Category: Scripting

Home of all things scripting. While we will put everything that is specific to a post in that post. This is the repository of… well many things.

SCCM Collection Relationships

The Problem: Back in SCCM 2012R2, this wonderful feature was added where you could leverage these new fancy rules called ‘Include’ and ‘Exclude’ collections. OK, so it is wonderful, at least until you try to delete a collection that has been leveraged as an include or exclude collection rule. If it is you get this ...

Enable the Active Directory Recycle Bin

Ever have gut-clenching moments when you realize you deleted the wrong object in Active Directory? Maybe you keep a bottle of antacid in your desk drawer for exactly that reason. Well not anymore. Let’s talk about a wonderful feature in Active Directory implemented back in the 2008 version of Active Directory. It’s called the ‘Recycle ...

SCCM Collection Evaluation Duration – SQL Query

The Problem: My collection membership seems to take forever to update! Also, for some reason the console seems SUPER slow lately. One of the COMMON Solutions Collection evaluation is a common sticking point that causes major performance issues in any well constructed environment. In fact it’s probably the number one cause of console slowness and ...

Get all members of a group including nested group membership – Powershell

Previously I wrote a script that would find all members of a security group via Powershell but something I didn’t discuss is dealing with nested groups. This script was written with the idea in mind to find ALL members of a group, computers and users as well as the nested members. That being said it’s ...

Adding E-Mail Property in AD

A few months back I worked on a project to configure a password manager that was managing accounts across multiple domains without a trust. The Problem: This password management software was actually pretty cool. It’s able to match user accounts in its secure data base using a particular active directory attribute. In this case the ...

Powershell Members of a Group

Every now and again there comes a need to get the members of a group and manipulate that data in some fashion. Now there are many ways to skin this cat and work with this data from VBscript, to utilizing DSquery to Quest Powershell CMDLETS to just raw powershell cmdlets. Rather than spend time writing ...

Powershell Change The Local Administrator Account/Password

Back in May of 2014 Microsoft released a windows update – MS14-025 – that removed the ability to push out passwords to workstations remotely using group policy due to issues with elevation of privilege. If that patch is applied it’s a rather large pain to change the local admin after that without something like SCCM in ...