ActiveDirectory – 梦想照进现实

Setting an Active Directory User Account to Expire at a Specific Time of Day with PowerShell

Notice that in Active Directory Users and Computers (ADUC) when setting the expiration of a user account, there’s only a way to have the account expire at the end of a specific day:

How to View Group Policy Applied to You

When you try to make some system changes on your computer, you may get the following or similar error message basically stating that your operation is being blocked by group policy. “The command prompt has

Join Computer to Domain with Desired Computer Name and OU

Step #1: This is the simplest method to add a computer to a domain. In this example you will be prompted for credentials followed by the required reboot. Add-Computer -DomainName “your.domain.here” Restart-Computer Step #2: If

Domain Controller Role Queries and Synchronization Relationship Queries

netdom query fsmo 查询五大角色 dsquery server 显示所有域控查看架构主机角色 dsquery.exe server -hasfsmo schema 查看域命名主机角色 dsquery.exe server -hasfsmo name 查看RID 主机角色 dsquery.exe server -hasfsmo rid 查看PDC 模拟主机角色 dsquery.exe server -hasfsmo pdc 查看基础架构主机角色 dsquery.exe server -hasfsmo infr whoami

Get users who haven’t logged in longer than X days (LastLogonDate)

This script might be useful in getting users that haven’t logged for a longer amount of time. It is checking lastlogondate property: Please be aware that it gets a date only from the specified Domain

Latest

梦想照进现实

Tag: ActiveDirectory

Setting an Active Directory User Account to Expire at a Specific Time of Day with PowerShell

How to View Group Policy Applied to You

Join Computer to Domain with Desired Computer Name and OU

Domain Controller Role Queries and Synchronization Relationship Queries

Get users who haven’t logged in longer than X days (LastLogonDate)