During a recent migration of Exchange 2003 to Exchange 2010 we needed to find out how many users had a mailbox and were not disabled. In the end I used Active Directory Users and Computers snap in to create a saved Query. 1. Open ADUC and right click on Saved Queries and chose new –> …
We had a request come through which asked us to get all the users that were created after a certain date. A good tool for this is the ADFind.exe which can be obtained from here: http://www.joeware.net/freetools/tools/adfind/index.htm Download and extract it to a folder, open a administrative command prompt, browse to the location that you extracted …
You receive the following error when logging into a client machine on your domain with a specific user account: “Your account is configured to prevent you from using this computer.” Solution: Ensure the user account is not configured to only logon to specific machines via Active Directory Users and Computers:
Here’s a quick command you can run in AD PowerShell that will give you a list of all Expired accounts in your domain. Search-ADAccount -AccountExpired | fl Name , AccountExpirationdate This will give you a list like below. Name : User1 AccountExpirationdate : 30/03/2011 00:00:00 Name : User2 AccountExpirationdate : 23/04/2011 00:00:00
Here’s a quick command you can run in AD PowerShell that will give you a list of all disabled accounts in your domain. Search-ADAccount -accountdisabled | FL SamAccountName This will give you a list like below. SamAccountName : User1 SamAccountName : User 2 SamAccountName : User3 SamAccountName : User4
If you are using this very useful tool to change users home directory paths in AD and you need to input the path according to the user name, you may find that the regular %username% does not work with ADModify. The username value that the program does understand is: %’sAMAccountName’% For example a users home …
Recently we got tasked with protecting all objects in a specific OU from accidental deletion. There were about 60 users in this OU so we wanted to script this and by scripting this we would also be able to set up a scheduled task so that the change got applied to new users who got …
Just a quick useful command that you can run to find out which DCs hold which FSMO Role. “netdom query fsmo”
We had the following alert appear on our Exchange Server recently. “Process powershell.exe (PID=19640). Object [CN=Username,OU=Mailboxes,OU=OU,DC=Domain,DC=com]. Property [HomeMTA] is set to value [Domain.com/Configuration/Deleted Objects/Microsoft MTA DEL:d016338e-12ce-409b-a82a-da6217c8e67f], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.” Basically the issue is that the user referenced in …
We came across an issue recently where we were receiving Event ID 2937 in our event logs in regards to the offline address pointing to the deleted objects container in Active Directory. Process powershell.exe (PID=14836). Object [CN=Exchange 2010 OAB,CN=Offline Address Lists,CN=Address Lists Container,CN=Name,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=servername,DC=net]. Property [PublicFolderDatabase] is set to value [servername.net/Configuration/Deleted Objects/PF DEL:f03f8b36-7d36-4d3d-98a7-a0f6e2f325a6], it is …