https://evotec.xyz/es/categories/windowsEvotechttps://evotec.xyz/es/blog/strengthening-password-security-in-active-directory-a-powershell-powered-approachPasswordSolution uses the DSInternals PowerShell module to gather Active Directory hashes and then combines that data into a prettified report. If you have ever used DSInternals, you know that while very powerful, it comes with raw data that is hard to process and requires some skills to get it into a state that can be shown to management or security.Sun, 28 May 2023 14:40:25 GMThttps://evotec.xyz/es/blog/strengthening-password-security-in-active-directory-a-powershell-powered-approachactive directoryaddsinternalshtmlpassword qualitypasswordsolutionpowershellscansecurityWindowshttps://evotec.xyz/es/blog/reporting-group-membership-for-critical-active-directory-groupsI work a lot with Active Directory-related tasks. One of the tasks is to know the group membership of critical Active Directory Groups such as Domain Admins, Enterprise Admins, Schema Admins, Event Log Readers, and a few others that are a bit less known. As I did it, I got bored of typing the group names repeatedly and decided that enough was enough and there must be an easier way for me to do that.Sun, 07 Aug 2022 11:57:28 GMThttps://evotec.xyz/es/blog/reporting-group-membership-for-critical-active-directory-groupsactive directoryadgroup membershipgroupsnested groupspowershellWindowshttps://evotec.xyz/es/blog/officeimo-free-cross-platform-microsoft-word-net-libraryOfficeIMO is a free cross-platform .NET library for creating Word documents with Open XML SDK while hiding much of the low-level plumbing.Sun, 12 Jun 2022 16:14:01 GMThttps://evotec.xyz/es/blog/officeimo-free-cross-platform-microsoft-word-net-libraryc#csharpdocxmicrosoft officeOffice 365officeimoWindowswordhttps://evotec.xyz/es/blog/reading-iis-logs-with-powershellToday I was reading Twitter, as I am pretty addicted to technology news when Adam Bacon mentioned that he’s surprised that no one has rebuilt IIS Parser as pure PowerShell. While this is not entirely true, and some modules can do some parsing, I decided to try my luck. While doing it from scratch in PowerShell is possible, I opted to use an external C# library that does all the heavy lifting and is optimized for speed.Sat, 04 Jun 2022 19:47:08 GMThttps://evotec.xyz/es/blog/reading-iis-logs-with-powershelliisiis-serverlogspowershellWindowshttps://evotec.xyz/es/blog/difference-between-gettempfilename-and-getrandomfilename-that-got-my-ass-kickedToday’s story is about me making assumptions on how things work based on the method’s name. As the blog post says, I want to focus on two similar methods – GetTempFileName() and GetRandomFileName(), when using PowerShell. Still, since those methods are .NET based, it applies to a whole range of other languages – C#, F#, VisualBasic, and all others that I’ve never used.Mon, 24 Jan 2022 18:51:13 GMThttps://evotec.xyz/es/blog/difference-between-gettempfilename-and-getrandomfilename-that-got-my-ass-kicked.netc#powershellWindowshttps://evotec.xyz/es/blog/active-directory-domain-services-could-not-replicate-the-directory-partition-the-replication-operation-encountered-a-database-errorIf you ever encounter an error while trying to create a new domain within a forest saying, “The replication operation encountered a database error,” it makes you sweat a bit. Your brain tells you it will be a nightmare to fix, do I have proper backups to make it happen, and the question “why now” shows up.Sun, 28 Nov 2021 14:38:20 GMThttps://evotec.xyz/es/blog/active-directory-domain-services-could-not-replicate-the-directory-partition-the-replication-operation-encountered-a-database-erroractive directorydcdiagdfsdomainforestforest replicationPowerShelltestimoWindowshttps://evotec.xyz/es/blog/encrypting-and-decrypting-pgp-using-powershellSome time ago, I decided that having an easy-to-use PGP PowerShell