Active Directory
I'm now Microsoft MVP Identity and Access! Paid Members
I'm proud to announce that I've been awarded the title of Microsoft MVP (Most Valuable Professional) in the 'Identity & Access' category. It's a real honor to receive this recognition from Microsoft and join the MVP circle. I'd like to
Je suis désormais Microsoft MVP Identity and Access ! Paid Members
Je suis fier et humble d'annoncer que j'ai reçu le titre de Microsoft MVP (Most Valuable Professional) dans la catégorie 'Identity & Access'. C'est un véritable honneur de recevoir cette reconnaissance de la part de Microsoft et rejoindre le cercle des MVP.
Download Road to Santa Cloud 365 Winter 2023 PDF Paid Members
In December 2023, I shared a series of #RoadToSantaCloud365 posts on my social networks with Microsoft 365 as the theme. For a better reading experience, I've compiled all these publications in a PDF. As with the one on AD, this PDF is available free of charge. All you
Télécharge Road to Santa Cloud 365 Hiver 2023 en PDF Paid Members
En décembre 2023, j'ai partagé sur LinkedIn une série de publications #RoadToSantaCloud365 avec pour thème Microsoft 365. Pour une meilleure expérience de lecture, j'ai rassemblé l'ensemble de ces publications dans un PDF. Comme pour celui sur l'AD, ce PDF est disponible gratuitement.
Télécharge le cahier de vacances AD été 2023 en PDF Paid Members
Cet été 2023, j'ai partagé sur LinkedIn une série de publications centrées sur un "cahier de vacances" dédié à Active Directory. Ces posts ont suscité beaucoup d'intérêt et ont donné lieu à des discussions enrichissantes. Toutefois, je suis conscient que LinkedIn n'est
Download the AD Summer Workbook 2023 in PDF Paid Members
This summer of 2023, I shared a series of posts on LinkedIn/Twitter/Mastodon focused on a "summer workbook" dedicated to Active Directory. These posts have garnered a lot of interest and led to enriching discussions. However, I understand that these social networks may not be the ideal
Impact use Set-ADDefaultDomainPasswordPolicy Paid Members
CMDlet poses a problem if several GPOs with password settings The CMDlet Set-ADDefaultDomainPasswordPolicy achieves two things: * modification of the associated Active Directory attribute * file modification \\<sysvolPath>\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Microsoft\Windows NT\SecEdi\GptTmpl.inf However, if the command modifies an attribute that is
Add an object temporarily to an AD group Paid Members
When using Active Directory, it may be necessary to temporarily add a user to a group. This is made possible by the Privileged Access Management feature. This article presents the different ways of adding a user to a group for a period of one hour. Although the article focuses on
Enable PAM (Privileged Access Management) in Active Directory Paid Members
This feature requires DCs and a forest functional level 2016. Once this feature has been activated, it cannot be deactivated. To activate : Enable-ADOptionalFeature "Privileged Access Management Feature" -Scope ForestOrConfigurationSet -Target tondomaine.com Activation causes the following changes in AD: * The attribute msDS-EnabledFeature of each NTDS Sttings
Creating dynamic AD objects Paid Members
Create AD dynamic user # L'objet sera supprimé dans une heure (3600 secondes) $TTLSeconds = 3600 $objectType = 'user' $objectName= 'DynamicUser01' # Choisir l'OU $destinationOu="OU=Users,OU=Dynamic,DC=ad,DC=itprotips,DC=com" $destinationOuObject = [ADSI]("LDAP://$destinationOu") $dynamicObject = $destinationOuObject.Create(
Get AD groups with temporary members Paid Members
Problem with -ShowMemberTimeToLive parameters To get temporary group members, you can use the built-in CMDlet: Get-ADGroup "YourGroup" -Property member –ShowMemberTimeToLive However, this CMDlet presents an issue: if your group exceeds 1500 members, the command becomes ineffective, as it only returns the TTL attribute for the initial
Detect the creation of AD dynamic objects Paid Members
When a dynamic object expires, it is completely deleted and does not go through the AD recycle bin. It is also not visible in replication metadata. Monitoring creation events is important to ensure that these objects are not used for malicious activities. First of all, you need to configure auditing
