12 votes

Map Active Directory Custom Properties with Office365

You cannot change the mappings to AD or create new mappings in SharePoint Online. SharePoint Online follows the same default set of mapped AD attributes that on-prem SharePoint uses: https://technet....
user avatar
  • 199
7 votes

Users added to AD group not granted access in SharePoint

Late answer but, The User Profile is not responsible in this case. SharePoint recognizes AD security groups and attaching permissions to these groups will cause the permissions to be granted to the ...
user avatar
  • 1,699
7 votes

SharePoint 2013 Permission for AD Group not working

On your site, navigate to Site Settings > Site Permissions In the ribbon, find and click "Check Permissions". The return will show how the user have access to your site.
user avatar
  • 25.3k
6 votes
Accepted

"Sorry, this site hasn't been shared with you." if using AD Security Groups directly

Have you waited 24 hours since the user last logged on or was added to the AD-group? The "problem" here is possible the life-time of the users Claims token, which by default is set to 24 hours. This ...
user avatar
6 votes
Accepted

Powershell script to get list of AD groups used from site collections in SharePoint 2010

You can use below snippet Get-SPUser -Web http://server/sites/yoursite | Where { $_.IsDomainGroup } AD group is treated as a special user. So this can be find using the filter IsDomainGroup Update ...
user avatar
  • 28.2k
6 votes

SharePoint Navigation Audience Targeting Not Working With AD Group

I ended up contacting Microsoft and was able to get this resolved. We made a few changes so I'm not 100% sure which step fixed it but I have an idea. For starters, it's worth mentioning we used to run ...
user avatar
  • 201
6 votes
Accepted

Restrict SharePoint access for 1 ActiveDirectory group

In Central Admin, Web application management, highlight the web application you'd like to restrict for a group. Select User Policy from the ribbon and type the group name and select "Deny All". Click ...
user avatar
  • 25.3k
5 votes

Nested AD Groups not propagating permissions

If your AD group is a security group and you are using SharePoint 2013, the way that AD Groups work are a little different. Each time a user logs into to SharePoint, they receive a token that is their ...
user avatar
  • 12.2k
5 votes
Accepted

User Profile Synchronization in SharePoint 2013

It depend upon your requirement. If you don't want write back to Active Directory just import from AD then SharePoint AD Import if your Option. you will get these Key benifits with ti. no requirement ...
user avatar
  • 56.6k
5 votes
Accepted

Some AD users do not have user profiles

You can edit the User Profile Service Synchronization Connection to Active Directory. Central Admin --> Manage Service Applications --> User Profile Service --> Configure Synchronization ...
user avatar
5 votes

How to use Active Directory groups with workflows?

You have to include the AD Groups in the user profile sync connection. If your AD Groups are not sync'd with the UPS, then it won't be possible. Make sure the UPS Sync connection includes the ...
user avatar
  • 12.2k
4 votes
Accepted

On website AD login, how to remind user to change his AD password which is due for expiry?

there is a little script on TechNet that solves this issue! no need for webparts.... webparts bring in other complications like when they are fine if you have a public open page that everyone first ...
user avatar
  • 17.8k
4 votes
Accepted

What permission is required to be able to access and modify AD user properties?

This is a little odd, but I'll try to answer the way I interpret your question. I'm guessing you want to change Active Directory user properties using SharePoint. In order to do this, you should have ...
user avatar
  • 25.3k
4 votes
Accepted

How to add AD Group to SharePoint Group using Powershell

$SiteCollection = "http://site/sitecollection" $ADGroupName = "domain\adgroup" $SPGroupName = "My Test Group A1" $SPGroupDescription = "Test Group A1’s Description" $SPGroupPermission = "Read" #Start ...
user avatar
4 votes

If AD group gets a rename will SP automaticly understand its same group just different name?

Either you rename the AD group at AD or Migrate the ad groups from the different domains, names of the AD groups in SharePoint won't change. Interestingly, they will continue to work as they always ...
user avatar
  • 56.6k
4 votes
Accepted

Disabled Users in SharePoint 2013 - Best practices

If the users have already disabled from Active directory and you need to exclude them in SharePoint , you should do the following Centeral Administration > Application Management > Mange Service ...
user avatar
4 votes

Difference between service accounts and managed accounts

Service Accounts accounts used within sharepoint to run the services, app pools, cache etc are called services accounts. These of domain accounts created within active directory. Like farm admin ...
user avatar
  • 56.6k
4 votes
Accepted

Sharepoint Online O365 best practice

Yes there is. You should turn your browser to FastTrack which does exactly what your asking for - all in one place: https://fasttrack.microsoft.com/office If you have more that 150 users, Fast Track ...
user avatar
  • 25.3k
4 votes
Accepted

How to set permission to all AD users in Shareoint 2013

If you only have one Site Collection you want to share, then in the Visitor group (with read permission only) add the user Everyone which is equivalent to NT Authoruty\Authenticated Users. But if you ...
user avatar
  • 25.3k
4 votes
Accepted

Using Active Directory groups instead of SP groups

The cons is obviously that you won't be able to add users to a group in SharePoint, and you have to manage AD-groups instead. If you already have 10'000 SharePoint groups in your environment, you may ...
user avatar
  • 25.3k
4 votes
Accepted

Migrate MOSS 2007 to SharePoint 2013 on different AD environment

To migrate from SharePoint 2007 to 2013 without using third party tools, you'll need to go via an intermediate SharePoint 2010 farm. You should be able to build one on a trial license however for the ...
user avatar
  • 1,885
4 votes
Accepted

Nested AD group is not able to get permissions on SharePoint 2013

Nested AD Groups are not recommended with SharePoint and can lead to the results you're seeing. Unnest the groups [with SharePoint].
user avatar
  • 28.8k
3 votes
Accepted

Question on AD Groups and Sharepoint Groups

Members of AD groups cannot be viewed by SharePoint (without code). Therefore, when you check permissions, members of the group will show as having no rights. Here is an article discussing this: ...
user avatar
  • 5,690
3 votes

Can Active Directory Upgrade lead to problems with SharePoint?

It's not supported to install Moss 2007 on Windows Server 2012, but you might be able to link them as stated on MSDN forum in this post e.g. domain controller on another server if that helps. ...
user avatar
3 votes

FBA and AD Authentication can work together?

To expand on my comment, check out these links How to: Expose a SharePoint Application to the Extranet and Use Forms-Based Authentication AAMs *Explained : Redux (and Presentation) The first ...
user avatar
  • 479
3 votes

Importing AD Users in to SharePoint online

If you have an enterprise-level “E Plan” subscription, you can use Active Directory Synchronization. This lets you use your existing Active Directory Domain Services (AD DS) infrastructure to grant ...
user avatar
  • 7,855
3 votes
Accepted

Sharepoint Organization Chart / Browser

There isn't a way to limit the organizational chart web part itself. It will display everyone who has a profile in the User Profile service application. If a user doesn't have a manager or any ...
user avatar
  • 11.9k
3 votes
Accepted

Sharepoint: are AD-bound Person columns impractical for common use?

It sounds like you may have been misled on how the user objects work in SharePoint. Through a variety of methods (explicitly giving a user permissions to any object, selecting then in any People ...
user avatar
3 votes

People picker: Error - The user does not exist or is not unique

same error and similar issue, its for 2010 but the solutions should still work! The error lie's within active directory user, as other users from the same or other domains work. saying this, there ...
user avatar
  • 17.8k

Only top scored, non community-wiki answers of a minimum length are eligible