TokenSnatcher – Run As System
Do you sometimes run into situations where being Administrator just doesn’t cut it? Trying to access hidden registry keys? Trying to remove the godforsaken c:windowscsc folder? Trying to stop a …
A User Account Restriction Is Preventing You From Logging On
Today we saw an issue after upgrading the forest level and domain level from 2008 to 2016 at a customer. Soon after the upgrade admins started seeing problems when connecting …
Get GPO Links With PowerShell
Do you need to get an overview of the GPO’s and the GPO links in Active Directory? Don’t worry! You’re only a few lines of PowerShell away from reaching your …
Ntdsutil Metadata Cleanup
This article will show you step-by-step how to clean up Active Directory metadata after killing a domain controller. The steps listed should only be performed in case you have no …
How To Check Office 365 Directory Synchronization
So – you set up Azure AD Connect to take care of the synchronization between your on-premise AD and Office 365. But what’s the status on the synchronization? Fortunately it’s …
How To Do Delta Sync
The delta sync in Azure AD Connect is the most common form of synchronization. It only performs a partial synchronization of any changes since last synchronization, so it’s very quick. …
GPO (Group Policy Objects)
This article will give you all the information you need to understand and to start working effectively with Microsoft Group Policy Objects (GPO’s). It covers the following topics: What is …
GPO Security Filtering
This article will show you how to do a complete analysis of GPO security filtering using PowerShell. If you’re looking for a complete description about how GPO security filtering works …
How To Document OU Delegation
Delegation of rights on your Active Directory OU’s is standard practice in any AD. Delegation allows you to grant limited access in various scenarios: Enable your first level helpdesk to …
PhysicalDeliveryOfficeName
Active Directory users can have their office name configured in the attribute PhysicalDeliveryOfficeName. In general it’s a great idea to populate this attribute with something meaningful so it can be …