module is a way to kill my boredom. Four months have passed, and I decided to share it with the world, as it may be helpful to some of you. Today I would like to introduce you to PSPGP – PowerShell module that provides PGP functionality in PowerShell.Sun, 12 Sep 2021 15:14:12 GMThttps://evotec.xyz/es/blog/encrypting-and-decrypting-pgp-using-powershellgpgpgppowershellwindowshttps://evotec.xyz/es/blog/easy-way-to-connect-to-ftps-and-sftp-using-powershellFTPS and SFTP are two ways to send and receive files from remote sources. While the name suggests both do the same thing, those are different protocols, in the end, having the same goal. A few weeks back, I had to make sure I can reliably download files from FTPS server using PowerShell, and since I couldn’t find anything straightforward to use, I decided to write my own. Transfertto is a new PowerShell module that supports both FTPS and SFTP protocols. Its goal is to be the only module that you need to transfer files to and from FTP/SFTP servers.Sun, 29 Aug 2021 13:47:48 GMThttps://evotec.xyz/es/blog/easy-way-to-connect-to-ftps-and-sftp-using-powershellftpftpspowershellsftpsshtransferettoWindowshttps://evotec.xyz/es/blog/remove-item-access-to-the-cloud-file-is-denied-while-deleting-files-from-onedriveI like OneDrive. It allows me to keep my data secure and always synchronized. If things go wrong, I can always get it back. I use it for almost everything. Even for my PowerShell projects, which are committed to GitHub, so in theory, I shouldn’t need that. But every once in a while, I make some stupid mistake and delete a file that has yet not been committed to GitHub, and that’s where the OneDrive comes in handy. Quick restore, and we’re back. Unfortunately, sometimes things aren’t as I would expect them to work. For example, let’s have a look at this nice list of markdown files that are documentation for my module called GPOZaurr.Sun, 06 Dec 2020 18:07:39 GMThttps://evotec.xyz/es/blog/remove-item-access-to-the-cloud-file-is-denied-while-deleting-files-from-onedrivedeleteOffice 365onedrivepowershellremove-itemWindowshttps://evotec.xyz/es/blog/restoring-recovering-powershell-scripts-from-event-logsA few days ago, I was asked to take a look at PowerShell Malware. While I don’t know much about malware, my curiosity didn’t let me skip on this occasion, and I was handed over WindowsPowerShell.evtx file. Ok, that’s not what I expected! I wanted PowerShell .ps1 files that I can read and assess? Well, you play with the cards you were dealt with. What I was handed over was PowerShell Event Log. PowerShell writes whatever you execute, and it thinks it is risky, to Windows PowerShell Operation Event Log.Fri, 28 Aug 2020 15:39:28 GMThttps://evotec.xyz/es/blog/restoring-recovering-powershell-scripts-from-event-logsevent logget-eventspowershellpowershellmanagerpseventviewerWindowshttps://evotec.xyz/es/blog/the-security-account-manager-sam-has-determined-that-sid-is-already-in-use-in-the-forestThe security account manager (SAM) has determined that the security identifier (SID) for this computer is already in use in the Forest you want to join. This can happen when restoring an Active Directory Domain Controller with an improper backup. Reinstall the operating system on the local AD DC to obtain a new SID.Thu, 12 Mar 2020 19:02:42 GMThttps://evotec.xyz/es/blog/the-security-account-manager-sam-has-determined-that-sid-is-already-in-use-in-the-forestactive directorypowershellsidWindowshttps://evotec.xyz/es/blog/create-a-local-user-or-administrator-account-in-windows-using-powershellCreate a local Windows user or administrator with PowerShell, handle localized Administrators groups, and prepare the account for LAPS-managed passwords.Wed, 30 Oct 2019 13:44:27 GMThttps://evotec.xyz/es/blog/create-a-local-user-or-administrator-account-in-windows-using-powershelladministratorgpopowershellWindowshttps://evotec.xyz/es/blog/what-do-we-say-to-health-checking-active-directoryHealth