Quest Software make it hard to love them sometimes. When they made Quest Quick Connect Express for Active Directory available at no cost it was a real boon for anyone wanting to synchronise objects from AD to AD (or AD LDS instances). In particular it offered a great free method of achieving GAL Sync between… Read More »
After an absence of a couple of years, the Wellington Windows Infrastructure User Group has been brought back to life! If you’re in Wellington on Wednesday 4th July, come along and watch me and Daniel Bowbyes presenting on some Windows Server 2012 goodness. http://www.mscommunities.co.nz/Events/Wellington-Windows-Infrastructure-User-Group—Win.aspx
For a number of years now I have been using OldCmp to find and remove inactive user and computer accounts. The other day I thought I would have a crack at using the AD Powershell cmdlets to at least do the finding part. It wasn’t as difficult as I thought. Here’s an example looking for enabled… Read More »
I’ve had the script shown below for quite a while, but as I recently tested it successfully against Windows Server 2012 AD (Release Candidate), I thought I would share it with the community. Note that I have only tested it with single domain forests. Import-Module activedirectory [string] $menu = @’ Active Directory FSMO Role Holder… Read More »
Recently, I have been working in an Windows Server 2008 R2 AD environment that has a number of RODCs in branch offices. The environment uses DFSR (i.e. not FRS) for SYSVOL replication an I wondered whether I could simply remove the connection objects named “RODC Connection (FRS)”. To me, the use of “FRS” in… Read More »
If you are in a cross-forest mailbox migration scenario and use Exchange message classifications, this script might be useful to you. If you plan to have the same message classifications in the target Exchange Organisation then you will want the classification IDs to match. Without this, there is potential for the classification on migrated mail… Read More »
Here’s a handy Powershell script to check for duplicate attribute values on AD objects. Why is this useful? Well, you might have provisioning systems that assign unique values (e.g. employeeID) to AD objects. Things can start to go wrong if it turns out that more than one object has been assigned the same attribute value. … Read More »
Here’s a Powershell script I wrote to delegate permissions to a service account to manage user objects within a number of OUs. The script takes as input a file containing the distinguished names (DNs) of the OUs. The approach should be reasonably obvious from the comments in the script. The only complexity comes from having… Read More »
The other day I was doing some troubleshooting on a DAG member in a remote site. I needed to get a picture of the copy and replay queues for the server over a period of time. To do this I wrote a small script to poll the queues at 60 second intervals over a 24 hour period. … Read More »
I’ve been working with the Windows Server 2008 R2 Active Directory cmdlets quite a bit recently. If you’ve come from a background of using ADFIND, the cmdlets take a bit of getting used, but for me it’s definitely been worth the time spent. One thing that frustrates me a little is that the names… Read More »