IP address lookup of AD domain server

Wanted to find IP address of active domain server, from command prompt type:

nslookup    
set type=all
_ldap._tcp.dc._msdcs.DOMAIN_NAME

From Serverfault

Join Apple OS to Windows domain

To join computer with Apple OS to Windows domain, goto system preferences, user accounts:

Click the Lock to make changes to these settings. Then click the Join button next to Network Account Server

Now click the Open Directory Utility button

You should now be at the Directory Utility; click the Lock to make changes. Then make sure Active Directory is checked, highlight it, and then click the Pencil to edit this setting.

Here you can enter your domain information and computer ID. For this example the domain is hq.test.us and the computer ID is Mac. The computer ID is the computer name that will show up in Active Directory once the Mac is joined to the domain.

Click the arrow to Show Advanced Options. This gives you 3 extra options you can configure. To keep it simple I usually leave these settings default except for the Administrative section. Click the Administrative button and enter the IP address or the FQDN of your domain controller in the Prefer this domain server section. For this example I used the IP address of my domain controller 192.168.1.172. You can also specify groups that are allowed administration privileges.

Now click the Bind button and you will be prompted for credentials. Enter your domain administrator username and password and click OK.

You should see it progress through steps 1-5 as you are authenticated and joined to the domain.

https://www.pluralsight.com/blog/tutorials/join-mac-to-windows-domain

Fixing Trust relationship has failed error - Windows

Have a number of PCs that randomly give the "Trust relationship has failed"  domain error,   to fix without leaving and rejoining domain, use these Powershell commands:

Open PowerShell as administrator. Run this command sequence:
$credential = Get-Credential – (enter domain admin account when prompted)
Reset-ComputerMachinePassword -Server ClosestDomainControllerNameHere

From spiceworks

Open PowerShell as administrator. Run this command sequence:
$credential = Get-Credential – (enter domain admin account when prompted)
Reset-ComputerMachinePassword -Server ClosestDomainControllerNameHere -Credential
$credential

autologin Windows 7 on domain computer

From ITsupportguides


This will allow you to do auto login via a domain or local account.

1. Open the registry editor (regedit)
2. Navigiate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
3. Open the ‘AutoAdminLogon’ key and change it’s value to “1”
4. 
5. Open the ‘DefaultDomainName’ key and set the value to your domain name (or the computers name if using a local account)
6. Open the ‘DefaultUserName’ key and set the value to the user name for the auto logon
7. Create a new STRING (REG_SZ) value called ‘DefaultPassword’ and set the value to the user account password.

changing password for domain account via command line

Our campus IT has blocked change password from Windows (Cntrl-Alt-Del, change password) but you can update it from cmd if you are logged in as the username:

net user username new_password /domain

Details from Windows Commandline

password expiration date: windows domain

Want to get expiration date of a user password on a Windows domain, open command window (CMD in windows search box):



net user /domain [user_ID]



The request will be processed at a domain controller for domain university.edu.

User name                    [user_ID]
Full Name                    Lastn, Firstname
Comment                      Staff
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              9/1/15 12:00:00 AM

Password last set            3/31/14 8:30:49 AM
Password expires             9/27/14 8:30:49 AM
Password changeable          4/1/14 8:30:49 AM
Password required            Yes
User may change password     Yes

Workstations allowed         All
Logon script                 Login.bat
User profile
Home directory               \\lawsfsrva\users\testuser
Last logon                   9/25/14 8:07:45 AM