check Active Directory with PowerShell, dcdiag, repadmin, and security-focused reviews so replication, DNS, DHCP, and GPO issues surface early.Sun, 08 Sep 2019 15:48:39 GMThttps://evotec.xyz/es/blog/what-do-we-say-to-health-checking-active-directoryactive directoryaddhcpdnshealth checkspowershellsecurity checkstestimoWindowshttps://evotec.xyz/es/blog/what-do-we-say-to-writing-active-directory-documentationDocument Active Directory with PowerShell using PSWinDocumentation, Dashimo, Documentimo, and Excelimo to keep environment knowledge current.Sun, 12 May 2019 12:46:24 GMThttps://evotec.xyz/es/blog/what-do-we-say-to-writing-active-directory-documentationActive DirectorydashimodocumentationdocumentimoexcelexcelimopowershellpswindocumentationWindowswordhttps://evotec.xyz/es/blog/the-only-powershell-command-you-will-ever-need-to-find-out-who-did-what-in-active-directoryWhile the title of this blog may be a bit exaggeration, the command I’m trying to show here does it’s best to deliver on the promise. What you’re about to witness here is something I’ve worked on for a while now, and it meets my basic needs. If you don’t have SIEM product or products that monitor who does what in Active Directory this command makes it very easy, even for people who don’t have much experience in reading Event Logs. If you’d like to learn about working with Windows Event Logs here’s a great article I wrote recently – PowerShell – Everything you wanted to know about Event Logs and then some.Sun, 28 Apr 2019 15:52:32 GMThttps://evotec.xyz/es/blog/the-only-powershell-command-you-will-ever-need-to-find-out-who-did-what-in-active-directoryactive directoryadeventsevents viewerpowershellpswinreportingpswinreportingv2Windowshttps://evotec.xyz/es/blog/meet-emailimo-new-way-to-send-pretty-emails-with-powershellMeet Emailimo, a PowerShell module for building readable HTML emails with tables, links, colors, and cleaner templating than hand-written markup.Fri, 12 Apr 2019 08:13:43 GMThttps://evotec.xyz/es/blog/meet-emailimo-new-way-to-send-pretty-emails-with-powershellcssemailimohtmljavascriptjsLinuxMac OS XmailingoutlookPowerShellpswritehtmlsend-emailsend-mailWindowshttps://evotec.xyz/es/blog/out-htmlview-html-alternative-to-out-gridviewOne of the most comfortable output’s in PowerShell to work and analyze data is Out-GridView. It’s handy as you can search, sort and have things done quicker than trying to do things in the console. However it’s currently not available in PowerShell Core (PowerShell 6+), and when it is available in PowerShell 7, it will NOT be cross-platform. Since I had released Dashimo a few days ago, I thought it was trivial to make a simple command out of it that could solve this problem.Sat, 06 Apr 2019 18:47:55 GMThttps://evotec.xyz/es/blog/out-htmlview-html-alternative-to-out-gridviewcross-platformMac OS Xpowershellpowershell 6powershell 7powershell coreUbuntuWindowshttps://evotec.xyz/es/blog/pswinreporting-1-8-split-of-branches-legacy-vs-new-hopeA new branch of PSWinReporting is slowly coming, and I thought it would be the best time to have a final article about it with all configuration options available for those that will want to stay using PSWinReporting from Legacy branch. The idea is that you may have it working in your systems and it’s good enough for you. You may not want to change it, and with New Hope, the changes are so big it’s a rewrite.Sun, 10 Mar 2019 20:39:43 GMThttps://evotec.xyz/es/blog/pswinreporting-1-8-split-of-branches-legacy-vs-new-hopeActive Directoryeventevent monitoringeventspowershellpswinreportingWindowshttps://evotec.xyz/es/blog/powershell-everything-you-wanted-to-know-about-event-logsIf you feel this title is very familiar to you it’s because I actually have stolen the title from Kevin Marquette. I’m in awe of his posts that take you thru topic from beginning till the