Sometimes PowerShell is not available, not wanted, or simply not the right choice for a quick check. In those cases, a batch script can still do a practical job: verify whether important services are running, restart them if necessary, and log each failure with a timestamp. This example shows how to monitor a small set … Weiterlesen
When working with batch scripts, it is sometimes useful to find the first free drive letter automatically. This is especially helpful in scripts that mount temporary network paths, map local resources, or prepare a workspace without hardcoding a drive letter that may already be in use. The following batch script checks a list of drive … Weiterlesen
A common requirement in logon scripts is to detect whether the current user is a member of a specific Active Directory group and then trigger a matching action. When third-party tools are not allowed, a pure batch solution can still do the job by using only built-in Windows commands. In this example, the script checks … Weiterlesen
Sometimes a FRITZ!Box needs to be reset or reconfigured, but the device is no longer reachable through its normal IP address. This can happen if the configured address is unknown, changed, or no longer part of the current network. In such cases, AVM provides an emergency IP address that can be used to access the … Weiterlesen
I had an issue where a client wouldn’t start and always crashed with a blue screen (0x50 klif.sys). After some research, I identified the antivirus software as the problem. Since the client could only start in Safe Mode, where uninstallation is normally not possible (MSI services aren’t started), I looked for a way to uninstall … Weiterlesen
Split DNS is a simple way to make the same fully qualified domain name resolve to different IP addresses depending on where the request comes from. A common use case is Outlook Web Access, where users should reach the service with the same URL both inside and outside the network. With a split DNS setup, … Weiterlesen
I had to completely change the IP range of one location because it was to be connected to our network, and the same IP ranges were already in use. Routing between the locations would therefore have been impossible and I didn’t want to use NAT for this. The following requirements were specified: The following list … Weiterlesen
When new computers are joined to Active Directory, they are often created in the default Computers container. That can be a problem because objects in this location do not receive the Group Policy Objects you may have designed for newly added systems. As a result, software deployment, security settings, local administrator assignments, or login messages may not … Weiterlesen
I needed a script to export S/MIME encryption certificates for a client migration. The script requires that the S/MIME private key be exportable. If it isn’t, the certificate can only be recovered at the CA using a Key Recovery Agent (if configured) or Mimikaz 😉 The search routine for the correct certificate may also need … Weiterlesen
Procedure for Performing a Safe Active Directory Schema Update Many have likely performed an Active Directory schema update without fully understanding or considering the associated risks. I recently encountered my first power outage during a schema update. Fortunately, it happened in my private test environment. As a result, the schema became corrupted. However, because it … Weiterlesen