Goatee PFE

Blog of Microsoft Premier Field Engineer Ashley McGlone featuring PowerShell scripts for Active Directory.

Goatee PFE

  • DogfoodCon 2012 - Columbus, Ohio

    Today I have the privilege of speaking at DogfoodCon 2012 in Columbus, Ohio.  My topic is “Active Directory PowerShell Step-By-Step”.  This post includes a download of the slide deck and demo scripts for the session.

  • AD Group History Mystery: PowerShell v3 REPADMIN

    After speaking about SID history and token size at PowerShell Saturday last month an attendee approached me with a common concern.  I was so excited to code the answer that I did it in the airport on the way home.

    Joe User has been with the company for 23 years and has accumulated more group memberships than the entire desktop support team.  Joe has rotated through five different departments during his career and managed to survive all of the layoffs.  As a result he has access to every share in the company.  Even worse his access token is so big that it won’t fit through the door.

    We would love to clean up his group memberships, but we have no way of knowing when he was added to all these groups.  If we could see the dates he joined those groups it would give us a clue about removing just the older group memberships.  Without this information his token will continue to bloat.

    Time for some AD PowerShell v3 goodness!

    PS - I'm also going to give you a handy chart showing PowerShell equivalents for REPADMIN in AD PowerShell v3.

  • Active Directory PowerShell Notes From The Field

    Today I have the privilege of speaking at the second-ever PowerShell Saturday event.  As a Microsoft Premier Field Engineer I get to meet many customers and help them with their Active Directory and PowerShell needs. I’ve taken some of that experience and wrapped it into a presentation called Active Directory PowerShell Notes From The Field.

    The session includes these four topics:

    1. Using Active Directory PowerShell to find schema update history
    2. Using PowerShell to migrate DNS zones
    3. Using Active Directory PowerShell to remediate token size issues caused by SID history
    4. A brief look at what’s new in Active Directory PowerShell v3

    These notes from the field come from scripting that I've done to assist customers with real-world needs.  The purpose of the session is to demonstrate the power of PowerShell for automating Active Directory solutions for every-day scenarios AND to inspire you to learn PowerShell.  To help with the learning part I have included several resources here for your reading pleasure.

    Attached to the bottom of this post you will find a file containing the DNS sample code and a PDF of the PowerPoint presentation.

  • Freaky neat Active Directory site links with PowerShell

    Today's post will help you clean up site link descriptions and give you some nice reporting capability.  Some folks like to set their site link description field to list each of the member sites in the link. If that is you, then you'll love this script.  Today's script enumerates all of the member sites in a site link and then concatenates their names into the description of the site link.  Also, it will make a note in the description for any site links that have change notification enabled.  Now that's handy!  There is also a bonus site reporting script in the download attached.

  • What's New In PowerShell v3: Demos to Download

    Today I am presenting at TechMentor in Redmond on the topic of "What's New In PowerShell v3". The purpose of this blog post is to share some related links and demo scripts from the session.

  • How to copy AD user attributes to another field with PowerShell

    Have you ever needed to copy data between attributes in Active Directory? Maybe you need to copy an ExtensionAttribute value into a different ExtensionAttribute. Maybe you need to copy email, UPN, or SIP addresses. You may even want to move the EmployeeNumber value into the EmployeeID attribute instead. What if you needed to create a new Description based on a combination from other attributes?

  • Free Downloads: Windows PowerShell 3.0 Quick Reference Guides

    Hey folks. In case you missed it PowerShell Magazine created some handy guides for getting started with the new PowerShell v3 features. We posted them here: http://www.microsoft.com/en-us/download/details.aspx?id=30002 "Quickly learn tips, shortcuts...
  • New Microsoft Download: Active Directory Replication Status Tool

    Our Microsoft Customer Service and Support experts have released a new tool for diagnosing AD replication errors: ADREPLSTATUS . Here is the description from the download page : The Active Directory Replication Status Tool (ADREPLSTATUS) analyzes the...
  • PowerShell Module for Working with AD SID History Updated

    Today I am releasing updated functionality in the PowerShell Active Directory SID History module.  New features include: inventory SID history in share permissions, new Access database reporting template, bug fixes, and more!

  • Surprise! Windows 8 & Server 2012 Release Preview Is Here!

    Fresh off the press today! Here are the links you need: Server announced here: http://blogs.technet.com/b/windowsserver/archive/2012/05/31/windows-server-2012-release-candidate-available-now.aspx Client announced here: http://blogs.msdn.com/b/b8...
  • PowerShell Tip: Active Directory Account Unlock Shortcut for Help Desk

    Today I posted over on the Hey Scripting Guy blog with a quick tip to unlock Active Directory user accounts.  Check it out:

    Active Directory Account Unlock Shortcut for Help Desk

  • How to close helpdesk tickets faster with PowerShell

    Now most people don't plan to spend their entire career on the help desk.  It is a starting point for bigger things in IT. PowerShell can be your career LAUNCH PAD.  Seriously.  PowerShell skills will differentiate you from your peers and slingshot you to the front of the pack.

