Tag: Active Directory
An Active Directory user is locked out: don’t panic!
Do the users in your organization ever forget their passwords? Surely not! Has an Active Directory user locked out their account? No way! All sarcasm aside, maybe there's a worm slithering around on your network trying every AD user account it can find until they lock out. Let's see what we can do with PowerShell to track these lockouts down.
Worm spreads across network. Powershell chosen as ally to opposition.
Picture this. You drive into work, grab a cup of coffee, sit down at your desk and log in. It's a typical day; a couple of tickets came in overnight, last night's backups completed successfully and you've only got 20 emails tagged as "high priority" by users. Suddenly you hear frantic footsteps incoming and your antivirus guy pops in with an urgent message. "Susan in Accounting opened up an email and released a 0-day worm onto the company network! I've called support and they're working on a definition update but they don't have one yet! It's locking people's accounts out like crazy!!"
Easily Find all Undefined Clients in Active Directory
I was working on a project recently and needed to find all of the undefined clients in an Active Directory domain. Undefined clients are those domain members that are in an IP subnet that is not yet defined to a site. Unfortunately, there's no central place to find this information so you must turn to some log parsing.
How to Find Stale Active Directory User Accounts
As an Active Directory admin, there inevitably comes a time where you've got dozens or even hundreds of stale user accounts. In my environment of a little over 10,000 user accounts, there's always a few hundred that are no longer needed at any point in time.