In this GPO troubleshooting guide, I’ll try to tell you about the typical reasons why a certain Group Policy Object (GPO) might not apply to an organizational unit (OU) or…
Active Directory: Core Concepts, Architecture and Best Practices
Using GPResult Command to Check Applied GPOs and RSoP Data
The GPResult.exe command-line tool is used to get a Resultant Set of Policy (RSoP) that is applied to a user and/or computer in an Active Directory domain. GPResult allows you…
How to Convert SID to User/Group Name and User to SID
SID (Security IDentifier) is a unique identifier that is assigned to users, groups, computers, or other security objects when they are created in Windows or Active Directory domain. Windows uses…
Get-ADUser: Find Active Directory User Info with PowerShell
The Get-ADUser PowerShell cmdlet allows you to get information about an Active Directory user, its attributes, and search among domain users. It is one of the more popular PowerShell cmdlets…
Configuring UserPrincipalName and UPN Suffixes in Active Directory
In this article, we’ll look at what UPN (UserPrincipalName) suffixes in Active Directory are, how to add alternative suffixes in an AD forest and change UPN suffixes of Active Directory…
Display System Information on Windows Desktop with BgInfo
If you manage a large number of servers or workstations running Windows, sometimes it is useful to display basic information about the operating system and environment right on the Windows…
How to Enable DNS Query Logging and Parse Log File on Windows Server
In this article, we’ll show how to enable DNS logging for all user queries on a DNS server running Windows Server, how to parse and analyze DNS logs. I faced…
Install and Configure a Read-Only Domain Controller (RODC) on Windows Server 2019/2022
The read-only domain controller (RODC) feature was first introduced in Windows Server 2008. The main purpose of the RODC is the secure installation of the own domain controller in remote…
Searching AD Groups, Users, and Computers using Wildcards
The task of searching for objects in Active Directory (users, groups, or computers) by name using some pattern, regular expression, or wildcard is not as obvious as it seems. The…
How to Rename an Active Directory Domain
In this short article, we will show you how to properly change an Active Directory domain name from test.com to resource.loc. In fact, it is not the best idea to…