A Drink of Technology for the Thirsty Mind
We all know, people join organizations and leave organizations at regular intervals. And we as System Administrators have to create and manage their user accounts in Active Directory. As a best practice, we all set an expiration date to the user account that is created. But do we delete those accounts if they are no longer in use? Its hard […]
Read moreToday we will find empty groups in Active Directory using Powershell. You all may know that we as System Administrators are required to create groups in the Active Directory for all sorts of purposes and reasons. But over time, do people who request for these groups really utilise them? It is bound to happen that your domain will be filled […]
Read moreHere is a quick PowerShell script to help you query the last logon time for all of your users across all of your domain controllers. It will also save the output to a .csv file specified in the $exportFilePath string. I was surprised not to find many examples of this across the web already. Either not many people have multiple […]
Read moreWith Windows 2003 nearing end-of-life, it is becoming more imperative to upgrade to a newer operating system. For many IT admins, this is a great opportunity to start upgrading infrastructures to Windows 2012 or Windows 2012R2. Since DCPromo was depreciated in Windows Server 2012, the following article serves as a step-by-step guide to creating a Windows 2012R2 domain controller and […]
Read moreOnce a Windows 2012 or Windows 2012R2 has had the Active Directory Domain Services role installed, the domain controller must be promoted to a domain controller. This article outlines the steps needed to add a domain controller to an existing environment. How to Promote a Windows 2012R2 Domain Controller Post installation of the role, the option to promote a […]
Read moreHow to Transfer FSMO Roles To transfer FSMO roles via the Windows GUI, you will need access to the following three Active Directory snap-ins: Active Directory Schema (Schema Master Role) Note: The snap-in is not enabled by default. Instructions provided below. Active Directory Domains and Trusts (Domain Naming Master Role) Active Directory Users and Computers (RID, PDC and Infrastructure Roles) Enabling Active […]
Read moreOpen PowerShell as Admin import system modules or Import-modules activedirectory Command: Get-ADUser -Identity cduran -Properties memberof | Select-Object -ExpandProperty memberof | Add-ADGroupMember -Members cdurantest
Read moreI’ve often had a need for some users for various test purposes, and want a script to quickly create these users. Create Organizatiol Unit (OU) In order to use the cmdlets needed you need Access to a Domain Controller or have RSAT (opens a Google search) installed on your Workstation and use import-module *active* You can skip importing the module if […]
Read moreWe are going to give access to a Group of people to RDP to Workstations and have local administrators rights. In order for RDP to work we also need to open firewall. While reading you might want to consider to split up this (monolithic) GPO and single Security Group into 2 Security Groups and 3 smaller GPOs : (1) Local Admin […]
Read moreIf you accidently deleted a user or computer object you can restore it. Logon to a Domain Controller Open Active Directory Administrative Center Click on Domain (local) > Deleted Objects Find the object you are looking for through the Search/filter bat at the top Right click on Object and Restore
Read more