Category: Active Directory

• Remove Active Directory Domain Services (ADDS) from a WS2012 R2 with PowerShell.

  I decided to tear down my Azure Lab IaaS and ASR infrastructure and rebuild it. The process involves removing the ASR configurations, Recovery Vaults, S2S VPNs, VNets and Azure VM running as a Azure based Domain controller for resilience with on-premise infrastructure and Azure deployed Apps. The next steps will include uninstalling the Domain Controller,…

  jbernec

  August 12, 2017

  Active Directory, Active Directory Domain Services, Azure, Azure Site Recovery, Azure VPN, DCPromo, Domain Controller, FSMO, Microsoft Hyper-v, PowerShell, Powershell 4.0, Windows Server 2012 R2

  Active Directory Domain Services, ADDS, ADDSDeployment, Azure, Azure Resource Groups, Azure Resource Manager, Azure Site Recovery, PowerShell 5.0, WS2012 R2

• Secure Wireless Access and Authentication with Radius on WS2012R2 Network Policy Server .

  Basic 802.1X Wireless network implementation requires an alphanumeric network key for access and authentication. In an enterprise environment this is not ideal. I’ve recently reconfigured and redesigned a client site’s WPAPersonal Wireless network for Radius (Remote Authentication Dial-In User Service) Authentication on an NPS (Network Policy Server) Server running on the Windows Server 2012R2 platform…

  jbernec

  September 20, 2016

  Active Directory, Network Policy Server, Radius Server

  Active Directory, Certificate, Certificate Authority, Group Policy, Network Policy Server, NPS, PowerShell, Radius Server, Wifi, Windows Server 2012 R2, Wireless Network

• Create a UPN Suffix using PowerShell for Office 365 Migration.

  In preparation for Office 365 migration, we had to match the current on premise users’ logon name (UserPrincipalName) with their email addresses to eliminate any user confusion and ease the outlook authentication process .As an example, The on premise logon name is : TobeGray@contosolabs.com Email Address is : Tobe.Gray@contosoconsults.com To match the On premise logon…

  jbernec

  November 18, 2015

  Active Directory, Active Directory Domain Services, Azure Windows PowerShell, Office 365, PowerShell, PowerShell 3.0, Powershell 4.0

  Domain controller, Domain Name, Email Address, Office 365 Migration, On Premise Logon, Outlook Authentication Issues

• Raising Active Directory Forest and Domain Functional Levels Using PowerShell.

  As part of the infrastructure clean up and upgrade plans, we have decided to raise the DFL and FFL of our domain to take advantage of new Windows Server features. The first step in the process is making sure all new DCs in the domain are running the same version of Windows Server. To meet…

  jbernec

  November 10, 2015

  Active Directory, Active Directory Domain Services, Active Directory Replication, AD Forest, Domain Controller, PowerShell, PowerShell 3.0, Powershell 4.0, Windows Server 2008 R2, Windows Server 2008 R2 Backup

  Active Directory PowerShell Module, Domain controller, Domain Functional Level, DomainMode, Forest Functional Level, ForestMode

• Configuring Azure AD Sync Attribute Filtering.

  So I’ve been playing with AADSync attribute filtering. So far we have successfully filtered our lab Azure AD sync by Domain and Organizational Unit. It appears that group membership based filtering is not supported with this version. But according to Microsoft, the Azure AD Connect tool (currently in Preview 2 version) which will eventually replace…

  jbernec

  April 14, 2015

  Active Directory, Active Directory Domain Services, AD Forest, Azure Windows PowerShell, Office 365, PowerShell

  AADSync Filtering, Azure AD Sync, Cloud, Office 365, OfficeProPlus, Synchronization Rules Editor

• Interactive PowerShell 4.0 Script Automates Active Directory User and Mailbox Creation.

  In line with the objective of streamlining and automating new employee/user creation process for help desk/level 1 support, I wrote the following PowerShell script to help precisely define the steps in the process, further reduce the chance for human error and cut down time to finish the task. The interactive PowerShell script accepts user input…

  jbernec

  January 14, 2015

  Active Directory, PowerShell, Scripts, WIndows 8.1, Windows Server 2012 R2

  Active Directory, New-User, Parameters, Scripts

• PowerShell Script Monitors Security Logs and Sends Email Alerts.

  I wrote this PowerShell script to send email alerts when Active Directory User Account, Security and Distribution Group Management events occur in the Security logs.A few parameters will need to be edited to adapt the script to any Active Directory domain environment.Also, the script will not work on Windows Server 2003 Active Directory Domain Controllers…

  jbernec

  November 12, 2014

  Active Directory, Active Directory Domain Services, Audit Logs, Domain Controller, Event Logs, PowerShell, PowerShell 3.0, Powershell 4.0, Windows Server 2008 R2 Backup, Windows Server 2012, Windows Server 2012 R2

  Audits, Eventviewer, Log Source, Security Logs

• PowerShell Script uses Split() Method to display Active Directory Users’ Organizational Unit and other Properties.

  A colleague was trying to generate a report of Active Directory Users, displaying their Organizational Unit and PasswordNeverExpires property status. Normally this should be very simple, but they ran into a small snag. The Active Directory module at the time of this writing which is PowerShell 4.0 does not have a direct Organizational Unit property…

  jbernec

  October 9, 2014

  Active Directory, Powershell 4.0, Script

  Active Directory, Cmdlets, Organizational Unit, PowerShell, PowerShell 4.0

• Configuring Active Directory Time using the W32TM Utility.

  Active Directory domain time in my lab domain has been off by a few minutes of UTC time for a while now. Resetting time across an Active Directory domain is a straight forward process using the W32tm command line tool. My first step was to determine the current AD domain time source on my client:…

  jbernec

  May 13, 2014

  Active Directory, Active Directory Domain Services, Active Directory Time, AD Forest, Domain Controller, PowerShell

  AD Time, W32TM

• Creating New Equipment Address List in Exchange 2010.

  The steps and cmdlets below enabled me configured a separate address list in Exchange 2010 to manage all Equipment. Create the Address List and specify the Recipient Filter: [PS] C:\>New-AddressList -name “All Equipment” -RecipientFilter {RecipientType -eq “UserMailbox” -and RecipientTypeDetails -eq “EquipmentMailbox”} Run the Update-AddressList on the New Address List: [PS] C:\>Update-AddressList -Identity “All Equipment” To…

  jbernec

  April 30, 2014

  Active Directory, Exchange 2010 SP2, Exchange Cmdlets, Exchange Management Shell, Microsoft Exchange

  Active Directory, Address Lists, Cmdlets, Microsoft Exchange 2010, OAB, Offline Address Book