When you create a new user in an Active Directory domain, sometimes you need to make them a member of a large number of groups. It is quite tiresome to…
Active Directory: Core Concepts, Architecture and Best Practices
What Others Are Reading in Active Directory
Zerologon (CVE-2020-1472): Critical Active Directory Vulnerability
In August 2020, Microsoft released an update to fix a critical Windows Server vulnerability in Active Directory — CVE-2020-1472 (more known as Zerologon) . This update was successfully installed on…
Windows: Block Remote Network Access for Local User Accounts
Using local accounts (including the local administrator) to access another computer over network in Active Directory environments is not recommended on a number of reasons. The same local administrator username…
Configuring Password Expiration Notifications for AD Users
Although Microsoft has removed the requirement to periodically change user passwords from its security baselines, most on-premises Active Directory domains have a policy that specifies the maximum age of a…
Using Saved Queries in ADUC MMC (Active Directory User and Computers)
The Saved Queries in Active Directory Users and Computers (ADUC) MMC console allow you to create complex LDAP filters to select Active Directory objects. These queries can be saved, edited,…
Active Directory user accounts have a special thumbnailPhoto attribute that can be used to store a user’s photo. These photos can be displayed as user avatars in apps such as…
Creating Desktop Shortcuts using Group Policy (GPO)
Using Group Policies, you can create a shortcut to a specific application and deploy it to the desktops of all users in the domain (or to specific users only). This…
Restoring Active Directory Domain Controller from a Backup
In this article, we’ll show how to restore the Active Directory domain controller from a previously created System State backup (see the Active Directory backup post), and discuss the types…
Unable to Access SYSVOL and NETLOGON folders from Windows 10
I noticed some strange things when trying to access SYSVOL and NETLOGON folders in the domain from Windows 10/Windows Server 2016. When I tried to access the domain by the…
Backing Up Active Directory with Windows Server Backup
In this article, we’ll cover how to back up Active Directory domain controllers and enable automatic AD backups using PowerShell and the built-in Windows Server Backup feature.