---
title: "Read all of the ATA Learning tutorials on Active Directory here!"
description: "Check out all of the ATA blog's posts on Active Directory here!"
---

# Read all of the ATA Learning tutorials on Active Directory here!

> Check out all of the ATA blog's posts on Active Directory here!

---

# ATA Learning Adam the Automator

Tap to hide

[

ATA Learning

](/)

*   [Home](/)
*   [Tutorials](/tutorials/)
*   [Instructors](/author/)
*   [Advertising](/advertising/)
*   [Recommended Resources](/resources/)
*   [About Adam](/about-adam/)

Search for:  

*   [](https://twitter.com/adbertram)
*   [](https://github.com/Adam-the-Automator)
*   [](https://www.linkedin.com/company/adam-the-automator-llc)
*   [](/feed/)

Show FilterReset Filters

×

Reset Filters

## Tag Search

Search tags

## Tags

*   Active Directory(82)
*   PowerShell(27)
*   Specops(14)
*   Azure(6)
*   Security(6)
*   Group Policy(5)
*   Learn with Me Series(5)
*   Azure AD(4)
*   Microsoft Entra(4)
*   Powershell Administration(3)
*   Azure Active Directory(2)
*   Linux(2)
*   Microsoft Azure(2)
*   Microsoft Windows Server(2)
*   Windows(2)
*   windows server(2)
*   Automation(1)
*   Azure CLI(1)
*   Azure Files(1)
*   Azure PowerShell(1)
*   Certificates(1)
*   Command Line(1)
*   DNS(1)
*   Enzoic(1)
*   Governance(1)
*   hyper-v(1)
*   InfoSec(1)
*   MFA(1)
*   Microsoft 365(1)
*   Microsoft DNS(1)

See 10 more

No posts match those tags. Reset the filters and try again.

[![](https://adamtheautomator.com/wp-content/uploads/publisher/3f95d9c85b2b817aab5dca59f1ca0e14/38378bffb6e067df12a1bd90a3921833213a6e328f7d3baabd1fae698d38ddfd.jpg)](/fix-kerberos-clock-skew-w32tm/)

*   [Active Directory](/tag/active-directory/)
*   [PowerShell](/tag/powershell/)
*   [Windows](/tag/windows/)

[

## Fix Kerberos Clock Skew Logon Failures Using w32tm

Fix Kerberos clock skew logon failures by checking w32tm sources, pointing the PDC emulator at NTP, and resyncing drifted clients.

](/fix-kerberos-clock-skew-w32tm/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram3 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/publisher/3f35d9c85b2b812193d4cc7a6d4be13d/1daf00385836df44b470b450d81ec18105c2ccff55f54f2fd2f72592fca6e34c.png)](/identity-verification-onboarding/)

*   [Active Directory](/tag/active-directory/)
*   [Microsoft 365](/tag/microsoft-365/)
*   [Microsoft Entra](/tag/microsoft-entra/)
*   [Security](/tag/security/)
*   [Sponsored](/tag/sponsored/)

[

## Stop Impersonation: Verify Identity at Onboarding

Prevent impersonation by verifying identity during onboarding. Why identity proofing must happen before provisioning access to new hires.

](/identity-verification-onboarding/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram4 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/publisher/3f95d9c85b2b81e69730da4c690758c2/4afeea42b7f854d23285b281664351779f042510f1e3a1d766d02cfa39b711a8.jpg)](/find-inactive-computers-active-directory/)

*   [Active Directory](/tag/active-directory/)
*   [Microsoft Windows Server](/tag/microsoft-windows-server/)
*   [PowerShell](/tag/powershell/)

[

## Find and Disable Every Inactive AD Computer with PowerShell

Find inactive computer accounts in Active Directory with Search-ADAccount, then disable and quarantine them with PowerShell in steps you can undo.

](/find-inactive-computers-active-directory/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram3 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/publisher/3ec5d9c85b2b815cacb1ece7c7ca9758/edff0257593a62603f4fae3b57f62db3fbe832f8af0bcc7638ea7ebd721274c7.jpg)](/nps-radius-windows-server-setup/)

*   [Active Directory](/tag/active-directory/)
*   [Certificates](/tag/certificates/)
*   [Networking](/tag/networking/)
*   [Windows](/tag/windows/)

[

## Set Up NPS RADIUS on Windows Server Without Silent Rejects

Install Windows Server NPS as a RADIUS server for Wi-Fi and VPN, build PEAP and EAP-TLS policies, and decode event 6273 before users complain.

