Manage local Account
Manage Local Account Password An element that is rarely changed it’s the password of local accounts. It is common to put the same password for a local administrator on all workstations and servers. This has
Problem with Bitlocker
Problem Bitlocker During a Bitlocker project at a customer I had a problem with the storage of bitlocker recovery key in Active DirectoryAfter you set up group policy which configured the desktop and laptop client
Problem Active Directory
Problem Active Directory Migrating Active Directory at one of my clients, it seems interesting to share a solution to a problem. When you update the schema to add the RODC objetcts (adprep /rodcprep), an error 0x3
Incoherence between SYSVOL/AD
During the AD audit at a client’s site, I encountered the following problem: The gpo tool command does not raise replication issues at GPO levels. However, when preparing a Group Strategy Result report, a
Create PSO
Create PSO An AD domain contains a password policy that is applied to all users. However, in some cases, it is necessary to apply a different policy to one or more users.
Deploy MBAM
Deploy MBAM MBAM (microsoft bitlocker administration and monitoring) permit to secure and protect your desktop and laptop. You can deploy it from operating system and store key on Active Directory. However, if you
Security fix
Security fix Microsoft has issued a security bulletin for a flaw in the Secure Channel. With this vulnerability the attacker has the possibility to force the downgrade of the SSL/TLS version used.
Activate DFSR for SYSVOL
After migrating your domain controllers under Windows Server 2003 to a later version, it is interesting to enable SYSVOL replication using DFSR. This will allow a block mode replication, therefore much more
Create planified task
Thanks to the Technet team for this great article: “Configuring Scheduled Tasks in Powershell”. The creation of a task planned by GPO is not always feasible, the workstation may not be a member of the
PowerShell Script
I take advantage of this post to give the links of the script I made available on technet US. Script for Active Directory This powershell script allowing the retrieval of certain LDAP attributes from one or more AD