Category Archives: Active Directory

Add Azure AD user to local admin on a workstation

Add an azure AD user as local admin on a workstation: cmd as admin net localgroup administrators AzureAD\<username> /add Admin rights required to do this, ofcourse, <username> is the e-mail address of the local user you want to add.

Posted in Active Directory, Azure | Comments Off on Add Azure AD user to local admin on a workstation

Working with Windows Active Direcory, transferring FSMO roles from one DC to another.

Today I had to move the fsmo-roles, and phase out an old DC. These days you can powershell it. Since you are working with Active Directory, log in as an admin user, fire up powershell and a do a: Import-Module … Continue reading

Posted in Active Directory, fsmo, powershell | Comments Off on Working with Windows Active Direcory, transferring FSMO roles from one DC to another.

userAccountControl, Attributes for AD Users

I needed this today for use in querying a large AD. Repost. Credits go to http://www.selfadsi.org/ads-attributes/user-userAccountControl.htm   you can query with this e.g. with powershell and do some counting: (Get-ADUser -LDAPFilter “(&(sAMAccountName=*)(!userAccountControl:1.2.840.113556.1.4.803:=2))” -SearchBase ‘OU=Users,DC=domain,DC=local’ ).Count But could also check if … Continue reading

Posted in Active Directory, ldap | Comments Off on userAccountControl, Attributes for AD Users

(re)Setting rights on user home folders [batch script]

After some troubles with copied user home folders during a migration, the rights were set incorrectly. As this was about more than just a handful of users, re-setting the rights manually wasn’t a good idea. After digging around on the … Continue reading

Posted in .bat, Active Directory, batch, command line, File sharing | Comments Off on (re)Setting rights on user home folders [batch script]

Get a list of all computers in Active Directory with date lastlogon and OS

I needed to list all computers in use at customers, with os, and for the less diligently maintained AD’s also if they were still in use. You can obtain this by reading the value of lastlogondate of a machine account. … Continue reading

Posted in Active Directory, powershell | Comments Off on Get a list of all computers in Active Directory with date lastlogon and OS

Active Directory Powershell get [the count of] all enabled users in a certain OU [but not in sub OU’s]

For our internal use, I devised a powershell command that lists all enabled users in a certain OU, butĀ filtering out those in sub OU’s. Unfortunately this is not a dynamic process, since it is based on the currentĀ implementation of OU’s, … Continue reading

Posted in Active Directory, powershell | Comments Off on Active Directory Powershell get [the count of] all enabled users in a certain OU [but not in sub OU’s]

Powershell, get full names of a group of users in AD and export to text file.

Just a quick blurb that I encountered this morning. In powershell, to get a list of the full names of users and export them to a text file: Get-ADGroupMember -identity GROUPĀ -Recursive | Get-ADUser -Property DisplayName | Select Name > c:\temp\fullnamesofgroup.txt … Continue reading

Posted in Active Directory, powershell | Comments Off on Powershell, get full names of a group of users in AD and export to text file.

Windows Server 2008 r2 Domain Controller boots into Active Directory Repair

Problem! My Windows 2008 R2 DC (the only one) boots into Active Directory Repair mode. Now I can’t log in, because the Active Directory services aren’t started. I can’t even restart the system correctly, running as a VMware virtual machine, … Continue reading

Posted in Active Directory, Windows, Windows Server | Comments Off on Windows Server 2008 r2 Domain Controller boots into Active Directory Repair