The other day I was doing some troubleshooting on a DAG member in a remote site. I needed to get a picture of the copy and replay queues for the server over a period of time. To do this I wrote a small script to poll the queues at 60 second intervals over a 24 hour period. … Read More »
I’ve been working with the Windows Server 2008 R2 Active Directory cmdlets quite a bit recently. If you’ve come from a background of using ADFIND, the cmdlets take a bit of getting used, but for me it’s definitely been worth the time spent. One thing that frustrates me a little is that the names… Read More »
I came across an anomaly with the Exchange 2007 Export-Mailbox cmdlet at a customer site recently. It created a major inconvenience for some bulk mailbox exports, so I thought I would share it here. Basically, I was able to generate two different search results depending on whether or not I specified a PST file as… Read More »
Good books continue to deliver value long after the publication date. Here’s an example of how they helped repair a broken bed support recently. (with apologies to Gil Kirkpatrick, whose Active Directory Programming book has been a huge help to me over the last 10 years). PS. Details of how exactly the bed was broken are… Read More »
The objectGUID attribute is a little tricky to work with, especially if you want to use it as part of an LDAP filter. This is because the value in stored within the directory as an octet string – essentially an array of one-byte characters. This syntax is not especially user-friendly, which is why it is… Read More »
As promised, here are the Powershell data files from my Teched NZ 2011 demos. I’ve also included the FSMO role mover script. te_2011.zip Let me know if you have any questions. Enjoy!
When preparing for a migration of AD objects from one forest to another it is useful to know if any of the names are going to conflict. There are, as you probably know, a number of different naming attributes in AD, but the one most likely to cause problems in the event of a conflict is sAMAccountName. … Read More »
Something I often recommend to my customers is keep the membership of the Enterprise Admins and Schema Admins groups empty and only populate them (temporarily) when required. The privileges assigned to these groups are obviously high and removing the members reduces the potential for costly mistakes and/or compromise. Here’s a quick Powershell snippet that will… Read More »
Many organisations choose to rename the Built-in Administrator account for the domain for security reasons. Whether or not renaming the account provides any real protection is the matter of some debate. What is clear is that any hacker worth his or her salt is not going to be fooled by the rename, because the account… Read More »
Here’s a little WMI script I threw together the other day to help someone out. The requirement was to set the display name (label) of a network adapter based on its hardware location. Let’s say we have a NIC with the display name “Local Area Connection” and you want to change it to “MyNIC”, but… Read More »