If Active Directory is not routinely cleaned up it can get cluttered with old computer accounts. This can lead to big problems such as inaccurate reporting, group policy slowness, software distribution and patching issues, syncing and so on. In medium to large business, you may be surprised at how many unused computers are left in…Continue Reading
To remotely manage Active Directory, DNS and DHCP you will need the Remote Server Administration Tools (RSAT) installed. In addition, the RSAT tools allow you to manage: Installed server roles and features File Services Hyper-V Additional Powershell Functionality RSAT can only be installed on Windows Pro and Enterprise editions, it is not supported on the…Continue Reading
Today I’m going to show you 2 simple ways to find all locked user accounts in Active Directory. When you have a large Active Directory database with hundreds or thousands of users it can be a challenge hunting down locked accounts. These methods can also be useful in auditing and monitoring Active Directory accounts.Continue Reading
In this post, I’m going to show you two simple methods for finding a user’s last logon time. It is common for HR and supervisors to request when an employee last logged in to the network. System administrators may also use this for security forensic reasons. Every time you log into a computer that is…Continue Reading
I think we can all agree, troubleshooting random account lockouts can be a major pain.
A user calls helpdesk, you unlock their account, 5 minutes later they call again with another lockout. At this point, everyone is frustrated and no one knows what the heck is causing the lockouts.
I’ve got good news.
There are account lockout tools that can assist and quickly tracking down the source of the issue.
In this post, I’ll walk you through the exact step by step process I use for tracking down the source of random account lockouts.Continue Reading
Setting user accounts password to never expire is not recommended and can be a security risk. There are times when this can’t be avoided such as using a service account. Many vendors require a service to run under a service account that has a non expiring password. For regular user accounts, it’s best practice to…Continue Reading