Creating VSCode User Snippets for PowerShell

If you spend time working with VSCode you’ll learn there are cool functions like “User Snippets” you can customize. I’ve talked about these before on another blog and showcased creating User Snippets that allow you to import the Configuration Manager PowerShell module. I wanted to go a step further with a few more snippets I’ve ...

Add an AD Group rule to a collection with PowerShell

It’s been a long time since I’ve posted anything on my blog but after a year of writing with the SCConfigMgr team on a regular basis I thought it was time to give my roots a little bit of loving. When creating a collection in ConfigMgr its really common that we use an Active Directory ...

Enable the Active Directory Recycle Bin

Ever have gut-clenching moments when you realize you deleted the wrong object in Active Directory? Maybe you keep a bottle of antacid in your desk drawer for exactly that reason. Well not anymore. Let’s talk about a wonderful feature in Active Directory implemented back in the 2008 version of Active Directory. It’s called the ‘Recycle ...

SCCM Collection Evaluation Duration – SQL Query

The Problem: My collection membership seems to take forever to update! Also, for some reason the console seems SUPER slow lately. One of the COMMON Solutions Collection evaluation is a common sticking point that causes major performance issues in any well constructed environment. In fact it’s probably the number one cause of console slowness and ...

Get all members of a group including nested group membership – Powershell

Previously I wrote a script that would find all members of a security group via Powershell but something I didn’t discuss is dealing with nested groups. This script was written with the idea in mind to find ALL members of a group, computers and users as well as the nested members. That being said it’s ...

SCCM 2012R2 – My Clients aren’t getting a deployment.

The Question:  Recently during some other unfortunate SCCM shenanigans someone brought up the fun problem where they thought that software was randomly hit or miss deploying to machines in a collection. They even thought in some cases the software was installing but not reporting back that it had installed. Now reading that last sentence I’m ...

Adding E-Mail Property in AD

A few months back I worked on a project to configure a password manager that was managing accounts across multiple domains without a trust. The Problem: This password management software was actually pretty cool. It’s able to match user accounts in its secure data base using a particular active directory attribute. In this case the ...

Protected Groups In Active Directory

The Question: This morning we hired a new and wonderful guy for our Help-desk and when setting up this persons account a strange oddity occured that caused one of the other helpdesk workers to come over to me and ask, “Hey why can’t I reset this new guys account? I can reset anyone else’s account ...

Powershell Members of a Group

Every now and again there comes a need to get the members of a group and manipulate that data in some fashion. Now there are many ways to skin this cat and work with this data from VBscript, to utilizing DSquery to Quest Powershell CMDLETS to just raw powershell cmdlets. Rather than spend time writing ...

Powershell Change The Local Administrator Account/Password

Back in May of 2014 Microsoft released a windows update – MS14-025 – that removed the ability to push out passwords to workstations remotely using group policy due to issues with elevation of privilege. If that patch is applied it’s a rather large pain to change the local admin after that without something like SCCM in ...

Browse Categories