All posts by Jordan Benzing

Get all members of a group including nested group membership – Powershell

Previously I wrote a script that would find all members of a security group via Powershell but something I didn’t discuss is dealing with nested groups. This script was written with the idea in mind to find ALL members of a group, computers and users as well as the nested members. That being said it’s ...

SCCM 2012 R2 – Incremental Update Collections and how to find them.

The Problem:  There is something about SCCM changing from SMS to SCCM that makes people think the old maxim – “Slow Moving Software” no longer applies. Combine this with the desire for “I want it now” and you end up with a bunch of device collections where the “Incremental Updates” feature is turned on. “But ...

SCCM 2012R2 – My Clients aren’t getting a deployment.

The Question:  Recently during some other unfortunate SCCM shenanigans someone brought up the fun problem where they thought that software was randomly hit or miss deploying to machines in a collection. They even thought in some cases the software was installing but not reporting back that it had installed. Now reading that last sentence I’m ...

Adding E-Mail Property in AD

A few months back I worked on a project to configure a password manager that was managing accounts across multiple domains without a trust. The Problem: This password management software was actually pretty cool. It’s able to match user accounts in its secure data base using a particular active directory attribute. In this case the ...

Protected Groups In Active Directory

The Question: This morning we hired a new and wonderful guy for our Help-desk and when setting up this persons account a strange oddity occured that caused one of the other helpdesk workers to come over to me and ask, “Hey why can’t I reset this new guys account? I can reset anyone else’s account ...

Powershell Members of a Group

Every now and again there comes a need to get the members of a group and manipulate that data in some fashion. Now there are many ways to skin this cat and work with this data from VBscript, to utilizing DSquery to Quest Powershell CMDLETS to just raw powershell cmdlets. Rather than spend time writing ...

Powershell Change The Local Administrator Account/Password

Back in May of 2014 Microsoft released a windows update – MS14-025 – that removed the ability to push out passwords to workstations remotely using group policy due to issues with elevation of privilege. If that patch is applied it’s a rather large pain to change the local admin after that without something like SCCM in ...

Visio 2010/2013 Client Server Version Error in SCOM 2012R2 Visio Drawings

The Question:  “Wouldn’t it be awesome if we could create pretty Visio Drawings of our systems for the customers to look at and see up-time of servers using SCOM Data?” Well turns out in fact you can do this! It’s a feature it’s been around in SCOM for quite some time. However it’s not exactly ...

Below is a script, provided as is, that is a non-fancy way to reset permissions with some sense of logic on a users home directory. I’ve got a slightly better version of it, but I want to tweak a few things before posting it online.