Feb 14
Just some quick code to get the OU Name of the computer we run the script on.
VBS:
Function GetComputerOU
Dim objSysInfo: Set objSysInfo = CreateObject("ADSystemInfo")
Dim objComputer: Set objComputer = GetObject("LDAP://" & objSysInfo.ComputerName)
Dim objOU : Set objOU = GetObject(objComputer.Parent)
GetComputerOU = objOU.OU
End Function
Wscript.Echo GetComputerOU
PowerShell:
function GetComputerOU
{
$SysInfo = New-Object -ComObject "ADSystemInfo"
$Computer = [ADSI]("LDAP://{0}" -f $SysInfo.GetType().InvokeMember("ComputerName", [System.Reflection.BindingFlags]::GetProperty, $null, $SysInfo, $null))
return ([ADSI]$Computer.Parent).OU
}
GetComputerOU
Jan 02
When installing ChangeAuditor form Quest (a next, next finish installation) I received an error when I tried to logon with the client but I did not get any error during or after the installation. I got the following error:
Info","Could not connect to net.tcp://<FQDN>.local:49309/Service. The connection attempt lasted for a time span of 00:00:02.0779654. TCP error code 10061: No connection could be made because the target machine actively refused it <IPadress>:49309. "
Continue reading »
Sep 02
I am currently creating a PowerShell script that creates a user with all needed Active Directory attributes, Exchange mailbox, (TS) Home- and Profile directories and so on.
In such a script you can easily get failures because of Active Directory replication.
Continue reading »
Sep 02
Function below can be used to check if a given Username exists in Active Directory:
function UserExists([string]$Username)
{
$strFilter = "(&(objectCategory=person)(sAMAccountName=$Username))"
$objDomain = New-Object System.DirectoryServices.DirectoryEntry
$objSearcher = New-Object System.DirectoryServices.DirectorySearcher
$objSearcher.SearchRoot = $objDomain
$objSearcher.PageSize = 1000
$objSearcher.Filter = $strFilter
$objSearcher.SearchScope = "Subtree"
$colResults = $objSearcher.FindAll()
return [bool]($colResults -ne $null)
}
Jul 04
A few days ago I wrote about how RID Allocation Pools work in Active Directory (see AD Internals: Display RID Allocation Pools)
The article includes a script to dump all RID information for the whole domain. I will be using this script, rIDump.ps1 in this article.
In my test environment I had a problem with the RID Allocation Pool on one of the Domain Controllers. I noticed this because I had some duplicate SID’s in the domain.
So I needed to force this Domain Controller to re-allocate a block of RID’s and I wrote a PowerShell script, rIDAlloc.ps1, to do that:
Before I go on with the script I will explain how we can force a Domain Controller to re-allocate a RID Pool.
First we need to obtain the Domain SID, we can do this by grabbing the objectSid attribute:
$objDomain = New-Object System.DirectoryServices.DirectoryEntry
$objDomainSid = $objDomain.objectSid
Then we need to write the Domain Sid to a special attribute called invalidateRidPool on the directory root (RootDSE).
Continue reading »
Jun 27
I encountered another interesting error during Exchange 2010 installation today. During the Organization Preparation I got the following error:
The setup.log doesn’t give us much more detailed info: Continue reading »
Jun 24
Today I was testing the installation of Exchange 2010 in a VMWare sandbox environment. We created the sandbox to test migration from a 2003 AD and Exchange environment to 2008 R2 with Exchange 2010.
We used a P2V to get real copies of the Active Directory and the AD upgrade to 2008 R2 was already tested.
But during the Exchange installation in the sandbox I got the following error:
Continue reading »
Apr 20
In System Center Operations Manager 2007 R2 (SCOM) alerts and warnings are generated and collected in the ‘Active Alerts’ view. A useful function is the ability to assign an alert to a user, this enables the IT department to delegate the alerts to specific administrators. This way a storage administrator can solve the storage problems, and the DBA’s can solve database alerts.
In the properties of an alert (or warning) a field Owner is present. Next to the field a button ‘Change’ which opens a search dialog for looking up users in Active Directory. Although the AD search is optional (you can type each value without verification) you do need a domain joined computer for this feature.
Continue reading »
Mar 21
When you want to replace the old virtual network card for a VMXNET3 network card of a Domain controller (DC) and when the DC is also DNS server (AD integrated) and the only one in the domain you may encounter some problems. Yesterday i replace the old network card for a VMXNET3 adapter in a DC that was the only DC in the Domain (yes i hear you 1 DC = no DC ) and i encounter the following errors on the server:
Continue reading »
Loading ...