Today’s post is another short one. It’s a Powershell one-liner to find all the Primary SMTP address suffixes in use by the mailboxes in your Exchange Org. In this example I know that my default suffix is “contoso.com”, but I want to find out what others are being used as primary: get-mailbox -ResultSize unlimited | ?… Read More: Find Primary Address in use within Exchange »
Today’s blog entry is short and sweet. You want to quickly find out whether the AD Recycle Bin feature is enabled or not. There are a few ways to do this, but this is a quick Powershell method. # Is the AD Recycle Bin enabled in my forest? Import-Module ActiveDirectory If ((Get-ADOptionalFeature -Identity “Recycle… Read More: Is the AD Recycle Bin enabled in my forest? »
I quite regularly come across Active Directory environments where users have been mistakenly added to groups protected by the AdminSDHolder and subsequently removed when the mistake has been realised. This process creates “orphans” because the AdminSDHolder process doesn’t tidy up after itself. Here’s what happens: User added to group protected by the AdminSDHolder (e.g. Account… Read More: Cleaning up AdminSDHolder orphans »
Back in March 2010 when Powershell and I were on somewhat less friendly terms, I wrote an OU shadow script to populate group membership based on the contents of an OU. Since then, Powershell and I now at least acknowledge eachother when we pass in the corridor and I have updated the script with some… Read More: OU Shadow Script »
Occasionally, I have a need to merge the attributes of one AD user into another. This requirement is typically the result of a migration where some users have had accounts informally created in the target environment in advance of the formal migration process. In other words, a user ends up with two accounts and needs… Read More: Powershell script to merge AD User attributes »
I recently came across an old blog post by fellow MVP Joe Richards. In the post Joe points out that whenChanged is not a replicated attribute, which makes it a poor candidate for accurately determining when an object was last modified. He does however indicate that the whenChanged attribute provides a handy way to report… Read More: Powershell method to find when your Domain Controllers were promoted »
Here’s something I put together to handle bulk certificate requests for submission to an Enterprise CA using certreq.exe. Enjoy! ######################################################### # # Name: Request-Certificates.ps1 # Author: Tony Murray # Version: 1.0 # Date: 4/12/2012 # Comment: PowerShell script to submit certificate # requests in bulk using certreq.exe # ######################################################### # Specify the location of the… Read More: PowerShell script to submit certificate requests in bulk using certreq.exe »
If you’re familiar with LDAP searches you will probably at some point have been frustrated at the inability to exclude objects in a specific Organisational Unit, i.e “Give me all User objects in the domain, except those in the Sales OU”. To workaround the problem you typically need to do some scripting. There are several… Read More: Powershell search for Active Directory objects excluding an OU »
If you come across this error when using Powershell to delete an object, it is most likely because the object has child objects associated with it. The most obvious example is computer objects that have print queue, service connection point, RRAS or various other types of child objects. The workaround is to determine the child… Read More: The directory service can perform the requested operation only on… »
For a number of years now I have been using OldCmp to find and remove inactive user and computer accounts. The other day I thought I would have a crack at using the AD Powershell cmdlets to at least do the finding part. It wasn’t as difficult as I thought. Here’s an example looking for enabled… Read More: Using the AD Powershell cmdlets to find inactive accounts »