Active Directory Powershell Blog

Redirecting Well Known Containers (CN=Users; CN=Computers etc.)

ActiveDirectoryPowershellTeam — Wed, 25 Nov 2009 22:03:00 GMT

In this post we will see the Powershell way of redirecting Users and Computers containers (i.e. Powershell equivalent of tools: redirusr.exe and redircmp.exe ). By now you might know that you can use Get-ADDomain cmdlet for viewing the well-known containers...(read more)

Accessing Replication Metadata using ADPowerShell

ActiveDirectoryPowershellTeam — Sun, 01 Nov 2009 09:50:00 GMT

Metadata associated with Active Directory Replication is exposed in AD via many constructed attributes. Some of these metadata attributes come in pairs of binary blob & xml representation of the metadata element. Constructed Replication XML Metadata...(read more)

View/Configure Protected ACL and Fixing Broken Inheritance

ActiveDirectoryPowershellTeam — Thu, 22 Oct 2009 19:33:19 GMT

ACL inheritance is one of key concept in Active Directory delegation of control. It allows ACEs set on a parent container gets inherited by its child objects. It simplifies access management significantly as it allows the management to be done on the...(read more)

Add Object Specific ACEs using Active Directory Powershell

ActiveDirectoryPowershellTeam — Tue, 13 Oct 2009 22:37:12 GMT

Active Directory Powershell implements two Powershell Provider cmdlets specifically for access control management in Active Directory: Get-ACL and Set-ACL. This blog series is to give a few examples on how to use them. Note that it is not intended for...(read more)

How to view SOAP XML messages to and from AD Webservices and Powershell

ActiveDirectoryPowershellTeam — Tue, 06 Oct 2009 01:12:48 GMT

I am sure many of us are curious to see the XML messages communicated between the AD Powershell webservices client and a Windows server hosting AD Webservices whenever a powershell cmdlet gets executed. In this blog, I am providing information to view...(read more)

How to find extended rights that apply to a schema class object

ActiveDirectoryPowershellTeam — Wed, 23 Sep 2009 01:44:31 GMT

Recently, I came across this question (how to find extended rights that apply to a schema class) in our internal mailing lists. Extended rights are special permissions that denote a special task or function. These rights apply to one or more object classes...(read more)

Active Directory Management Gateway Service released to web - manage YOUR Windows 2003/2008 DCs USING AD POWERSHELL !

ActiveDirectoryPowershellTeam — Fri, 18 Sep 2009 03:15:19 GMT

RTW version of Active Directory Management Gateway Service (ADMGS), an Active Directory Web Services (ADWS overview here ) out of band release for down level servers is now available to download from Microsoft Download Center Page . ADMGS is a down level...(read more)

Token Bloat Troubleshooting by Analyzing Group Nesting in AD

ActiveDirectoryPowershellTeam — Sat, 05 Sep 2009 05:52:51 GMT

This tool started when I was finding ways to analyze the complexity of group memberships in AD. Other than the usual average/median/min/max of number of members, number of memberships etc, I was also interested in finding out the maximum nesting levels...(read more)

Active Directory Powershell to manage Sites and Subnets – Part 3 (Getting Site and Subnets)

ActiveDirectoryPowershellTeam — Tue, 18 Aug 2009 14:30:00 GMT

Hello folks! Here are few Active Directory Powershell script snippets that you will find useful while writing scripts. They deal with fetching sites, subnets and servers. Most of the snippets are simple and self-explanatory and can be simply copy-pasted...(read more)

Active Directory Powershell to manage Sites and Subnets – Part 2 (New-XADSubnet)

ActiveDirectoryPowershellTeam — Tue, 11 Aug 2009 19:00:00 GMT

In an earlier post “Active Directory Powershell to manage sites – Part 1 (New-XADSite)” Jairo explained in detail about how to create a Site in Active Directory using AD Powershell. In today’s post I am going to discuss about how to create Subnets using...(read more)

Three Module Extensions (DC Health, Trust Management and Demo Script)

ActiveDirectoryPowershellTeam — Tue, 04 Aug 2009 19:12:00 GMT

This is a short blog post to highlight a few module extensions that we have been demoing at conferences this year. They show some of the new features in our PowerShell module as well as a few examples extending them. In this update, there are three modules:...(read more)

Use Active Directory Powershell to manage Windows 2003/2008 DCs

ActiveDirectoryPowershellTeam — Tue, 23 Jun 2009 23:58:00 GMT

Many of the readers have expressed interest in having the ability to manage their down level (running Win 2003/2008) DCs using ADPowershell. The only missing piece was the availability of the Active Directory Web Service (ADWS overview here ). Well, ADWS...(read more)

Inspecting Deleted Objects before Restore

ActiveDirectoryPowershellTeam — Mon, 01 Jun 2009 21:36:00 GMT

Accidental deletions can happen in Active Directory in many ways. An administrator can end up deleting a single user object unintentionally or fat finger an entire tree of OUs. A rogue script could end up deleting multiple objects at multiple locations...(read more)

Tab completing LDAP attribute names inside Advanced Filters

ActiveDirectoryPowershellTeam — Tue, 19 May 2009 20:00:00 GMT

In my previous post about Advanced filter s I showed how to use Powershell variables to represent values inside filters. Example: PS D:\> $JohnSmith = Get-ADUser JohnSmith PS D:\> Get-ADUser -Filter { manager -eq $JohnSmith.DistinguishedName } ##...(read more)

ACTIVE DIRECTORY POWERSHELL TO MANAGE SITES – Part 1 (New-XADSite)

ActiveDirectoryPowershellTeam — Tue, 05 May 2009 21:29:00 GMT

In this opportunity I am going to provide a solution to manage sites in your Active Directory (AD) forest by extending Active Directory PowerShell by implementing functions that allow creation, retrieval, update (moving to a site link, renaming) and deletion...(read more)