Home > Frequently Asked Questions

Frequently Asked Questions

Q: Why am I receiving unknown username and password errors when trying to login?

A: There are multiple issues that can cause a user to get username/password errors. Be sure to verify that the following settings are correct:

Log on to: field is set to UMN.EDU (Kerberos Realm) and your Internet ID entered is all lowercase. If you do not see this option, you will need to contact your department’s Active Directory (AD) administrator to get a copy of the x500 Kerberos Authentication Tool (not required for Vista clients bound to the domain).

Verify that the time on the computer is within 5 minutes of the actual time.

Try changing your Internet password at www.umn.edu/myaccount. Typically X.500 password changes take effect immediately, but can take up to 15 minutes.

Q: Why did I get an error stating that my account is locked out?

A: If more than 7 unsuccessful logon attempts occur in a row, your account will be locked out for 15 minutes. To unlock AD accounts immediately, please call 1-HELP (612-301-4357) and select option 4.

Q: I accidentally deleted or unintentionally modified a file or folder stored on an AD file server, can I recover it myself?

A: Yes, you can restore individual files or entire folders from a previous date by right-clicking on a file or folder and choosing Properties, then click on the Previous Versions tab to choose the version you want to restore or make a copy of. It is recommended that you view the versions before restoring. Contact umnad@umn.edu to restore specific directories and files if you are unsuccessful restoring using this feature.

Q: How do I access Active Directory off campus?

A: If your Windows XP computer is already bound to the domain, check the Enable start before logon option after installing and launching the VPN client under Options > Windows Logon Properties which will allow you to authenticate to the VPN before logging into Windows on wireless or wired networks outside the university. It is also recommended that you use the VPN client for wireless connections on campus to prevent your data from being intercepted.

If your computer is not bound to the domain, you can connect to your shares by first authenticating with the VPN client and then connecting to the UNC path (\\dept.ad.umn.edu\dept$) after your support staff installs the x500 Kerberos Authentication Tool on your computer. When asked to authenticate, use internetid@UMN.EDU (case sensitive) for the username and enter your X.500 password.

If you're using MacOS X, you will also need to connect via the VPN client off campus prior to launching the Macintosh File Services Connection Tool, which can be installed and configured by your department's AD administrator.