Did you know inactive user accounts can lead to major security risks? Center for Internet Security says “it is easier for a threat actor to gain unauthorized access through valid user credentials than through hacking accounts”. This is just one reason why you should be searching Active Directory for inactive user accounts and disabling them … Read more
Do you need to demote a domain controller? Is your domain controller dead and you want to manually remove it? No problem. In this guide, I’ll walk through two options to remove a domain controller. If you still have access to the server then option 1 is the preferred choice. Option 1: Demote a Domain … Read more
In this guide, you will learn how to enable the Windows lock screen using group policy. In addition, I’ll show you how to disable (exclude) the lock screen policy from specific users and computers. I will walk through creating a policy to lock the screen after 15 minutes of inactivity. You can change the timeout … Read more
There are times when you need to determine which domain controller you have authenticated to. This can be helpful for a number of reasons such as troubleshooting group policy, slow logins, application issues, map network drives or printers, and so on. For example, recently I ran into an issue where single sign-on was not working … Read more
This page provides a mapping of common Active Directory fields to its LDAP attribute name. When using Active Directory users and computers you will see the Microsoft provided friendly names. Under the hood of Active Directory these fields are actually using an LDAP attribute. You can see the LDAP attribute name in the attribute editor. … Read more
In this post, you will learn how to find the source of account lockouts in Active Directory. I’ll show you two methods, the first one uses PowerShell and the second is a GUI tool I created that makes it super easy to unlock user accounts and find the lockout source. Users locking their accounts is … Read more