active directory

active directory

Download the AD Summer Workbook 2023 in PDF

This summer of 2023, I shared a series of posts on LinkedIn/Twitter/Mastodon focused on a "summer workbook" dedicated to Active Directory. These posts have garnered a

active directory

Impact use Set-ADDefaultDomainPasswordPolicy

CMDlet poses a problem if several GPOs with password settings The CMDlet Set-ADDefaultDomainPasswordPolicy achieves two things: * modification of the associated Active Directory attribute * file modification \\<sysvolPath>\{31B2F340-

active directory

Add an object temporarily to an AD group

When using Active Directory, it may be necessary to temporarily add a user to a group. This is made possible by the Privileged Access Management feature. This article presents the

active directory

Enable PAM (Privileged Access Management) in Active Directory

This feature requires DCs and a forest functional level 2016. Once this feature has been activated, it cannot be deactivated. To activate : Enable-ADOptionalFeature "Privileged Access Management Feature"

active directory

Creating dynamic AD objects

Create AD dynamic user # L'objet sera supprimé dans une heure (3600 secondes) $TTLSeconds = 3600 $objectType = 'user' $objectName= 'DynamicUser01' # Choisir l'OU $destinationOu="

active directory

Get AD groups with temporary members

Problem with -ShowMemberTimeToLive parameters To get temporary group members, you can use the built-in CMDlet: Get-ADGroup "YourGroup" -Property member –ShowMemberTimeToLive However, this CMDlet presents an issue:

active directory

Detect the creation of AD dynamic objects

When a dynamic object expires, it is completely deleted and does not go through the AD recycle bin. It is also not visible in replication metadata. Monitoring creation events is

active directory

Property set Personal Information and Active Directory security and governance

Active Directory (AD) is an essential tool for organizations to manage user access and authorization to various resources. When it comes to Active Directory, there are many features that are