Blog
Blog
Technical articles, tutorials, and insights on PowerShell, .NET, Active Directory, and enterprise IT automation.
Type to search across all blog posts.
Azure AD – Removing Inactive Azure AD Pass-through Agent
If a retired Azure AD pass-through authentication agent still appears as inactive, the entry is usually removed automatically after Microsoft Entra ages it out.
PowerShellGallery disables support for TLS 1.0 breaking Install-Module
Troubleshoot Install-Module failures on Windows Server 2008 R2 after PowerShell Gallery disabled TLS 1.0, and learn how switching to TLS 1.2 restores module downloads.
Office 365 – Limiting license to minimum apps required
Office 365 has a lot of options and applications to choose from. Enabling one E1, E3, or any other license gives the user a lot of features, including Exchange, SharePoi…
Office 365 – msExchHideFromAddressLists does not synchronize with Office 365
In my life I’ve deployed multiple Office 365 tenants connected with Active Directory and I’ve been synchronizing msExchHideFromAddressLists field from…
The security account manager (SAM) has determined that SID is already in use in the Forest
The security account manager (SAM) has determined that the security identifier (SID) for this computer is already in use in the Forest you want to join. This can happen…
AzureAD – Enable Password Expiration with Password Hash Synchronization
Enable Office 365 password expiration for Azure AD Connect password hash sync users so cloud sign-ins follow your on-premises policy.
Active Directory DFS Health Check with PowerShell
One of the critical parts of Active Directory is DFS. It allows you to share same NETLOGON/SYSVOL folders across all Domain Controllers in your Forest. Its health is vit…
Finding GPOs missing permissions that may prevent GPOs from working correctly
I’ve been in IT for a longer time now. I’ve made my fair share of mistakes and misconfigurations. One of those misconfigurations was removing Authenticated Users from Se…
Renaming NETBIOS name of Active Directory Error
Recently I was testing renaming the NETBIOS name of an Active Directory domain. While this process is fairly easy, there are a few gotcha’s, and before one would like to…
Four commands to help you track down insecure LDAP Bindings before March 2020
In March 2020, Microsoft will release its monthly updates. With those updates, Microsoft will disable insecure LDAP Bindings, which is going to break a lot of your syste…