Musings on the splendour of PowerShell Browse by Tags - PoSh Chap - Site Home - TechNet Blogs

PoSh Chap

Musings on the splendour of PowerShell

Browse by Tags

Related Posts
  • Blog Post: One-Liner: Change Account Lockout Threshold

    What's the optimal Account Lockout Threshold value? A question that continues to generate a lot of debate! If an account lockout threshold is set, the latest guidance, issued with Windows Server 2012 R2, suggests a value of 10 . Visit this post for more information: Configuring Account Lockout...
  • Blog Post: Use PowerShell to Check for High Privilege Group Membership

    Here's my latest 'Hey, Scripting Guy! Blog' outing: Use PowerShell to Search Active Directory for High-Privileged Accounts It's the second in a four-part series on securing and optimising RODC administration. Here's the first post: Use PowerShell to Work with RODC Accounts...
  • Blog Post: Introducing Scriptify!

    A bit of a departure this week... One of my colleagues in the UK has put together 'Scriptify' to categorise the 700+ SharePoint cmdlets: Scriptify As an administrative value-add and as a beginner's learning aid I really like the concept. What about applying this to the Active...
  • Blog Post: Active Directory Replication Cmdlets - Site Creation

    To create an Active Directory site with VBScript took about 30 lines of code and it took a few less lines to create an Active Directory site with v1 of PowerShell. With the introduction of the Active Directory PowerShell module in Windows Server 2008 R2, you could cut this down to 5 lines. Here's...
  • Blog Post: Remote Group Policy Update - 'Under the Bonnet'

    Windows Server 2012 introduced the ability to perform remote Group Policy updates, kicked-off from the Group Policy Management Console or via the Invoke-GPUpdate PowerShell cmdlet. So... what happens when you schedule a remote Group Policy update? Before I start, the first thing to mention is that...
  • Blog Post: One-Liner: Targeted Remote Group Policy Updates

    Windows 2012 added one additional cmdlet to the PowerShell GroupPolicy module - Invoke-GPUpdate When used in conjunction with the ActiveDirectory PowerShell cmdlets we can easily target remote group policy updates. Here's a one-liner to run a Group Policy update on all Windows Server 2012 systems...
  • Blog Post: Using PowerShell to create a BPA Problem Report

    In Microsoft Global Business Support we have a number of proactive health and risk assessments available to Microsoft Premier Support customers. These invaluable, technology-specific assessments are known as RAP as a Service (RaaS). If you don't have access to a Microsoft Premier Support contract...
  • Blog Post: Tracing the Source of Account Lockouts

    As an Active Directory administrator, you have no doubt experienced re-occurring account lockouts. Back in the day, you would need the investigative powers of a Mr Sherlock Holmes to get to the bottom of these little mysteries! Then, the Account Lockout Tools made the process somewhat easier. Now, though...
  • Blog Post: Active Directory Bulk User Modification

    An old favourite! This is what automation is all about: making the tedious and the long-winded incredibly easy, and, dare I say, joyous! Your HR department gives you a dump of user names with email addresses and phone numbers to be updated in Active Directory. The dump is in the form of a CSV file...
  • Blog Post: 'Retire' Active Directory Non-LVR Group Members

    Here's my latest 'Hey, Scripting Guy! Blog' outing. I talk about using the AD Replication cmdlets to easily find and remediate Non-LVR group members... Remediate Active Directory Members that Don't Support LVR I've really geeked-out in this one, with references to one of...
  • Blog Post: Prepopulate Passwords to RODCs with PowerShell

    Hello! The sun is shining, spring has sprung and it's nearly the weekend... life is sweet! Today, I'm going to talk about using the AD Replication cmdlets, introduced with Windows Server 2012, to prepopulate passwords to your RODCs. No more repadmin, no more DSA.msc... just pure, unadulterated...
  • Blog Post: To and Fro, Back and Forward Links

    I seem to have acquired a post sack. It has the initials NP on it... Hmmm, what's inside? This one looks interesting... "...Dear, Sir, How can I use PowerShell to check that a backlink is populated for an object in AD? Yours, faithfully, Mr Johnny Face..." ...
  • Blog Post: PowerShell and Executable Output (with Boats)

    What floats your boat? For me, it’s usually a body of water, but I also like being asked stuff about PowerShell. Here’s one such question: “How come in a forest with two domains each with two (2008R2) domain controllers I get the following results with PowerShell? ( nltest...
  • Blog Post: One-Liner: Active Directory Schema Version

    Rules rule! What's a directory service without schema? This week I was asked about the Active Directory schema version for Windows Server 2012 R2. Here’s how to get hold of it with PowerShell: Get-ADObject ( Get-ADRootDSE ) . schemaNamingContext -Property objectVersion ...
  • Blog Post: One-Liner: Get a List of AD Users Password Expiry Dates

    All good things come to an end. Rivers run their course, curtains fall and… passwords expire. We have epilogues, codas and an Active Directory attribute named msDS-UserPasswordExpiryTimeComputed . How can we use that attribute to get a list of enabled Active Directory accounts and their...