Home / server / Questions / 78417
Accepted
webwesen
Asked: 2009-10-27 10:18:54 +0800 CST

Active Directory : AdExplorer and LDAP browsers

  • 772

I can access my corp AD with SysInternals' "AdExplorer" with no problems. however, when I try to use generic LDAP browser (ldp.exe in my example) to access the same AD directory I can't get the required protocol/auth method. I think I have tried them all.

what protocol/settings does AdExplorer use by default?

active-directory

3 Answers

  1. Best Answer

    I'm pretty sure it uses Kerberos/NTLM.

    Make sure you're not only connecting to AD with LDP, but that you're also binding (ie- authenticating). It's a 2-step process with LDP.

    1. Connection menu -> Connect. Enter the DC name (or domain name) and LDAP port.
    2. Connection menu -> Bind. Enter your authentication.

    Once you do that you should be able to perform other functions using LDP.

    • 5

  2. In LDP.EXE, after you do Connection->Connect, then do Connection->Bind, then if you have the "Domain" checkbox checked, leave the rest blank and it will authenticate with your current credentials.

    • 2

  3. When using an LDAP browser, you usually need to bind with your full DN, which is often not obvious from the MMC.

    If you are on 2008, the ADUC MMC snapin has an option Advanced View, that can be enabled from a menu, and then when you look at an object, (not via a Find alas, only via a tree browse, which sucks!) there is a new tab called Attribute Editor.

    There is an attribute Distinguished name that has the full DN you need to bind with.

    • 1