Enable the Active Directory Recycle Bin

Ever have gut-clenching moments when you realize you deleted the wrong object in Active Directory? Maybe you keep a bottle of antacid in your desk drawer for exactly that reason. Well not anymore. Let’s talk about a wonderful feature in Active Directory implemented back in the 2008 version of Active Directory. It’s called the ‘Recycle ...

SCCM Collection Evaluation Duration – SQL Query

The Problem: My collection membership seems to take forever to update! Also, for some reason the console seems SUPER slow lately. One of the COMMON Solutions Collection evaluation is a common sticking point that causes major performance issues in any well constructed environment. In fact it’s probably the number one cause of console slowness and ...

Get all members of a group including nested group membership – Powershell

Previously I wrote a script that would find all members of a security group via Powershell but something I didn’t discuss is dealing with nested groups. This script was written with the idea in mind to find ALL members of a group, computers and users as well as the nested members. That being said it’s ...

SCCM 2012R2 – My Clients aren’t getting a deployment.

The Question:  Recently during some other unfortunate SCCM shenanigans someone brought up the fun problem where they thought that software was randomly hit or miss deploying to machines in a collection. They even thought in some cases the software was installing but not reporting back that it had installed. Now reading that last sentence I’m ...

Adding E-Mail Property in AD

A few months back I worked on a project to configure a password manager that was managing accounts across multiple domains without a trust. The Problem: This password management software was actually pretty cool. It’s able to match user accounts in its secure data base using a particular active directory attribute. In this case the ...

Protected Groups In Active Directory

The Question: This morning we hired a new and wonderful guy for our Help-desk and when setting up this persons account a strange oddity occured that caused one of the other helpdesk workers to come over to me and ask, “Hey why can’t I reset this new guys account? I can reset anyone else’s account ...

Powershell Members of a Group

Every now and again there comes a need to get the members of a group and manipulate that data in some fashion. Now there are many ways to skin this cat and work with this data from VBscript, to utilizing DSquery to Quest Powershell CMDLETS to just raw powershell cmdlets. Rather than spend time writing ...

Browse Categories