tags
active directory
47 entries
20 entries

Active Directory DFS Health Check with PowerShell
One of the critical parts of Active Directory is DFS. It allows you to share same NETLOGON/SYSVOL folders across all Domain Controllers in…

Active Directory Domain Services could not replicate the directory partition – The replication operation encountered a database error
If you ever encounter an error while trying to create a new domain within a forest saying, “The replication operation encountered a databas…

Active Directory Replication Summary to your Email or Microsoft Teams
Active Directory replication is a critical process that ensures the consistent and up-to-date state of directory information across all dom…

Active Directory – How to track down why and where the user account was locked out
I’ve been working with Windows Events for a while now. One of the things I did to help me diagnose problems and reporting on Windows Events…

Active Directory – Move-AD Directory Server Operation Master Role: Access is denied
When working with Active Directory one of the common tasks is to move FSMO roles between servers. Well, maybe not that common but it happen…

Active Directory – The directory service was unable to allocate a relative identifier
I’ve been testing Disaster Recovery scenario restoring Active Directory. One of the servers was restored, and it worked for a moment after…

Azure AD Connect – Synchronizing MAIL field with UserPrincipalName in Azure
Azure AD Connect is an application responsible for synchronizing Active Directory with Azure AD allowing for a natural population of users,…

Azure ADConnect Export Failed – Permission-issue error
During our recent setup of Azure ADConnect for one of our Clients we’ve been getting permission-issue – Insufficient access rights…

Backing up Bitlocker Keys and LAPS passwords from Active Directory
Having a modern, secure infrastructure in 2019 is a requirement. You should implement BitLocker to make sure that in the event of stolen la…

Delegating Active Directory attribute physicalDeliveryOfficeName
Being responsible for Active Directory you’re often tasked with fairly simple task of delegating permissions for user and groups. After…

Finding duplicate DNS entries using PowerShell
Today’s blog post is about Active Directory-integrated DNS and how to find duplicate entries. By duplicate, I mean those where one DNS name…

Finding duplicate DNS records by IP Address using PowerShell
In my earlier blog post, I showed you a way to find duplicate DNS entries using PowerShell, but the focus was on finding duplicate entries…

Finding duplicate SPN with PowerShell
Duplicate SPNs aren’t very common but can happen in any Active Directory as there’s no built-in way that tracks and prevent duplicate SPN’s…

Finding GPOs missing permissions that may prevent GPOs from working correctly
I’ve been in IT for a longer time now. I’ve made my fair share of mistakes and misconfigurations. One of those misconfigurations was removi…

Fixing Active Directory PasswordNotRequired with PowerShell
There was I, deploying PSPasswordExpiryNotifications for one of my Clients when I started getting complaints that some users are not gettin…

Get-ADObject : The server has returned the following error: invalid enumeration context.
In the last weeks, I’m working on a PowerShell module that the main goal is to work on gathering and fixing GPOs. I’ve been testing my modu…

Get-EventsLibrary.ps1 – Monitoring Events PowerShell
This event library (Get-EventsLibrary.ps1) is PowerShell script that parses Security (mostly) logs on Domain Controllers. It has few report…

Getting Active Directory Last Backup Time using PowerShell
I shouldn’t be telling you that, but Active Directory Backup is an essential part of your Active Directory setup. When a backup of Active D…

Getting Bitlocker and LAPS summary report with PowerShell
Having Bitlocker and LAPS in modern Active Directory is a must. But just because you enable GPO and have a process that should say Bitlocke…

Getting Windows 10 build version from Active Directory
Today I saw an article on how to get Windows Version Report from Active Directory and thought that this is a cool idea. Something handy for…