In a migration scenario it is sometimes useful to have a security and/or distribution Active Directory group in the target domain where the membership is comprised of migrated user objects. Here’s a Powershell 2.0 script that I put together that populates the membership of a group based on a specific sIDHistory value. It can be run… Read More »
Some time ago I blogged about the Acctinfo2.dll tool and how unfortunate it was that a 64-bit version was not available. Well, the good news is that you can now download a 64-bit version from here: Acctinfo2_64bit.zip I have tested the DLL on both Windows Server 2008 and Windows Server 2008 R2 and it seems… Read More »
Sometimes it’s useful to pre-create computer objects in the correct OU before joining them to the domain. This way, you know that they will immediately pick up whatever Group Policies have been assigned to the OU. Of course, you can create the computer objects in AD manually using Active Directory Users and Computers (dsa.msc) or… Read More »
***This article has been superseded by a more recent one on the same topic. Click here for details *** It is sometimes useful to have the ability to populate group membership based on the OU in which the prospective members are located. A good example of where this might be useful is with Fine-Grained Password… Read More »
If you’re creating contact objects in Active Directory the Exchange cmdlets New-MailContact, Set-MailContact and Set-Contact are usually sufficient. On the other hand I haven’t found a way using these cmdlets to set all the attributes that I might need. For example, the “description” attribute doesn’t appear to feature anywhere. Things have obviously changed with the… Read More »
Windows Server 2008 R2 introduces the ability to revert to an earlier forest or domain functional level. Previous versions of Active Directory did not have this ability and raising the forest or domain function level was, effectively, a one-way operation. I say “effectively” because it is possible to revert, but only through highly disruptive recovery… Read More »
I went to install the AD Management Gateway Service (KB968934) on a Domain Controller running Windows Server 2008 SP2 and I received the error shown below. Installer encountered an error: 0x80070422. The service cannot be started, either because it is disabled or because it has not enabled devices associated with it. The problem was that… Read More »
There seems to be a certain amount of confusion surrounding Domain and Forest functional levels. Microsoft’s own documentation doesn’t always incorporate the latest version information. KB322692 is a case in point. I also often hear the words “Native” and “Mixed” in relation to functional levels involving Windows Server 2003 or 2008, when in fact these terms… Read More »
Earlier this week Nathan Mercer (Technology Advisor for Microsoft) gave me a brief look at the new Powershell Integrated Scripting Environment available with Windows Server 2008 R2. ISE allows you to run commands and write, test, and debug scripts in a Windows GUI. It also has multi-line editing, tab completion, syntax coloring, selective execution and context-sensitive help. The best thing… Read More »
Wow, looking at the site I see that I haven’t been blogging for the past two months. I have a good excuse – I was away for 5 weeks on holiday in Europe. And since then I’ve been catching up with various things and trying to get prepared for a couple of speaking gigs. First… Read More »