Recently I’ve faced quite an interesting problem when some users are unable to authenticate on some domain services due to exceeding the maximum size of the Kerberos ticket. In this…
Active DirectoryPowerShellWindows Server 2022
Checking Active Directory Domain Controller Health and Replication
Active Directory is a reliable yet critical service, and the functionality of the entire enterprise network depends on its proper operation. The proper functioning of Active Directory requires constant monitoring…
Active DirectoryPowerShellWindows Server 2016Windows Server 2019
Windows Server Core: Installing Active Directory Domain Controller
Windows Server Core is a good platform to host the Active Directory domain controller role due to fewer resource requirements, increased stability and security (due to less code and updates).…
Active DirectoryGroup PoliciesWindows 10Windows 11Windows Server 2022
Updating Group Policy Administrative Templates (ADMX)
Group Policy Administrative Templates contain settings that allow administrators to conveniently configure various Windows settings, components, and third-party software. In this article, we will look at how to install new…
Windows saves (caches) domain user credentials locally so users can log in without domain access if needed. This feature enables users to log on to their computers even when AD…
In this article we will look at how to find out the date a user was created in Active Directory; how to use PowerShell to get information from the domain…
Active DirectoryPowerShellWindows Server 2016Windows Server 2019
Time-Based (Temporary) Group Membership in Active Directory
The version of Active Directory in Windows Server 2016 introduces an interesting feature that allows you to temporarily add a user to an AD security group. This feature is called…
Active DirectoryPowerShellWindows 10Windows Server 2019Windows Server 2022
Using Managed Service Accounts (MSA and gMSA) in Active Directory
You can use Managed Service Accounts (MSA) to securely run services, applications, and scheduler tasks on servers and workstations in an Active Directory domain. The MSA is a special type…
Active DirectoryPowerShell
Set-ADUser: How to Change User Properties in Active Directory with PowerShell
The Set-ADUser cmdlet allows to modify user properties (attributes) in Active Directory using PowerShell. Traditionally, a graphic MMC snap-in dsa.msc (Active Directory Users and Computers, ADUC) is used to edit…
You can access the data in an Excel file directly from within PowerShell. Although PowerShell has built-in cmdlets for importing (Import-CSV) and exporting (Export-CSV) tabular data from/to CSV files, the…