](/nps-radius-windows-server-setup/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram12 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/publisher/3ec5d9c85b2b8187987ee10bb8418c2e/df35045971c29173353726a0ebe22dbc4533b795b7b720908e572c5ba8ddeeb9.jpg)](/windows-laps-password-rotation-powershell/)

*   [Active Directory](/tag/active-directory/)
*   [Microsoft Entra](/tag/microsoft-entra/)
*   [Microsoft LAPS](/tag/microsoft-laps/)
*   [PowerShell](/tag/powershell/)

[

## Stop Missed Windows LAPS Password Rotations with PowerShell

Use PowerShell and Microsoft Graph to find every Windows LAPS device that missed its password rotation, then read the event log to learn why.

](/windows-laps-password-rotation-powershell/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram3 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/publisher/3ec5d9c85b2b8183bec6e5cc0f0356c5/a323a4d03629188de1d5ed18ca60a64a65f94bef73d5390488bde5511859fa05.webp)](/az-800-vs-az-802/)

*   [Active Directory](/tag/active-directory/)
*   [Azure](/tag/azure/)
*   [Microsoft Windows Server](/tag/microsoft-windows-server/)
*   [PowerShell](/tag/powershell/)

[

## AZ-800 vs. AZ-802: Avoid the Wrong Windows Server Exam

See what the AZ-800 retirement means for your Windows Server certification path and how to re-weight your study plan around the current AZ-802 exam.

](/az-800-vs-az-802/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram13 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/08/featured_image-3.webp)](/azure-home-lab-certification-practice/)

*   [Active Directory](/tag/active-directory/)
*   [Azure](/tag/azure/)
*   [hyper-v](/tag/hyper-v/)
*   [PowerShell](/tag/powershell/)

[

## Build an Azure Home Lab for Certs Without Overspending

Build a nested Azure Hyper-V home lab with budget alerts, a domain controller, and Azure Arc mapped to AZ-900, AZ-104, and AZ-305 exams.

](/azure-home-lab-certification-practice/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram12 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/08/featured_image.webp)](/entra-pim-vs-delinea-cyberark/)

*   [Active Directory](/tag/active-directory/)
*   [Governance](/tag/governance/)
*   [Microsoft Entra](/tag/microsoft-entra/)
*   [Security](/tag/security/)

[

## Entra PIM vs. Delinea vs. CyberArk: Don’t Buy the Wrong PAM

Entra PIM grants roles; Delinea and CyberArk vault credentials. Compare scope, session recording, audit evidence, and three-year cost.

](/entra-pim-vs-delinea-cyberark/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram17 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/07/featured_image-2.png)](/deploy-paws-microsoft-entra-pim/)

*   [Active Directory](/tag/active-directory/)
*   [Microsoft Entra](/tag/microsoft-entra/)
*   [Security](/tag/security/)

[

## Deploy PAWs with Microsoft Entra PIM

Harden privileged access by pairing Microsoft Entra PIM with PAWs, Intune compliance, and Conditional Access so admin roles activate only from trusted devices.

](/deploy-paws-microsoft-entra-pim/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram7 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/05/featured_image-11.webp)](/troubleshoot-active-directory-replication-errors/)

*   [Active Directory](/tag/active-directory/)
*   [Command Line](/tag/command-line/)
*   [DNS](/tag/dns/)

[

## How to Troubleshoot Active Directory Replication Errors

Troubleshoot Active Directory replication errors by isolating 1311, 1722, 2087, and USN rollback issues with repadmin, dcdiag, DNS, RPC, and KCC checks.

](/troubleshoot-active-directory-replication-errors/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram12 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/05/featured_image-9.webp)](/entra-automation-users-groups-conditional-access/)

*   [Active Directory](/tag/active-directory/)
*   [Automation](/tag/automation/)
*   [Azure AD](/tag/azure-ad/)
*   [Azure PowerShell](/tag/azure-powershell/)

[

## Entra Automation: Users, Groups, and Conditional Access

Use Microsoft Graph PowerShell to automate Entra ID users, security groups, group membership, and Conditional Access policies with report-only validation.

](/entra-automation-users-groups-conditional-access/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram13 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/05/featured_image-7.webp)](/gpo-intune-migration/)

*   [Active Directory](/tag/active-directory/)
*   [Azure AD](/tag/azure-ad/)

[

## Migrate Group Policy to Intune Without Breaking Endpoints

Export GPOs as XML, analyze them with Group Policy Analytics, migrate supported settings to Intune Settings Catalog, and resolve hybrid device conflicts.

