Active Directory – Page 8

Testing for Schema Extension Conflicts

Source : http://technet.microsoft.com/en-us/library/testing-for-active-directory-schema-extension-conflicts%28WS.10%29.aspx You can use ADSchemaExtensionConflictAnalyzer.ps1 (http://go.microsoft.com/fwlink/?LinkId=191133), a Windows PowerShell script, to analyze application schema extension .ldf files against a production schema and generate a report on errors, conflicts, and other warnings. For example, if an application schema extension is

Rehost an Active Directory partition on one or more Global Catalog servers

Purpose : In some cases (lingering objects, corruption), an Active Directory partition needs to be rehosted. This technique allows you to “re-host” a partition on an Active Directory domain controller without dumping all the other read only partitions (like you

Move computer objects to another Active Directory OU

This script will be useful if you want to move computer objects in the Active Directory filtered by name to a destination OU Script : $computerstomove = Get-ADComputer -LDAPFilter “(name=Desktop00*)” -SearchBase “CN=computers,DC=domain,DC=local,DC=net” foreach ($computertomove in $computerstomove) { Move-ADObject $computertomove -TargetPath

Monitor locked out user accounts

Purpose : The purpose of this project is to monitor Active Directory when a user account is locked out in a mixed DC OS (Windows 2003 and 2008). There are two scripts : the logging script runs on each domain

Monitor Active Directory database backup + report sent by email

The purpose of this project is to receive every day an email containing the status of the Active Directory database backup of all the domain controllers in a forest. I use the result from the following command : repadmin /showbackup

Group policy – Server access restriction

This project describes how to use the Active Directory group policies to restrict access on domain member servers. The needs are the following : Unauthorize remote logon (RDP) for the service accounts Add the service accounts to the local Administration group Add specific

Get user group membership

This script gets the group membership of a specific username Script : (GET-ADUSER –Identity username –Properties MemberOf | Select-Object MemberOf).MemberOf Reference Get-ADUser Syntax Get-ADUser -Filter [-ResultPageSize ] [-ResultSetSize ] [-SearchBase ] [-SearchScope { | | }] [-SearchScope { | |

Get operating system name information using Active Directory

You can use one of these script to get operating system name information retrieve from the Active Directory using two different methods : .Net or the Active Directory cmdlet Get-ADObject Script (using .NET) : $strCategory = “computer” $objDomain = New-Object

Get group members (ADSI method)

You can use this script to get group members in the Active Directory. It is based on the ADSI method Script $root=([ADSI]””).distinguishedName $Group = [ADSI](“LDAP://CN=Domain Admins, CN=Users,”+ $root) $Group.member My Powershell script categories Active Directory Cluster Database Exchange Files and

Get the GPO Name GUID and SID

This script allows you to get the GPO Name GUID and SID in your Active Directory domain. Script (with Microsoft Active Directory module loaded : import-module activedirectory) : Get-ADObject -Filter {(ObjectClass -eq “groupPolicyContainer”)} -Properties displayName | % { write-host $_.name