Question & Answer
When my Taskmaster system is set to use ADSI authentication, and I suspect an issue with the call to the Active Directory server, how do I troubleshoot it?
With Active Directory (ADSI) authentication, the Taskmaster Server service must first make a call to the Active Directory server to get a list of groups for the Windows user that is logging in. If the results of that call are in question, a script can be run to make the call and pop up a window with the results.
To test the Active Directory call outside of Taskmaster:
- Copy ADQuery.vbs to a folder on the Taskmaster Server.
- Open a command prompt and navigate to that folder.
- Run the command: cscript ADQuery.vbs
- When prompted, enter the domain and user name for the user being authenticated.
- A window will hold the Active Directory response. If the request cannot be processed, an error will be listed in the command prompt instead.
One thing to be aware of is that when running this script, the request is being made by the currently logged in Windows user. When Taskmaster Server makes the request, it is being made using the identity of the Taskmaster Server service.
This query specifically emulates the ADSI call, but may be useful when troubleshooting LDAP authentication also.
17 June 2018