View the metadata for an AD object to find out more details about when its specific attributes were modified. This is very handy when trying to troubleshoot details about a specific object.. See when and where an attribute was updated which can also help track down who made the change if the entry was captured in the domain controller event logs.. Read more »
Active Directory – Object Metadata
Missing Group Memberships in AD??
I ran into something really interesting today that took some time to figure out.. Thought I should post in case anyone else is puzzled by the same scenario (and so that I can remember later).
I was running queries for group memberships and found inconsistencies between what I was seeing in ADUC and what my queries were pulling back. In ADUC, I could see user accounts in a group that did not show up in the query results or when I looked in ADSIEDIT.
http://www.windowsitpro.com/article/outlook-web-access-owa/owa-vs-outlook-in-2010.aspx
http://www.windowsitpro.com/blogs/exchangeandoutlook/tabid/780/entryid/12813/Exchange-Server-2010-Adoption-Excitement.aspx
Automatic IIS log housekeeping
There is not much automation taking place in my current company. I’m working to automate as many processes as possible, and therefore increase our productivity. The article below was borrowed from the following link. http://www.808.dk/?code-iis-log-housekeeping
A good PowerShell resource.
Exchangepedia – Exchange Shell Quick Reference
Remote Shutdown Syntax
I don’t use this command often enough to remember the syntax, so here it is:
shutdown /r /m \\servername /t 000
Find out when your Password Expires
Few weeks ago I came across this question “How to find out an account’s password expiration date” in one of our internal mailing-list. This looks like a simple question, but when we tried to find the answer we realized it is not a trivial task. One of my colleagues pointed to this 22-printed page detailed MSDN article that describes how to find a user account’s password expiration date. The steps described in this article are a bit outdated. It does not take Fine-Grained Password policy (a new feature added in Windows 2008) into account while calculating the maximum password age. With the addition of fine grained password policy, this becomes an even more daunting task to do. Using AD Powershell this task can be achieved with ~40 lines of script-code. Here is function that calculates the password expiration date of a user object given its samAccountName, security identifier or DistinguishedName. Read more »
Reporting on ActiveSync
Exchange logs quite a bit of info about ActiveSync device partnerships and you can use this to create reports about the utilization of mobility features in your organization. Getting this data requires a couple of intermediate steps before you can export it to a CSV for processing in something like Excel (or another script). The PowerShell script below will export all of the ActiveSync device relationships in your organization. Keep in mind that this will include old relationships which are no longer active. Depending on how large your organization is and the number of device relationships out there, it may take a little while for the script to run. Read more »
Finding Mailboxes Homed on a particular Server or Database
The following sections offer a different method to find the mailboxes that are homed on a mailbox store. When you have determined that a particular account owns a mailbox on a particular store, you can either move the mailbox or disable the account.
