying to enable Active Directory Recycle Bin
Fix insufficient access rights to perform this operation when trying to enable Active Directory Recycle Bin

In this article, we shall discuss how to fix insufficient access rights to perform this operation when trying to enable Active Directory Recycle Bin. The method involves enabling the AD Recycle Bin to be able to restore deleted user objects with the ADAC. You may also want to visit the following interesting articles. What are the…

Read More “Fix insufficient access rights to perform this operation when trying to enable Active Directory Recycle Bin” »

Windows Server