Active Directory

Use PowerShell to Determine the PDC Emulator FSMO Role Holder in your Active Directory Forest Root Domain

Mar 20, 2014 · Active Directory PowerShell ·

Each domain has a PDC emulator FSMO role so how do I determine which domain controller holds the PDC emulator FSMO role in the forest root domain if I have multiple domains in my forest? Sounds like you can't see the forest root for the trees :-). The answer of course is with PowerShell: 1Get-ADForest | 2Select-Object …

Add an Active Directory User to the Same Groups as Another User with PowerShell

Jan 30, 2014 · Active Directory PowerShell ·

Share on:

A request has been received to grant additional permissions to an existing user in your organizations Active Directory environment. The username of this existing user is frank0. In additional to his current responsibilities, Frank will be taking on the responsibilities of Alan who goes by the username of alan0. Note: …

Setting an Active Directory User Account to Expire at a Specific Time of Day with PowerShell

Dec 12, 2013 · Active Directory PowerShell ·

Share on:

Notice that in Active Directory Users and Computers (ADUC) when setting the expiration of a user account, there's only a way to have the account expire at the end of a specific day: The same option exists in the Active Directory Administrative Center (ADAC): In ADAC, you can see the PowerShell command that the GUI uses …

PowerShell Script to Determine What Device is Locking Out an Active Directory User Account

Nov 29, 2013 · Active Directory PowerShell ·

Share on:

I recently received a request to determine why a specific user account was constantly being locked out after changing their Active Directory password and while I've previously written scripts to accomplish this same type of task, I decided to write an updated script. Active Directory user account lockouts are …

Lock Out Active Directory User Accounts with PowerShell

Nov 28, 2013 · Active Directory PowerShell ·

Share on:

As I'm sure you're aware, there's no setting where you can simply flip a switch to lock out Active Directory user accounts. So what is one to do if you need some locked out accounts to do testing with? Disclaimer: All data and information provided on this site is for informational purposes only. Mike F Robbins …

Windows 8.1 RSAT PowerShell Cmdlets Get-ADUser & Get-ADComputer : One or more Properties are Invalid

Nov 7, 2013 · Active Directory PowerShell ·

Share on:

I saw a tweet yesterday from Chris Duck about a PowerShell version 4.0 bug: The issue occurs when you try to use the Get-ADUser or Get-ADComputer cmdlets along with specifying the Properties parameter with the asterisk "*" wildcard character to select all of the properties. No issue when the client is running …

PowerShell Function to Determine the Active Directory FSMO Role Holders via the .NET Framework

Apr 18, 2013 · Active Directory PowerShell ·

Share on:

Last week I posted a PowerShell function to determine what Active Directory domain controllers held the FSMO roles for one or more domains and forests. That particular function used the Get-ADDomain and Get-ADForest cmdlets which are part of the Active Directory PowerShell module. As it so happens, a friend of mine, …

Use PowerShell to Find Where the Current FSMO Roles are Assigned in Active Directory

Apr 11, 2013 · Active Directory PowerShell ·

Share on:

A while back, I had a need to figure out with PowerShell what server in an Active Directory domain held the PDC Emulator FSMO Role. I found a script on a very popular blog site that figured it out by using a command similar to this: 1Get-ADDomainController -Filter * | 2Where-Object OperationMasterRoles -contains …

Use PowerShell to add an additional Domain Controller to an existing Windows Server 2012 Active Directory Domain

Mar 14, 2013 · Active Directory PowerShell Server Core Windows Server 2012 ·

Share on:

Recently, I decided to add a second domain controller to my mikefrobbins.com domain. The existing server and this new server that will become a domain controller both run the Microsoft Windows Server 2012 operating system and both were installed with the default installation type of server core (no GUI). Even though …

Use PowerShell to Create Active Directory User Accounts from Data Contained in the Adventure Works 2012 Database

Oct 30, 2012 · Active Directory PowerShell SQL Server ·

Share on:

This past Saturday, I presented a session at PowerShell Saturday 003 in Atlanta. Towards the end of the presentation, I created 290 Active Directory user accounts by using the information for employees contained in the Adventure Works 2012 database. This is actually a PowerShell script that I whipped up Friday night at …