Skype for Business Top Tip – Making Life Easy with(out) ADSI Edit

Have you ever been in that situation where you need to make a change to an AD attribute of a Lync / Skype for Business contact object, or RGS object, or any object other than a standard user? Consider the scenario where you want to hide Application Contacts from the user’s address book. These contacts… Read More

Add Security Groups from Trusted Domain to Trusting Domain Local Groups

I needed a quick way to add domain global groups from a trusting domain to domain local groups in the trusting domain with the same name for a project I was undertaking. The trusting domain was Windows 2003 and we did not have access to any AD Powershell module in the trusting domain so the… Read More

Removing Foreign Security Principals from Groups

Today I had a requirement to migrate users and groups from a legacy domain to a new domain using ADMT. All legacy groups were domain local with members from other groups on other domains via existing trusts. Performing a migration of a Domain local groups using ADMT also migrates across members who have no user… Read More

Copy users from on Active Directory to another (no trust/ADMT)

I had a scenario whereby a customer wanted to migrate from SBS2003 to Server 2012 and Exchange 2013 in one hop. There was not enough resources to install and exchange 2010 migration server to move mailboxes over EWS and due to SBS constraints we cannot use ADMT to migrate as Domain Trusts cannot be made… Read More

Random Password Function Powershell

To generate a random password for Active directory you can use this function Function Get-RandomPassword(){ Param ( [int]$length=5 ) $alphabet=$NULL;For ($a=65;$a –le 90;$a++) {$alphabet+=,[char][byte]$a } $ascii=$NULL;For ($a=33;$a –le 126;$a++) {$ascii+=,[char][byte]$a } For ($l=1; $l -le $length; $l++){ $tempPassword += ($alphabet | Get-Random) $tempPassword += ($ascii | Get-Random) } return $tempPassword }   Even though the… Read More

Recover Bitlocker Recovery Password Powershell

If you use Bitlocker with Active Directory Recovery, then you can quickly recover the recovery password from AD using Powershell. Yes there is an RSAT plugin that will do the same thing, but I have been on servers that do not have this and I needed the password quick. $Bitlocker = Get-ADObject -Filter {name -like… Read More