Browse by Tags

Tagged Content List
  • Wiki Page: Active Directory: Get-ADUser Default and Extended Properties

    The PowerShell Get-ADUser AD Module cmdlet supports the default and extended properties in the following table. Many can be assigned values with the Set-ADUser cmdlet. In the table, default properties are shown with the property name highlighted in cyan . Extended properties are highlighted in pink...
  • Wiki Page: Active Directory: Active Directory Domain Services (AD DS) Commands and Scripts

    Here are some useful commands and scripts for administering Active Directory. For more information please see Active Directory Domain Services Command Reference . Reference : userAccountControl Table of Contents User Group Computer Site and Subnet Active Directory User Identify...
  • Wiki Page: Active Directory: Requirements For Creating Objects

    Certain requirements must be met when creating objects in Active Directory. These can be user accounts, groups, computers, or other classes of objects. This article documents some of these requirements. Errors will be raised if any of these requirements are not met. You can use this article to troubleshoot...
  • Wiki Page: Time Service Configuration on DC with PDC Emulator FSMO Role

    Table of Contents Scenario How to configure Time service on DC with PDC Emulator Make DC with PDC Emulator to follow its own CMOS Time settings. Configure External Time service on DC holding PDC emulator role Changing the time service configuration on previous DC holding PDC Emulator. ( So that it will...
  • Wiki Page: How to Create Two Way Transitive Trust – Windows Server 2008 R2

    Let’s see how to build a “Two way Transitive Trust“ There are different types of trusts, Am going to explain only about “Two way Transitive Trust“ where both the organizations will have all the permissions over the organizations This will be the Initial Step if your going to do a cross forest migration...
  • Wiki Page: Active Directory: DSQUERY Commands

    DSQUERY Commands to query AD objects:- 1. How to find all members for a particular group. dsget group "<DN of the group>" -members 1a. How to find all groups for a particular member (including nested groups) dsget user "<DN of the user>" -memberof -expand...
  • Wiki Page: LDAP over SSL (LDAPS) Certificate

    Applies to Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 Table of Contents Reasons for Enabling LDAPS Enabling LDAPS for domain controllers using a single-tier CA hierarchy Enabling LDAPS for domain controllers using a multi-tier CA...
  • Wiki Page: Quest Powershell for Active Directory

    Guys, Believe me or not? If yes and you are a MS-Directory Professional try it. Benefits: 1. Where WAN connectivity is very slow you can work through command line. 2. Prevent accident deletion until you put exact deletion command. 3. You can automate you’re your AD environment. 4. Commands...
  • Wiki Page: Active Directory: Glossary

    This is a glossary of terms and acronyms used in Active Directory and related technologies: A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z A ACE Acronym for A ccess C ontrol E ntry. Individual entries in a security descriptor...
  • Wiki Page: Move (Transfering or Seizing) FSMO Roles with AD-Powershell Command to Another Domain Controller

    Table of Contents Actions Required Resolve the "How-To" Troubleshooting Actions Required Resolve the "How-To" References References Overview / Survival Guide Overview / Survival Guide Media Type/Task/Feature 1 References Troubleshooting Actions Required Resolve the "How-To"...
  • Wiki Page: Event IDs when new a user account is created on Active Directory

    Applies to: Windows Server 2008, 2008 R2 and 2012 Requirement: You would like to investigate who has created a new user account on Active Directory. Prerequisite: Auditing has to be configured on Domain controllers, especially, “ Audit account management ” policy must be configured and...
  • Wiki Page: Event IDs when a user account is deleted from Active Directory

    Applies to: Windows Server 2008, 2008 R2 and 2012 Requirement: You would like to investigate who has deleted a user account from Active Directory. Prerequisite: Auditing has to be configured on Domain controllers, especially, “ Audit account management ” policy must be configured and you...
  • Wiki Page: Event ID when a user is added or removed from security-enabled UNIVERSAL group such as Enterprise Admins

    Applies to: Windows Server 2008, 2008 R2 and 2012 Requirement: You would like to investigate who has added or removed a specific Domain User in Enterprise Admins group Prerequisite: Auditing has to be configured on Domain controllers, especially, “ Audit account management ” policy must be...
  • Wiki Page: Event ID when a user is added or removed from security-enabled GLOBAL group such as Domain Admins or Group Policy Creator Owners

