A Drink of Technology for the Thirsty Mind
Here is a quick PowerShell script to help you query the last logon time for all of your users across all of your domain controllers. It will also save the output to a .csv file specified in the $exportFilePath string. I was surprised not to find many examples of this across the web already. Either not many people have multiple […]
Read moreWith Windows 2003 nearing end-of-life, it is becoming more imperative to upgrade to a newer operating system. For many IT admins, this is a great opportunity to start upgrading infrastructures to Windows 2012 or Windows 2012R2. Since DCPromo was depreciated in Windows Server 2012, the following article serves as a step-by-step guide to creating a Windows 2012R2 domain controller and […]
Read moreOnce a Windows 2012 or Windows 2012R2 has had the Active Directory Domain Services role installed, the domain controller must be promoted to a domain controller. This article outlines the steps needed to add a domain controller to an existing environment. How to Promote a Windows 2012R2 Domain Controller Post installation of the role, the option to promote a […]
Read moreHow to Transfer FSMO Roles To transfer FSMO roles via the Windows GUI, you will need access to the following three Active Directory snap-ins: Active Directory Schema (Schema Master Role) Note: The snap-in is not enabled by default. Instructions provided below. Active Directory Domains and Trusts (Domain Naming Master Role) Active Directory Users and Computers (RID, PDC and Infrastructure Roles) Enabling Active […]
Read moreOpen PowerShell as Admin import system modules or Import-modules activedirectory Command: Get-ADUser -Identity cduran -Properties memberof | Select-Object -ExpandProperty memberof | Add-ADGroupMember -Members cdurantest
Read moreI’ve often had a need for some users for various test purposes, and want a script to quickly create these users. Create Organizatiol Unit (OU) In order to use the cmdlets needed you need Access to a Domain Controller or have RSAT (opens a Google search) installed on your Workstation and use import-module *active* You can skip importing the module if […]
Read moreWe are going to give access to a Group of people to RDP to Workstations and have local administrators rights. In order for RDP to work we also need to open firewall. While reading you might want to consider to split up this (monolithic) GPO and single Security Group into 2 Security Groups and 3 smaller GPOs : (1) Local Admin […]
Read moreIf you accidently deleted a user or computer object you can restore it. Logon to a Domain Controller Open Active Directory Administrative Center Click on Domain (local) > Deleted Objects Find the object you are looking for through the Search/filter bat at the top Right click on Object and Restore
Read moreIf you have the need to export a user list from an Active Directory group along with the user’s email address, run the following command in PowerShell as an administrator. If your AD has the e-mail attribute filed out: Powershell Get-ADGroupMember -Identity “groupname” -Recursive | Get-ADUser -Properties Mail | Select-Object Name,Mail | Export-CSV -Path C:\file.csv -NoTypeInformation Example: If not you […]
Read moreOpen PowerShell with administrator privileges and run: Get-ADPrincipalGroupMembership username | select name name —- Domain Users Domain Computers Workstation Admins Company Users Company Developers AutomatedProcessingTeam Example:
Read more