end. No splitting, no hiding anything, everything on a plate, in a single post. That’s why I’ve decided to write a post that will take you on a trip on how to work with Event Logs, something that is an internal part of Windows Administration. If you’ve never worked with Events and you’re in IT you most likely should make an effort to find out what it is and how you can eat it.Wed, 20 Feb 2019 13:22:19 GMThttps://evotec.xyz/es/blog/powershell-everything-you-wanted-to-know-about-event-logsActive Directoryevent logseventsget-eventlogget-wineventmicrosoft windowPowerShellwindowswindows serverhttps://evotec.xyz/es/blog/how-to-find-different-server-types-in-active-directory-with-powershellWorking as a freelancer is a great thing if you can handle it. Each day, each week something new happens and a new problem shows up on my doorstep. It also means it’s almost never boring at your job and you get to play with new stuff. But there’s one drawback to this. You’re often thrown at the problem, told to fix it but often that’s about as much information as you get. It wasn’t very different today. I was told to switch Office 365 from ADFS to Password Synchronization. While reasons for this are not really important, the important question here is what is the name of AD Connect server that’s responsible for this configuration?Wed, 06 Feb 2019 18:25:30 GMThttps://evotec.xyz/es/blog/how-to-find-different-server-types-in-active-directory-with-powershellactive directoryadadconnectazure adexchangeHyper-Vpowershellsqlwindowshttps://evotec.xyz/es/blog/active-directory-how-to-track-down-why-and-where-the-user-account-was-locked-outI’ve been working with Windows Events for a while now. One of the things I did to help me diagnose problems and reporting on Windows Events was to write PSEventViewer to help to parse the logs and write PSWinReporting to help monitor (with use of PSEventViewer) Domain Controllers for events that happen across the domain. It’s handy and I, get those excellent daily reports of what happened while I was gone.Thu, 24 Jan 2019 15:25:31 GMThttps://evotec.xyz/es/blog/active-directory-how-to-track-down-why-and-where-the-user-account-was-locked-outactive directoryevent viewerget-eventsget-wineventpowershellpseventviewerpswinreportingwindowswindows serverhttps://evotec.xyz/es/blog/how-to-change-your-own-expired-password-when-you-cant-login-to-rdpI must admit that it was a bit embarrassing to see my Administrator password expired when I tried to log in as Domain Admin to Domain Controller. I got this little message saying This user account’s password has expired. The password must change to logon. Please update the password or contact your system administrator or technical support.Wed, 23 Jan 2019 10:41:40 GMThttps://evotec.xyz/es/blog/how-to-change-your-own-expired-password-when-you-cant-login-to-rdpexpired passwordpowershellrdcrdpremote desktop connectionremote desktop protocolwindowshttps://evotec.xyz/es/blog/windows-server-2019-desktop-path-for-all-users-cwindowssystem32configsystemprofiledesktopI’ve got a strange request a few days ago regarding users getting a prompt about their Desktop location pointing to…Tue, 22 Jan 2019 14:31:49 GMThttps://evotec.xyz/es/blog/windows-server-2019-desktop-path-for-all-users-cwindowssystem32configsystemprofiledesktopransomwarewindowswindows 2019windows serverhttps://evotec.xyz/es/blog/windows-2019-windows-license-expiredWindows Server 2019 is out now for a couple of months now, and some of you may be interested in playing with it. When you first install it, you can test it for 180 days (so-called Grace Period) after which you need to activate it with a proper production license.Sat, 19 Jan 2019 19:31:08 GMThttps://evotec.xyz/es/blog/windows-2019-windows-license-expiredexpired licenselicenseWindowswindows 2019windows serverwindows server 2019https://evotec.xyz/es/blog/windows-2019-how-to-add-language-packToday I’ve