This script signs a PowerShell script with a code-signing certificate from the current user certificate store. It first searches for a certificate that matches the configured certificate name, checks whether it is still valid, and then applies a digital signature to the selected script. After signing, it writes a CSV log entry so the signing … Weiterlesen
This small PowerShell script checks whether a user account can authenticate against Active Directory. It is useful for quickly validating credentials during troubleshooting, onboarding, or when you want to confirm that a specific account and password combination works as expected. What the script does The script prompts for a user name and password, then uses … Weiterlesen
This PowerShell script helps monitor changes in Active Directory Group Policy Objects (GPOs). It compares the current day’s GPO export with the previous day’s data and generates a report that highlights new, deleted, renamed, and modified GPOs. What the script does The script exports all GPOs in the domain as XML reports and compares them … Weiterlesen
This PowerShell script helps you search all Group Policy Objects (GPOs) in the current domain for a specific string. It is useful when you need to quickly find where a setting, path, name, or keyword appears inside your GPOs without opening each policy manually. What the script does The script asks for a search string, … Weiterlesen
In distributed Active Directory environments, it can be useful to manually trigger replication after changes to Group Policies, user objects, or DNS records. This PowerShell script automates that process across all domain controllers and then checks the replication status afterwards. repadmin /syncall is the underlying command used to synchronize domain controllers, and Get-ADReplicationPartnerMetadata is used to read replication partner … Weiterlesen
Split DNS is a simple way to make the same fully qualified domain name resolve to different IP addresses depending on where the request comes from. A common use case is Outlook Web Access, where users should reach the service with the same URL both inside and outside the network. With a split DNS setup, … Weiterlesen
I had to completely change the IP range of one location because it was to be connected to our network, and the same IP ranges were already in use. Routing between the locations would therefore have been impossible and I didn’t want to use NAT for this. The following requirements were specified: The following list … Weiterlesen
When new computers are joined to Active Directory, they are often created in the default Computers container. That can be a problem because objects in this location do not receive the Group Policy Objects you may have designed for newly added systems. As a result, software deployment, security settings, local administrator assignments, or login messages may not … Weiterlesen
Procedure for Performing a Safe Active Directory Schema Update Many have likely performed an Active Directory schema update without fully understanding or considering the associated risks. I recently encountered my first power outage during a schema update. Fortunately, it happened in my private test environment. As a result, the schema became corrupted. However, because it … Weiterlesen