Recently, I have been working in an Windows Server 2008 R2 AD environment that has a number of RODCs in branch offices. The environment uses DFSR (i.e. not FRS) for SYSVOL replication an I wondered whether I could simply remove the connection objects named “RODC Connection (FRS)”. To me, the use of “FRS” in… Read More: The “RODC Connection (FRS)” misnomer »
I’ve been working with the Windows Server 2008 R2 Active Directory cmdlets quite a bit recently. If you’ve come from a background of using ADFIND, the cmdlets take a bit of getting used, but for me it’s definitely been worth the time spent. One thing that frustrates me a little is that the names… Read More: What’s in a name? »
The objectGUID attribute is a little tricky to work with, especially if you want to use it as part of an LDAP filter. This is because the value in stored within the directory as an octet string – essentially an array of one-byte characters. This syntax is not especially user-friendly, which is why it is… Read More: Powershell script to find objects using objectGUID value »
As promised, here are the Powershell data files from my Teched NZ 2011 demos. I’ve also included the FSMO role mover script. te_2011.zip Let me know if you have any questions. Enjoy!
When preparing for a migration of AD objects from one forest to another it is useful to know if any of the names are going to conflict. There are, as you probably know, a number of different naming attributes in AD, but the one most likely to cause problems in the event of a conflict is sAMAccountName. … Read More: How to find duplicate sAMAccountNames between two forests »
Something I often recommend to my customers is keep the membership of the Enterprise Admins and Schema Admins groups empty and only populate them (temporarily) when required. The privileges assigned to these groups are obviously high and removing the members reduces the potential for costly mistakes and/or compromise. Here’s a quick Powershell snippet that will… Read More: How to clear group membership with Powershell »
Many organisations choose to rename the Built-in Administrator account for the domain for security reasons. Whether or not renaming the account provides any real protection is the matter of some debate. What is clear is that any hacker worth his or her salt is not going to be fooled by the rename, because the account… Read More: How to find the renamed domain Built-In Administrator account with… »
Here’s a little WMI script I threw together the other day to help someone out. The requirement was to set the display name (label) of a network adapter based on its hardware location. Let’s say we have a NIC with the display name “Local Area Connection” and you want to change it to “MyNIC”, but… Read More: Powershell script to change NIC label based on location »
I’ve been running dual boot Windows 7 and Windows Server 2008 R2 on my laptop for a little while now. I use Windows 2008 R2 for running Hyper-V guests for testing and demo purposes. For some time I’d been running Microsoft Security Essentials on the Windows 7 partition, but without any Anti-Malware software on the… Read More: Kudos to Comodo »
I came across a problem the other day when using version 6.5.8211.0 of Microsoft Exchange MAPI and CDO 1.2.1 on a server running Good Mobile Messaging. The Good software accesses user mailboxes via the MAPI CDO client. At first the mailbox access was failing horribly with the following errors: 2011-03-11 13:24:33 12:00 ERROR:-2147219707 2011-03-11… Read More: Microsoft Exchange MAPI and CDO 1.2.1 with no Public Folders »