been setting up a new server on Windows 2019. By default, I install Windows with English version even if Client works in their language such as German, Polish or Swedish. While some people install Windows in a language they desire to work with, years of experience taught me that installing English and then adding Language Pack is the best way to go. All errors, windows events, and general troubleshooting is much easier if those are in the native English language. Each version of Windows made it easier to install the language pack and have that up and running in no time. In Windows 2019 it’s even more comfortable… or is it?Wed, 02 Jan 2019 13:38:16 GMThttps://evotec.xyz/es/blog/windows-2019-how-to-add-language-packwindowswindows serverwindows server 2019https://evotec.xyz/es/blog/azure-agent-where-did-my-space-goIf a Windows Azure VM suddenly loses disk space and Explorer does not explain it, the Azure guest agent and its logs under C:\WindowsAzure are worth checking.Wed, 28 Nov 2018 16:19:01 GMThttps://evotec.xyz/es/blog/azure-agent-where-did-my-space-goazureAzure AgentTreeSizewindowsWindows Azurehttps://evotec.xyz/es/blog/powershell-environment-path-is-missing-or-overwrittenIf PSModulePath is suddenly missing default module locations, PowerShell can stop discovering built-in or installed modules even though nothing seems broken at first glance.Sat, 03 Nov 2018 12:07:35 GMThttps://evotec.xyz/es/blog/powershell-environment-path-is-missing-or-overwrittenautoitenvironmentparameterspowershellpsmodulepathvariableswindowshttps://evotec.xyz/es/blog/psblacklistchecker-notifications-to-microsoft-teams-slack-of-blacklisted-ipsIf this is the first time you’re reading about this module, it’s simple PowerShell module that allows you to verify…Fri, 02 Nov 2018 21:46:18 GMThttps://evotec.xyz/es/blog/psblacklistchecker-notifications-to-microsoft-teams-slack-of-blacklisted-ipsblacklistblacklist ipexchangeipnet.dnspowershellresolve-dnsrunspacessmtpWindowsworkflowhttps://evotec.xyz/es/blog/update-module-packagemanagementinstall-package-unable-to-find-repositoryI was installing newest version of my PSWinDocumentation module on Windows 2016 when I noticed I can’t really get anything…Fri, 19 Oct 2018 17:04:49 GMThttps://evotec.xyz/es/blog/update-module-packagemanagementinstall-package-unable-to-find-repositorypowershellwindowswindows 2012windows 2012R2windows serverhttps://evotec.xyz/es/blog/windows-10-no-prompt-to-overwrite-when-pasting-from-zip-fileA copy operation from Explorer's built-in ZIP view may behave differently from a normal folder copy and skip the usual overwrite prompt, so it is worth extracting first when the target matters.Wed, 10 Oct 2018 07:23:12 GMThttps://evotec.xyz/es/blog/windows-10-no-prompt-to-overwrite-when-pasting-from-zip-fileinsidersWindowswindows 10windows 10 1809https://evotec.xyz/es/blog/pswindocumentation-audit-active-directory-passwordsAudit Active Directory passwords with PSWinDocumentation and breached-password data to find weak, reused, or exposed credentials before attackers do.Sun, 07 Oct 2018 17:57:42 GMThttps://evotec.xyz/es/blog/pswindocumentation-audit-active-directory-passwordsactive directoryadauditpowershellwindowshttps://evotec.xyz/es/blog/windows-10-microsoft-store-edge-windows-updates-microsoft-outlook-not-able-to-connect-with-error-0x80072ee7-0x80070005Fix Windows 10 connectivity issues where Microsoft Store, Edge, Windows Update, and Outlook fail with errors 0x80072EE7 and 0x80070005 on Insider builds.Thu, 04 Oct 2018 21:10:17 GMThttps://evotec.xyz/es/blog/windows-10-microsoft-store-edge-windows-updates-microsoft-outlook-not-able-to-connect-with-error-0x80072ee7-0x800700050x8007000050x80072EE7insidersWindowswindows 10windows 10 insidershttps://evotec.xyz/es/blog/pswindocumentation-export-to-word-excel-sql-of-ad-aws-exchange-o365-exchange-o365-azure-adToday I’m pushing forward with PSWinDocumentation project. I’ve