PowerShell AD User to find out last time a password changed

Get-ADUser -identity username -properties *

PasswordLastSet andPasswordNeverExpires.

get-aduser -filter * -properties passwordlastset, passwordneverexpires |ft Name, passwordlastset, Passwordneverexpires

get-aduser -filter * -properties passwordlastset, passwordneverexpires | sort name | ft Name, passwordlastset, Passwordneverexpires

For your results into excel use this:

Get-ADUser -filter * -properties passwordlastset, passwordneverexpires | sort-object name | select-object Name, passwordlastset, passwordneverexpires | Export-csv -path c:tempuser-password-info-20131119.csv





Manage an AD LDS Instance Using Ldp.exe

Ldp.exe is a graphical user interface (GUI) tool that can be used for general administration of a Lightweight Directory Access Protocol (LDAP) directory service. You can use this procedure and Ldp.exe to administer an Active Directory Lightweight Directory Services (AD LDS) instance. You must connect and bind to the instance and then display the hierarchy (tree) of a distinguished name of the instance. You can then browse to an object in the tree and right-click the object to administer it.
Continue Reading


NtdsUtil – Active Directory Directory Services Maintenance Utility

What does Ntdsutil.exe do?

Ntdsutil.exe is a command-line tool that provides management facilities for Active Directory. You can use Ntdsutil.exe to perform database maintenance of Active Directory, manage and control single master operations, create application directory partitions, and remove metadata left behind by domain controllers that were not successfully demoted using the Active Directory Installation wizard (DCPromo.exe).
Continue Reading


Access denied when trying to open a folder?

To resolve this issue, you must turn off Simple File Sharing, and then take ownership of the folder:

  1. Turn off Simple File Sharing:
    1. Click Start, and then click My Computer.
    2. On the Tools menu, click Folder Options, and then click the View tab.
    3. Under Advanced Settings, click to clear the Use simple file sharing (Recommended) check box, and then clickOK.

Continue Reading


Upgrading Active Directory Domain Controller- Windows Server 2008/2008 R2 to Windows Server 2012


A new OS Domain Controller installation should always start with use from the support tools to check the Domain and Domain Controllers for errors that must be resolved before continuing.
The following command line tools and programs will help you to verify if some problems exist within your Domain and the Domain Controllers.
Continue Reading


Configure IE 10 11 Trusted Sites and Zones via GPO

User Configuration – Policies – Administrative Templates – Windows Components – Internet Explorer – Internet Control Panel – Security Page

Unfortunatly IE 10 IE Maintenance which turned out to be a problem for us as that is where all of ours were set.   When that was taken away IE 10 put a lot of defaults.   It gave us some serious headaches for a few days trying to relocate them.
Continue Reading