Active Directory – shell{&}co

Copy certificate to the Windows Services store

Recently, I have encountered an issue with Active Directory, LDAPS and multiple Server authentication certificates in the default computer certificate store of my domain controllers. The LocalComputer certificate store contained one certificate for AD LDAPS and the other was dedicated

Play with group policy, XML and Powershell

I will show you in this post simple examples to get informations on Active Directory group policies using Powershell. The main cmdlet I will use is the get-gporeport. With this cmdlet, you can export a Group Policy in XML format

DNS forwarder setting healthcheck

To keep your environment/infrastructure clean and up-to-date, it is important to perform some healthcheck. The following simple Powershell cmdlet will discover and test the configured DNS forwarders on your Active Directory Get-DnsServerForwarder > Gets forwarder configuration settings on a DNS

Cleanup your Group Policies with Powershell

You will find in this post two little scripts to help you on cleaning your unused Group Policies (GPO). The first script will help you to identify the GPO linked to an OU but with a disabled link. The second

List installed certificate properties on remote computers

I have written this script to list the installed certificates on remote computers. The script lists first the computer accounts that match a specific OS type. Currently, the computer account in the Active Directory domain that have a “Server” operating

Automatic HTTPS WinRM Listener creation

In this post I will show you how to create a HTTPS WinRM listener that is using a certificate issued by your own MS PKI. The requirements are the following: – An Active Directory domain – An Enterprise MS PKI

Active Directory Functional Domain level check

This script will help you to check the Active Directory domain functional level. First the script asks for the domain name (fqdn). Then, the domain controllers names of this domain are queried to get the value of the AD attribute

Get the Active Directory functional levels/FSMO roles forest wide

Description With the following script, it is possible in the same array to get useful Active Directory informations such as: domain names (DNS fqdn) domain functional level forest functional level fsmo roles The powershell cmdlets used for this script are

Password never expires status

Description With this little script, you will have a status on the user account “Password never expires” flag. This check is done on a specific OU. You can adapt the script to run it on a domain-wide. The principe of

List AD domain controller KDC certificates

Kerberos uses certificates to encrypt communication between the Kerberos client and the Kerberos Key Distribution Center (KDC). If you’re domain controllers use certificate for KDC you can list them by runnning this script: $domains = (Get-ADForest).domains $dcs = (Get-ADForest).globalcatalogs $list

« Previous