Category: Active Directory

Active Directory, widely used commonly abused and almost never properly maintained or standardized. Here we will tackle some common problems with Active Directory discuss strategy with management and offer up best practices.

Finding OUs with Workstations – Powershell performance is weird

I was recently asked to implement LAPS for a customer. Nothing unusual there. This particular environment was new to me which meant it was time to investigate their OU structure. Why does OU structure matter? When implementing laps there are a few things to keep in mind. First, you need to extend the schema. Then ...

Enable the Active Directory Recycle Bin

Ever have gut-clenching moments when you realize you deleted the wrong object in Active Directory? Maybe you keep a bottle of antacid in your desk drawer for exactly that reason. Well not anymore. Let’s talk about a wonderful feature in Active Directory implemented back in the 2008 version of Active Directory. It’s called the ‘Recycle ...

Adding E-Mail Property in AD

A few months back I worked on a project to configure a password manager that was managing accounts across multiple domains without a trust. The Problem: This password management software was actually pretty cool. It’s able to match user accounts in its secure data base using a particular active directory attribute. In this case the ...

Protected Groups In Active Directory

The Question: This morning we hired a new and wonderful guy for our Help-desk and when setting up this persons account a strange oddity occured that caused one of the other helpdesk workers to come over to me and ask, “Hey why can’t I reset this new guys account? I can reset anyone else’s account ...