There are times when you need to determine which domain controller you have authenticated to. This can be helpful for a number of reasons such as troubleshooting group policy, slow logins, application issues, map network drives or printers, and so on. For example, recently I ran into an issue where single sign-on was not working…

In this guide, I will show you how to add users to Active Directory security groups using PowerShell, ADUC, and by using the Bulk Group Management Tool. I will provide you with examples of adding a single user and multiple users to groups.  Example 1: Add a Single User to a Group using PowerShell Example…

In this guide, you will learn how to disable Active Directory user accounts.  First I will show you how to disable single and multiple user accounts using Active Directory users and computers console. Then I will show you how to disable user accounts by using PowerShell for a single account and multiple accounts from a…

In this guide, I’ll show you how to find nested groups and get nested group membership. First I’ll show you how to get nested group membership using PowerShell. Then I’ll show you the Group Membership report tool that can search all groups, a single group, all groups in an OU, or all users in an…

In this guide, I’ll show you how to remove users from the local administrator group using group policy.  I’ll also show you how to add users or groups into the local administrator group.  By using group policy you can gain control over admin rights and ensure no unwanted account is added into the local administrator…

This page provides a mapping of common Active Directory fields to its LDAP attribute name.  When using Active Directory users and computers you will see the Microsoft provided friendly names. Under the hood of Active Directory these fields are actually using an ldap attribute. You can see the ldap attribute name in the attribute editor. …