    What if you could get all of the data you needed to close a ticket in seconds?

  • PowerShell Limericks for St. Patrick's Day

    In honor of all things St. Patrick's Day what could be more appropriate than a PowerShell limerick? I've drafted four for you to enjoy and share.

  • Five free ways to script Active Directory in PowerShell: Part 2

    This is huge.  Today's post includes demos scripts for all five free ways to script Active Directory in PowerShell.  I presented these last weekend at the first ever PowerShell Saturday event in Columbus, Ohio.  You will also find attached a one hour audio recording of the presentation for those who couldn't attend in person.  Now you have a free AD scripting recipe book with a guided tour from GoateePFE.

  • Five free ways to script Active Directory in PowerShell: Part 1

    This post is the first in a series highlighting out-of-the-box PowerShell support for Active Directory. If you're just now learning how to use PowerShell with Active Directory, then start here. If you already have some experience in this category, then I'm going to show you some handy tips that will take your skills to the next level.

  • Don't miss the first PowerShell Saturday event

    On March 10th the Microsoft Scripting Guy, Ed Wilson , is coming to Columbus, Ohio to kick off the first ever PowerShell Saturday community event. These events have been very popular with SQL and SharePoint user groups all over the US, and we are launching...
  • Everything you need to get started with Group Policy

    My last post on getting started with Active Directory was so popular that I thought I would do one for getting started with Group Policy.  Once again this link list will satisfy everyone from beginner to advanced.  I know there are many other third party resources and books, but I want to surface some Microsoft white papers and articles that may not always be obvious.  Enjoy!

  • How to find AD schema update history using PowerShell

    This article is for all of the IT Pros who have inherited an Active Directory environment which they did not build.  Today's post offers some simple scripts to document the history of schema updates.  This is particularly handy when it comes time to extend the schema for a domain upgrade or Exchange implementation.  Now you can get a report of every attribute's create and modified date.  You can also find out if and when third party extensions have been applied.

  • Everything you need to get started with Active Directory

    As a Microsoft Premier Field Engineer I frequently get asked for more information on Active Directory topics.  Most of the time I end up passing along one or more of the links in today's post.  This list will be extremely valuable for anyone who wants to get started with Active Directory or even for a seasoned AD admin who wants to go deeper.

  • PowerShell Module for Working With AD SID History

    This post is the fifth in the "SID Walker, Texas Ranger" series on SID history remediation with PowerShell.  Today we're wrapping up with a handy summary of each post in the series. We will also take the function library we've been using and upgrade it to a PowerShell module. Then we'll walk through the entire SID history remediation process using the provided cmdlets in this module.

  • How To Remove SID History With PowerShell

    This post is part four in the "PowerShell: SID Walker, Texas Ranger" series on documenting and remediating SID history in your AD forest. In today's post we will look at the final step of remediating SID history:  removing the SID history data from our migrated AD objects using PowerShell.  Cleaning up this stale data will greatly reduce the chance of token size issues for your users.

  • PowerShell: SID Walker, Texas Ranger (Part 3): Exporting Domain SIDs and Trusts

    Many of us have inherited SID history in our forest from previous mergers and acquisitions.  In today's blog entry on SID history remediation we will unearth a Rosetta Stone, the key to decyphering the identity of civilizations past.  This script will export a list of domain names and domain SIDs across your forest and all of its trusts.  This domain SID list is the key to understanding from where the SID history of our users originated.

  • PowerShell v3 preview download available

    Here is your chance to preview the next release of PowerShell and offer feedback before it gets baked for release. As with any dogfood software don't put it on your primary machine. Announcement here: http://blogs.msdn.com/b/powershell/archive/2011...
  • PowerShell: SID Walker, Texas Ranger (Part 2)

    This is part two in a series on translating SIDs in ACLs.  Today we're going to unleash a Chuck Norris round house kick on old SIDs stinking up the ACLs on our file servers.  It's time to take out the trash... PowerShell style.

  • COPUG – Central Ohio PowerShell User Group – September 29 – Special guest Matt Hester

    Join us on September 29th as we welcome Matt Hester, Microsoft Senior IT Pro Evangelist for the Heartland District.

    Thursday, September 29, 2011, 18:30 - 20:00

    Platform Lab, 1275 Kinnear Road, Columbus, OH 43212, United States

    See the official COPUG site.