I came across an anomaly with the Exchange 2007 Export-Mailbox cmdlet at a customer site recently. It created a major inconvenience for some bulk mailbox exports, so I thought I would share it here. Basically, I was able to generate two different search results depending on whether or not I specified a PST file as… Read More »
Good books continue to deliver value long after the publication date. Here’s an example of how they helped repair a broken bed support recently. (with apologies to Gil Kirkpatrick, whose Active Directory Programming book has been a huge help to me over the last 10 years). PS. Details of how exactly the bed was broken are… Read More »
The objectGUID attribute is a little tricky to work with, especially if you want to use it as part of an LDAP filter. This is because the value in stored within the directory as an octet string – essentially an array of one-byte characters. This syntax is not especially user-friendly, which is why it is… Read More »
As promised, here are the Powershell data files from my Teched NZ 2011 demos. I’ve also included the FSMO role mover script. te_2011.zip Let me know if you have any questions. Enjoy!
When preparing for a migration of AD objects from one forest to another it is useful to know if any of the names are going to conflict. There are, as you probably know, a number of different naming attributes in AD, but the one most likely to cause problems in the event of a conflict is sAMAccountName. … Read More »
Something I often recommend to my customers is keep the membership of the Enterprise Admins and Schema Admins groups empty and only populate them (temporarily) when required. The privileges assigned to these groups are obviously high and removing the members reduces the potential for costly mistakes and/or compromise. Here’s a quick Powershell snippet that will… Read More »
Many organisations choose to rename the Built-in Administrator account for the domain for security reasons. Whether or not renaming the account provides any real protection is the matter of some debate. What is clear is that any hacker worth his or her salt is not going to be fooled by the rename, because the account… Read More »
Here’s a little WMI script I threw together the other day to help someone out. The requirement was to set the display name (label) of a network adapter based on its hardware location. Let’s say we have a NIC with the display name “Local Area Connection” and you want to change it to “MyNIC”, but… Read More »
If you’re looking for a Global Address List synchronisation solution for Exchange that simply uses Powershell, look no further than this excellent script from fellow MVP Carol Wapshere. http://www.wapshere.com/missmiis/a-galsync-powershell-script The script doesn’t leverage the DirSync control (and hence doesn’t use deltas), which means that it isn’t perhaps as efficient as some of the full-blown solutions… Read More »
I’ve been running dual boot Windows 7 and Windows Server 2008 R2 on my laptop for a little while now. I use Windows 2008 R2 for running Hyper-V guests for testing and demo purposes. For some time I’d been running Microsoft Security Essentials on the Windows 7 partition, but without any Anti-Malware software on the… Read More »