Add an AD Group rule to a collection with PowerShell

It’s been a long time since I’ve posted anything on my blog but after a year of writing with the SCConfigMgr team on a regular basis I thought it was time to give my roots a little bit of loving. When creating a collection in ConfigMgr its really common that we use an Active Directory ...

Enable the Active Directory Recycle Bin

Ever have gut-clenching moments when you realize you deleted the wrong object in Active Directory? Maybe you keep a bottle of antacid in your desk drawer for exactly that reason. Well not anymore. Let’s talk about a wonderful feature in Active Directory implemented back in the 2008 version of Active Directory. It’s called the ‘Recycle ...

SCCM Collection Evaluation Duration – SQL Query

The Problem: My collection membership seems to take forever to update! Also, for some reason the console seems SUPER slow lately. One of the COMMON Solutions Collection evaluation is a common sticking point that causes major performance issues in any well constructed environment. In fact it’s probably the number one cause of console slowness and ...

Get all members of a group including nested group membership – Powershell

Previously I wrote a script that would find all members of a security group via Powershell but something I didn’t discuss is dealing with nested groups. This script was written with the idea in mind to find ALL members of a group, computers and users as well as the nested members. That being said it’s ...

SCCM 2012R2 – My Clients aren’t getting a deployment.

The Question:  Recently during some other unfortunate SCCM shenanigans someone brought up the fun problem where they thought that software was randomly hit or miss deploying to machines in a collection. They even thought in some cases the software was installing but not reporting back that it had installed. Now reading that last sentence I’m ...

Adding E-Mail Property in AD

A few months back I worked on a project to configure a password manager that was managing accounts across multiple domains without a trust. The Problem: This password management software was actually pretty cool. It’s able to match user accounts in its secure data base using a particular active directory attribute. In this case the ...

Protected Groups In Active Directory

The Question: This morning we hired a new and wonderful guy for our Help-desk and when setting up this persons account a strange oddity occured that caused one of the other helpdesk workers to come over to me and ask, “Hey why can’t I reset this new guys account? I can reset anyone else’s account ...

Browse Categories