Active Directory
Out of the band updates for November 2022 updates Paid Members
Microsoft has released optional out-of-band (OOB) updates to fix known issues with Kerberos sign-in failures and other authentication problems on domain controllers. These problem arise after installing November 2022 Cumulative Updates. To the remind, the November updates (KB5021131) were here to fix CVE-2022-37966. With them,
KB5021131 - How To Detect RC4 Accounts Paid Members
In the Microsoft article about the November 2022 updates KB5021131 for CVE-2022-37966, Microsoft provides a detection rule: ((msDS-SupportedEncryptionTypes & 0x3F) != 0) && ((msDS-SupportedEncryptionTypes & 0x38) == 0) This rule is not an expression you can user as-is with Get-ADUser or Get-ADObject. If you
How to get Microsoft Technet Gallery scripts Paid Members
Microsoft closed Technet Gallery and Script Center in early 2021. On this page, you will find a selection of scripts. Please note, however, that the licenses for some scripts do not permit free distribution. If you are seeking any specific script from Technet, feel free to contact me – I have
WMI Filter to identify 32 and 64 bits Paid Members
A lot of bad WMI filter on the Internet I create Group Policy Objects for years and I am often consulted to solve GPO issues. Lately I had to debug GPOs created by an IT admin. This GPO has applied randomly on the workstations. All these GPO use the following
Filtre WMI pour identifier 32 et 64 bits Paid Members
Beaucoup de mauvais filtres WMI sur Internet Je crée des objets de stratégie de groupe depuis des années et je suis souvent consulté pour résoudre les problèmes de GPO. Dernièrement j’ai dû déboguer des GPO créés par un administrateur. La particularité de cette GPO est s’appliquent de manière
Remove cached password on RODC Paid Members
Microsoft FAQ The FAQ on Technet said: There is no mechanism to erase passwords after they are cached on an RODC. If you want to clear a password that is stored on an RODC, an administrator should reset the password in the hub site[…] https://learn.microsoft.com/en-us/
Effacer un mot de passe mis en cache sur un RODC Paid Members
Mise en cache du mot de passe sur RODC La FAQ sur le Technet indique : There is no mechanism to erase passwords after they are cached on an RODC. If you want to clear a password that is stored on an RODC, an administrator should reset the password in the
Tester authentification AD avec PowerShell Paid Members
Tester un mot de passe Il est parfois nécessaire de tester des identifiants Active Directory afin de valider la conformité du login ou du mot de passe. Par exemple suite à la création en masse d’utilisateurs. Les actions les plus souvent utilisées pour tester sont la connexion à un
Test AD authentication with PowerShell Paid Members
Test password Sometimes, it is useful to test Active Directory credentials to validate the login or the password. For example, following the bulk creation of users. The most commonly used actions is connecting to a remote desktop (RDP) or connecting to a webmail. However, either the number of login to
PowerShell - Tester si un objet AD existe Paid Members
Point d’attention sur le module AD Lors du développement de scripts PowerShell pour Active Directory, il est souvent utile de tester si un objet AD (utilisateur, ordinateur, groupe) existe ou non. Premièrement, il faut installer le module Active Directory. Sur les dernières versions de PowerShell livrées avec Windows Server
Powershell - Test if AD object exists Paid Members
Be careful about the AD module When building PowerShell scripting with Active Directory, it is often useful to check if an AD object (user, computer, group) is present or not. First, you need to install PowerShell AD Module. On the latest versions of PowerShell shipped with Windows Server 2016 and
Install PowerShell Active Directory module Paid Members
To run PowerShell command for Active Directory (Get-ADUser, Get-ADComputer, Get-ADGroup, New-ADUser, etc.), the PowerShell module must be on the computer (workstation or server). There are two methods: 1. with the Active Directory PowerShell module installation. It depends on your Windows version 2. with module import via