](/gpo-intune-migration/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram9 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/04/featured_image-20.webp)](/secure-azure-managed-identities/)

*   [Active Directory](/tag/active-directory/)
*   [Azure](/tag/azure/)
*   [Azure Active Directory](/tag/azure-active-directory/)
*   [Azure CLI](/tag/azure-cli/)

[

## How to Secure Azure Service Accounts with Managed Identities

Learn how to replace secret-based Azure service accounts with managed identities, grant least-privilege Azure RBAC access, validate token-based authentication,

](/secure-azure-managed-identities/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram6 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/04/featured_image-18.webp)](/windows-event-collector-architecture/)

*   [Active Directory](/tag/active-directory/)
*   [Group Policy](/tag/group-policy/)
*   [Security](/tag/security/)
*   [Windows Events](/tag/windows-events/)

[

## Stop Silent Event Loss at Scale with Windows Event Collector

Enterprise Windows Event Collector architecture: subscription types, XPath optimization, capacity planning, and SIEM integration at scale.

](/windows-event-collector-architecture/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram9 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/04/featured_image.webp)](/active-directory-setup-tips/)

*   [Active Directory](/tag/active-directory/)
*   [Group Policy](/tag/group-policy/)
*   [Security](/tag/security/)
*   [Specops](/tag/specops/)
*   [Sponsored](/tag/sponsored/)
*   [windows server](/tag/windows-server/)

[

## 7 Tips for an Efficient and Secure Active Directory Setup

Learn 7 essential best practices for setting up an efficient and secure Active Directory environment, from planning your structure and applying least-privilege

](/active-directory-setup-tips/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram4 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/04/featured_image-8.webp)](/avoid-entra-id-lockouts-migrate-legacy-mfa/)

*   [Active Directory](/tag/active-directory/)
*   [Azure](/tag/azure/)
*   [Azure AD](/tag/azure-ad/)

[

## Avoid Entra ID Lockouts: Migrate Legacy MFA Policies

Learn how to migrate legacy MFA and SSPR policies to the unified Entra ID Authentication Methods policy, including audit, NPS extension fixes, and validation.

](/avoid-entra-id-lockouts-migrate-legacy-mfa/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram7 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/06/ditch-gpos-intune-featured.webp)](/ditch-gpos-migrate-microsoft-intune-2/)

*   [Active Directory](/tag/active-directory/)
*   [Azure](/tag/azure/)

[

## Ditch the GPOs: Migrate to Microsoft Intune

Use Group Policy Analytics to migrate GPOs to Intune Settings Catalog profiles, handle unsupported Group Policy Preferences, and manage hybrid AD-to-MDM transitions.

](/ditch-gpos-migrate-microsoft-intune-2/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram7 min. read

](/author/adam-bertram/)

[![](https://adamtheautomator.com/wp-content/uploads/2026/01/26802_featured_image-scaled.jpg)](/fix-active-directory-weak-point-passwords/)

*   [Active Directory](/tag/active-directory/)
*   [Specops](/tag/specops/)
*   [Sponsored](/tag/sponsored/)

[

## How to Fix Active Directory’s #1 Weak Point in 2026: Passwords

It's 2026. Despite years of momentum around passwordless authentication, the reality in most enterprise environments is still the same: Active Directory

](/fix-active-directory-weak-point-passwords/)

[![Adam Bertram Avatar](https://secure.gravatar.com/avatar/d0b9d42e21e5622713f8b693aa5c0f9244d5f7dd200ed29b8398f52dee5de337?s=192&d=mm&r=g)

Adam Bertram8 min. read

](/author/adam-bertram/)

## Categories

*   [IT Ops](/category/it-ops/)
*   [Cloud](/category/cloud/)
*   [DevOps](/category/devops/)
*   [Home Ops](/category/home-ops/)
*   [Information Security](/category/infosec/)
*   [Software Development](/category/software-development/)

## Site

*   [Home](/)
*   [Tutorials](/tutorials/)
*   [Instructors](/author/)
*   [Advertising](/advertising/)
*   [Recommended Resources](/resources/)
*   [About Adam](/about-adam/)

Copyright 2026© ATA Learning | [Privacy Policy](/privacy/)
