Notes of an IT Pro
The fine-grained password policies feature was introduced in Windows Server 2008. It allowed organizations to define more than one password and account lockout policy in a single domain, and apply those policies to different sets of users. Prior to Windows…
Read more
This is a step-by-step guide on how to create the first domain controller in a new Windows Server 2012 R2 forest. If you are going to perform a test lab of any kind, involving Windows servers, you will most certainly…
Read more
Occasionally you will have to install appliances and applications, which will not utilize Kerberos, SASL or NTLM to communicate with Active Directory Domain Services. They will rather use simple BIND, which exposes the users’ credentials in clear text. So anyone…
Read more
Adding printers can be cumbersome for non-tech savvy users. Fortunately, you can use the Printer Location Tracking feature to make this process easier for them. When you enable PLT, only printers in the users’ own location will be listed in…
Read more
In the previous blog post we looked at how to retrieve values of user properties/attributes from Active Directory. We briefly even touched on how to retrieve group membership of users, and how to output this information in different formats, such…
Read more
A PowerShell module for Active Directory was released with PowerShell 2.0, the version that shipped with Server 2008 R2. This module includes several cmdlets that let you work directly with Active Directory objects. In this blog post, we will look…
Read more
A user profile describes the configuration for a specific user, including the user’s environment and preference settings. You can specify a Remote Desktop Services-specific profile path and home folder for a user connecting to a Remote Desktop Session Host server….
Read more
Group Policy preferences is a feature that was included with Server 2008, and has been a part of Windows Server ever since. In this blog post, we will look at how to map drives through Group Policy Preferences and item-level…
Read more
Before Windows Server 2008, organizations had to rely on third-party products to define different password and account lockout policies for different sets of users in a domain. In Server 2000 and 2003, there could be only one password and account…
Read more
In Windows XP, and Windows Server 2003, you would get a notification at logon when (by default) 14 days remained until your Active Directory user’s password expired. In Windows 7 and Windows Server 2008 R2, Microsoft has changed this feature….
Read more