    Applies to: Windows Server 2008, 2008 R2 and 2012 Requirement: You would like to investigate who has added or removed a specific Domain User in Domain Admins or Group Policy Creator Owners Prerequisite: Auditing has to be configured on Domain controllers, especially, “ Audit account management...
  • Wiki Page: Event ID when a user is added or removed from security-enabled DOMAIN LOCAL group such as DnsAdmins group

    Applies to: Windows Server 2008, 2008 R2 and 2012 Requirement: You would like to investigate who has added or removed a specific Domain User in DnsAdmins group Prerequisite: Auditing has to be configured on Domain controllers, especially, “ Audit account management ” policy must be configured...
  • Wiki Page: How to Restrict Enterprise Admins From Child Domain

    Applicable To : Windows Server 2003, 2008, 2008 R2 and 2012. Disclaimer : To know how only ! Setup : AD.TESTLAB.COM and PROJECT.AD.TESTLAB.COM Requirement : Restrict Enterprise Admins from Child Domain ? Details: When child domain is introduced, by default Enterprise Admins...
  • Wiki Page: Capacity Planning for Active Directory Domain Services

    This topic is originally written by Ken Brumfield, Senior Premier Field Engineer at Microsoft, and published in the TechNet library at http://technet.microsoft.com/en-us/library/jj651019.aspx . This version on the TechNet Wiki allows users to supplement the content with information based on their own...
  • Wiki Page: NETDOM Commands

    NETDOM Commands to query FSMO role holders. 1. How to query FSMO role holders for a forest ? > netdom query fsmo (query results all FSMO role holders PDC\IM\RID\Schema\Domain Naming Master) 2. How to query FSMO for particular domain ? > netdom query /domain:test.com fsmo ...
  • Wiki Page: Step-by-Step Guide for Setting Up Windows Server 2012 Domain Controller

    Table of Contents Overview INSTALLING AD DS ROLE PROMOTING WINDOWS 2012 SERVER TO DOMAIN CONTROLLER Overview In Windows Server 2012, dcpromo has been deprecated . In order to make the windows server 2012 domain controller we will install ADDS (Active Directory Domain Services...
  • Wiki Page: Create a New Server 2012 AD Forest Using Powershell

    Here are some simple step by step instructions for creating a new Active Directory Forest using Server 2012 and Windows PowerShell. 1. Launch powershell from the server you are setting up as your first DC in the new forest 2. Install the windows roles and features for Active Directory...
  • Wiki Page: Active Directory: Get-ADGroup Default and Extended Properties

    The PowerShell Get-ADGroup AD Module cmdlet supports the default and extended properties in the following table. Many can be assigned values with the Set-ADGroup cmdlet. In the table, default properties are shown with the property name highlighted in cyan . Extended properties are highlighted in ...
  • Wiki Page: Active Directory: Get-ADObject Default and Extended Properties

    The PowerShell Get-ADObject AD Module cmdlet supports the default and extended properties in the following table. Many can be assigned values with the Set-ADObject cmdlet. In the table, default properties are shown with the property name highlighted in cyan . Extended properties are highlighted in...
  • Wiki Page: Active Directory: Get-ADComputer Default and Extended Properties

    The PowerShell Get-ADComputer AD Module cmdlet supports the default and extended properties in the following table. Many can be assigned values with the Set-ADComputer cmdlet. In the table, default properties are shown with the property name highlighted in cyan . Extended properties are highlighted...
  • Wiki Page: Active Directory: Get-ADOrganizationalUnit Default and Extended Properties

    The PowerShell Get-ADOrganizationUnit AD Module cmdlet supports the default and extended properties in the following table. Many can be assigned values with the Set-ADOrganizationalUnit cmdlet. In the table, default properties are shown with the property name highlighted in cyan . Extended properties...
  • Wiki Page: Active Directory: PowerShell AD Module Properties

    Each of the PowerShell Active Directory module cmdlets, like Get-ADUser and Get-ADComputer, displays a default set of properties for all objects retrieved. You can specify other properties with the -Properties parameter, but the default set will always be included. There is another set of extended...
Page 1 of 5 (106 items) 12345
Can't find it? Write it!