fixed some bugs but I also added a couple of new features. I did lie a bit in the first sentence because this time it’s not all me. I got help from Mateusz Niemczyk who is a certified AWS engineer working for Euvic with me on some projects. If you’ve not yet guessed where I got him involved from the introduction – yes we’re adding basic AWS data support to PSWinDocumentation. But that’s not all…Sun, 23 Sep 2018 20:39:26 GMThttps://evotec.xyz/es/blog/pswindocumentation-export-to-word-excel-sql-of-ad-aws-exchange-o365-exchange-o365-azure-adActive DirectoryawsAzure ADexcelexchangeexportoffice 365powershellpswriteexcelPSWriteWordsqlWindowswordhttps://evotec.xyz/es/blog/pswinreporting-forwarders-microsoft-teams-slack-microsoft-sql-and-moreIt’s been a while since PSWinReporting has been updated, or rather since I’ve written a blog post about it since it’s always…Sun, 16 Sep 2018 17:59:28 GMThttps://evotec.xyz/es/blog/pswinreporting-forwarders-microsoft-teams-slack-microsoft-sql-and-moreactive directoryevent logeventsmicrosoft teamsms sqlpowershellslacksqlteamsWindowshttps://evotec.xyz/es/blog/pswindocumentation-version-0-1-with-word-excel-exportA few weeks ago I’ve released my first version of PSWinDocumentation. It was simple, one command module where you start it and get some basic AD stuff into Microsoft Word document. Today… I’m releasing a new version that has a bit bigger feature set. Are you ready for it? Let’s go!Thu, 23 Aug 2018 20:07:04 GMThttps://evotec.xyz/es/blog/pswindocumentation-version-0-1-with-word-excel-exportactive directoryadexcelpowershellscriptswindowswordhttps://evotec.xyz/es/blog/windows-10-youll-need-the-internet-for-this-0xcaa7004-or-0xcaa30194Resolve Windows 10 sign-in and connectivity problems behind the You will need the internet for this message and errors 0xCAA7004, 0xCAA30194, and 0x80072EFD.Wed, 08 Aug 2018 08:16:46 GMThttps://evotec.xyz/es/blog/windows-10-youll-need-the-internet-for-this-0xcaa7004-or-0xcaa301940x80072EFD0xCAA301940xCAA70004insidersinsiders channelwindowswindows 10windows 10 insidershttps://evotec.xyz/es/blog/install-module-the-term-install-module-is-not-recognized-as-the-name-of-cmdlet-function-script-file-or-operable-programIf Install-Module is not recognized at all, the usual cause is that the machine is missing the PowerShellGet tooling that newer Windows PowerShell environments include.Wed, 25 Jul 2018 08:15:53 GMThttps://evotec.xyz/es/blog/install-module-the-term-install-module-is-not-recognized-as-the-name-of-cmdlet-function-script-file-or-operable-programinstall-modulePowerShellpseventviewerpsteamspswinreportingpswritecolorWindowshttps://evotec.xyz/es/blog/windows-10-high-cpu-usage-with-evntagnt-warning-event-id-3007-in-event-logIf Windows Event Log starts consuming CPU because EvntAgnt event 3007 is looping, check whether the SNMP service is the trigger in that specific build.Tue, 24 Jul 2018 12:13:09 GMThttps://evotec.xyz/es/blog/windows-10-high-cpu-usage-with-evntagnt-warning-event-id-3007-in-event-logevent 3007evntAgntInsidersWindowswindows 10windows 10 insidershttps://evotec.xyz/es/blog/pswriteword-add-wordtable-add-wordtext-expandedIn this weekly release (PSWriteWord 0.4.6) there are handful of updates and tweaks to Add-WordTable and Add-WordText. If you’ve not…Sat, 07 Jul 2018 20:12:03 GMThttps://evotec.xyz/es/blog/pswriteword-add-wordtable-add-wordtext-expandeddocxexamplesmicrosoft wordpowershellPSWriteWordWindowswordhttps://evotec.xyz/es/blog/pswriteword-updated-to-0-4-1-breaking-change-includedReview the PSWriteWord 0.4.1 release, including the breaking change, document-generation fixes, and practical improvements that make Word automation scripts more reliable.Thu, 28 Jun 2018 19:47:51 GMThttps://evotec.xyz/es/blog/pswriteword-updated-to-0-4-1-breaking-change-includeddocxexamplesmicrosoft wordpowershellPSWriteWordWindowswordhttps://evotec.xyz/es/blog/collectguestlogs-exe-high-disk-usage-on-azure-vmIf