Offline Files, Work Folder or OneDrive for Business?
Offline Files, Work Folder or OneDrive for Business- what will it be for you? Very often this question arises in daily routine. What are the pros and the cons of...
Articles related to Active Directory administration. (user, computer and group management)
Anonymous Access to Active Directory
Usually there is an option to access Active Directory anonymously- anonymous access. Normally you do not need it. But there are exceptions to every rule. This article will give you...
Domain Migration: “Access Denied“ after Changing Group Type
During an AD domain migration in a customer environment I faced the problem that group permissions for file shares did not work any more. This is why. (more…)
AD PowerShell Basics 3: Set-ADUser
Use the PowerShell Cmdlet Set-ADUser to change user attributes in Active Directory. With Set-ADUser you can: – Change attributes of a single user – Change attributes of several prefiltered users...
Kerberos: Problems after Schema Update to Server 2012 R2
After a Schema Update for Windows 2008 R2 on Windows 2012 R2 we had a problem with an older application on Windows 7. But the domain functioning level was unchanged....
Read Kerberos Token with PowerShell
Active Directory offers you many different ways of authentification. Most common are NTLM and Kerberos. This article is about how to read the Kerberos Token with .Net classes in PowerShell....
NTFS: Users can see folders without “Read” permissions
Sometimes Read and Write permissions that users get through authorization groups do not work properly on the file servers: – Users without “Read” permissions can see folders – Users without...
PowerShell: Finding the Next Closest Domain Controller
I am currently supporting a bigger enterprise with their Active Directory Migration. A colleague asked me “Could you write a Powershell script to comb the whole AD Forest?” “Of course”,...
AD PowerShell Basics 1: New-ADUser
In this small series, I want to introduce the most common Active Directory PowerShell cmdlets to you like New-ADUser. With the cmdlet New-ADUser you can: – Create new users, –...
DCPROMO: Domain Controller promotion fails
Lately, I wanted to add a new domain controller to a domain. At first, the Configuration Wizard ran as expected. But just as the process was about to come to...
Dynamic AD Groups
Dynamic Entra ID Groups
