Recently I was doing some testing with a new Exchange 2010 Receive Connector and wanted a method to check how many messages it was processing. I came up with the following Powershell snippet that seems to work well. $i = 0 do { $now = get-date (Get-MessageTrackingLog -ResultSize unlimited -Start “11/10/2012 3:00PM” -End $now -Server… Read More »
It is sometimes helpful to be able to search for objects in AD by their creation date. The whenCreated attribute is useful for this as it is a replicated attribute (i.e. is consistent across all DCs). The challenge for using whenCreated in LDAP filters is the syntax. The attribute uses the GeneralizedTime syntax to represent… Read More »
Quest Software make it hard to love them sometimes. When they made Quest Quick Connect Express for Active Directory available at no cost it was a real boon for anyone wanting to synchronise objects from AD to AD (or AD LDS instances). In particular it offered a great free method of achieving GAL Sync between… Read More »
After an absence of a couple of years, the Wellington Windows Infrastructure User Group has been brought back to life! If you’re in Wellington on Wednesday 4th July, come along and watch me and Daniel Bowbyes presenting on some Windows Server 2012 goodness. http://www.mscommunities.co.nz/Events/Wellington-Windows-Infrastructure-User-Group—Win.aspx
For a number of years now I have been using OldCmp to find and remove inactive user and computer accounts. The other day I thought I would have a crack at using the AD Powershell cmdlets to at least do the finding part. It wasn’t as difficult as I thought. Here’s an example looking for enabled… Read More »
I’ve had the script shown below for quite a while, but as I recently tested it successfully against Windows Server 2012 AD (Release Candidate), I thought I would share it with the community. Note that I have only tested it with single domain forests. Import-Module activedirectory [string] $menu = @’ Active Directory FSMO Role Holder… Read More »
Recently, I have been working in an Windows Server 2008 R2 AD environment that has a number of RODCs in branch offices. The environment uses DFSR (i.e. not FRS) for SYSVOL replication an I wondered whether I could simply remove the connection objects named “RODC Connection (FRS)”. To me, the use of “FRS” in… Read More »
If you are in a cross-forest mailbox migration scenario and use Exchange message classifications, this script might be useful to you. If you plan to have the same message classifications in the target Exchange Organisation then you will want the classification IDs to match. Without this, there is potential for the classification on migrated mail… Read More »
Here’s a handy Powershell script to check for duplicate attribute values on AD objects. Why is this useful? Well, you might have provisioning systems that assign unique values (e.g. employeeID) to AD objects. Things can start to go wrong if it turns out that more than one object has been assigned the same attribute value. … Read More »
Here’s a Powershell script I wrote to delegate permissions to a service account to manage user objects within a number of OUs. The script takes as input a file containing the distinguished names (DNs) of the OUs. The approach should be reasonably obvious from the comments in the script. The only complexity comes from having… Read More »