CollectGuestLogs.exe is hammering disk on an Azure VM, check the Azure Guest Agent log-collection behavior and reduce that workload before the VM becomes unusably slow.Tue, 26 Jun 2018 19:47:57 GMThttps://evotec.xyz/es/blog/collectguestlogs-exe-high-disk-usage-on-azure-vmazureAzure ADazure vmcollectguestlogsWindowshttps://evotec.xyz/es/blog/pswinreporting-1-0-is-outFew months after initial release a new public version of PSWinReporting 1.0 is released. While the name might not be…Sun, 10 Jun 2018 09:26:45 GMThttps://evotec.xyz/es/blog/pswinreporting-1-0-is-outactive directoryaddomain controlleremailhtmlmonitoringpowershellpowershell gallerypowershell moduleWindowshttps://evotec.xyz/es/blog/working-with-windows-events-with-powershellWork with Windows Event Logs in PowerShell more effectively by querying events, filtering noisy data, and building repeatable troubleshooting workflows for servers and clients.Mon, 28 May 2018 09:28:21 GMThttps://evotec.xyz/es/blog/working-with-windows-events-with-powershellActive Directoryevent viewerExchangeget-eventsget-wineventmicrosoftpowershellwindowshttps://evotec.xyz/es/blog/just-different-approach-to-active-directory-password-notificationsA long time ago I’ve maintained a C# version of Password Expiry reminders. It was working based on HTML templates…Wed, 23 May 2018 15:12:36 GMThttps://evotec.xyz/es/blog/just-different-approach-to-active-directory-password-notificationsactive directoryadPassword NotificationspasswordsPowerShelltask schedulertasksWindowshttps://evotec.xyz/es/blog/get-eventslibrary-ps1-monitoring-events-powershellThis event library (Get-EventsLibrary.ps1) is PowerShell script that parses Security (mostly) logs on Domain Controllers. It has few reports capabilities…Thu, 19 Apr 2018 09:48:35 GMThttps://evotec.xyz/es/blog/get-eventslibrary-ps1-monitoring-events-powershellactive directoryaddomain controllerget-eventsmonitoringpowershellWindowshttps://evotec.xyz/es/blog/whats-new-event-monitoring-0-8💡 Little introduction Event Monitoring solution written in PowerShell is an event library (Get-EventsLibrary.ps1) script that parses Security (mostly) logs on…Tue, 17 Apr 2018 19:23:09 GMThttps://evotec.xyz/es/blog/whats-new-event-monitoring-0-8active directoryevent logseventspowershellscriptWindowshttps://evotec.xyz/es/blog/whats-new-event-monitoring-v0-7See what changed in Event Monitoring v0.7, including configuration updates, health-check improvements, and the known limitations that still existed at that stage.Tue, 27 Mar 2018 19:36:29 GMThttps://evotec.xyz/es/blog/whats-new-event-monitoring-v0-7active directoryaddcdomain controllerevent idevent monitoringeventsmonitoringPowerShellWindowshttps://evotec.xyz/es/blog/get-eventlog-shows-wrong-maximum-size-of-event-logsIf Get-EventLog and older WMI queries show misleading maximum log size values, Get-WinEvent can return the event log metadata more accurately.Tue, 27 Mar 2018 06:23:57 GMThttps://evotec.xyz/es/blog/get-eventlog-shows-wrong-maximum-size-of-event-logseventevent idevent logsevent viewerget-eventlogget-wineventPowerShellwin32_nteventlogfileWindowshttps://evotec.xyz/es/blog/whats-new-event-monitoring-v0-6After having some feedback and seeing as some features were missing new version of Events Monitoring brings few of noticeable…Sun, 25 Mar 2018 17:19:51 GMThttps://evotec.xyz/es/blog/whats-new-event-monitoring-v0-6active directoryad monitoringchangelogevent monitoringeventsPowerShellversionWindowshttps://evotec.xyz/es/blog/granting-logon-as-a-batch-job-permission-for-task-scheduler-to-workIf a scheduled task fails under a service or domain account, check whether the account has the Log on as a batch job right and whether Group Policy is overriding it.Fri, 23 Mar 2018 10:11:14 GMThttps://evotec.xyz/es/blog/granting-logon-as-a-batch-job-permission-for-task-scheduler-to-workbatch jobevent id 4625eventstasktask schedulerWindows