Reading Time: < 1 minuteRecently at work, I have been involved on a project that has used GPO to lock down End User Devices and also deploy shortcuts to the users desktops. As we wanted the shortcuts to display for all users we decided to publish the shortcuts to the public desktop. All was Read more
Reading Time: 2 minutesRecently at work, I was adding a new Domain Controller to an existing forest and I just could not get past “Creating the NTDS Settings” I have done this many times in the past and never had this issue. After trying a few times and a lot of waiting, I Read more
Reading Time: 3 minutesSometimes, as a sysadmin you may need to move the Active Directory database and / or log files from one location to another. This may be due to your Domain Controller running out of space. The location you choose to move the files to may be a different folder or Read more
Reading Time: 4 minutesWhat is new in Active Directory on Server 2016? We have a few new features to play with in Windows Server 2016 regarding Active Directory. Some of them being time-based group membership, privileged access management, and Microsoft Passport to name a few. I am not going to go into too Read more
Reading Time: 2 minutesIn this article, I am going to show you how to Join your Nano Server to the domain. We can only join your Nano Server to the domain once it has an IP address and DNS set up. You can view how to do that here. Now we have our Read more
Reading Time: 3 minutesEvery Sysadmin has had to troubleshoot group policies at least once. I know I have had to do this many, many times in the past. One of the first tools I go to when troubleshooting group policy from a client machine is GPResult. GPResult is a command line utility that Read more
Reading Time: 2 minutesI have noticed that there is a lot of confusion around how to name an Active Directory Domain primarily because the best practices have changed. Picking a name for your Active Directory Domain should be planned carefully as it is very hard to change. Although it can be done. Before Read more
Reading Time: 5 minutesMicrosoft released this update to fix a man in the middle attack using Group Policy Update, unfortunately it appears that it has also changed the behaviour in how Group Policy is applied. If you use security filtered Group Policy that are applied to users AND you have removed “Authenticated Users” Read more
Reading Time: 2 minutesRecently I have been tidying up Active Directory. We have a lot of users that the helpdesk have disabled but not removed, they have not even moved them to a new OU. Because of this I decided to manually remove each disabled user whilst comparing it to a list of Read more
Reading Time: 3 minutesIt is always good practice to keep you Active Directory clean. One easy way to keep your Active Directory clean is by removing stale computer accounts periodically. I have always found that when Windows machines are disjoined from a domain, rebuilt with a different computer name, etc, removing computer accounts Read more