April 14, 2017 · 1 min read
Implement a simple three-tier isolation model in Active Directory using WMI filters, security groups, and Group Policies to restrict logon access by tier. Continue reading Active Directory – Simple Tier Isolation
March 28, 2017 · 2 min read
Use the Resultant Set of Policy (RSOP) tool to quickly identify which Group Policy Object is responsible for a specific setting on a computer or user. Continue reading How to find Active Directory Group Policy (GPO) that applies a particular setting
March 22, 2017 · 1 min read
Deploy a custom photo screensaver across your domain using Active Directory Group Policy Preferences, including registry settings, file deployment, and screensaver configuration. Continue reading Configure Photo Screensaver via Active Directory Group Policy
March 19, 2017 · 3 min read
A structured Active Directory delegation model using Delegation Groups and Role Groups to simplify permission management, improve visibility, and enable reuse across teams. Continue reading Delegation the proper way
February 24, 2017 · 3 min read
A comprehensive process for investigating Active Directory account lockouts, covering auditing configuration, source device identification using EventComb, Lockout Status, and ADAudit, plus preventive measures. Continue reading Active Directory Locked Account Investigation Process
January 11, 2017 · 3 min read
Deploy aspect-ratio-aware desktop backgrounds via Active Directory Group Policy Preferences using WMI-based environmental variables and file targeting. Continue reading How to apply a dynamic background via Active Directory GPP
March 29, 2016 · 1 min read
A VBScript that queries all Active Directory user objects and clears the manager attribute from each one using ADSI and ADO. Continue reading Clear all Active Directory users' manager attribute
July 1, 2015 · 1 min read
A batch script that automates the relocation of the Active Directory Sysvol folder on DFSR-replicated domain controllers following the official Microsoft procedure. Continue reading MoveSysvol – Automate the relocation of the Sysvol folder (DFSR Version)
March 14, 2014 · 1 min read
A C# tool to test passwords against Active Directory users using PrincipalContext validation, supporting multiple semicolon-separated passwords in a single command. Continue reading Test Passwords Against Active Directory User