Posts RSS Comments RSS 253 Posts and 393 Comments till now

Archive for September, 2009

Need Powershell v2 feedback ASAP!

Jeffrey and party are trying their darnedest to get this thing out the door but they need your help.

Please download: XP and W2K3 Release Candidate Versions of PowerShell are Now Available for Download and provide feedback asap!

How to find extended rights that apply to a schema class object (remix)

The AD guys posted a really cool post about getting extended rights via the schema. That post can be found here:
How to find extended rights that apply to a schema class object

If you dont have Windows 7, 2008 R2, or the Active Directory Management Gateway then you can get similar results by using my functions from here: Getting AD Schema information from Powershell. This works on all versions of AD.

Using these functions you can just do this:

Get-ADSchemaClass group | %{$_.DefaultObjectSecurityDescriptor} | %{$_.access} | ?{$_.ActiveDirectoryRights -eq "ExtendedRight"}

Heads up on an upcoming codeplex project.

Active Directory Replication Module

Purpose:
Provide administrators with simple task-based set of cmdlets to manage and trouble-shoot Active Directory Replication.

Overview:
This will provide several cmdlets for working with Active Directory focusing on Replication. As AD replication is build on domain/forest infrastructure we are also including a set of Domain and Forest management cmdlets.

Target:
Windows 2003 Domain and above (although most cmdlets will still work against 2000.)

Status:
Work as already begun on the project and I am hoping to release alpha code in the next month or so.

Example of cmdlets to be provided (not complete:)

  • Test-ADRReplication
  • Get-ADRDomain
  • Get-ADRDomainController
  • Get-ADRForest
  • Get-ADRGlobalCatalog
  • Get-ADRMetaData
  • Get/Set/Test-ADRProperty
  • Get/Set/New-ADRSite
  • Get/Set/New-ADRSiteLink
  • Get/Set/New-ADRSubNet

Please let us know if there is feature you would like to see or any general feedback.

blog: Heads up on an upcoming codeplex project.

Active Directory Replication Module

Purpose:
Provide administrators with simple task-based set of cmdlets to manage and trouble-shoot Active Directory Replication.

Overview:
This will provide several cmdlets for working with Active Directory focusing on Replication. As AD replication is build on domain/forest infrastructure we are also including a set of Domain and Forest management cmdlets.

Target:
Windows 2003 Domain and above (although most cmdlets will still work against 2000.)

Status:
Work as already begun on the project and I am hoping to release alpha code in the next month or so.

Example of cmdlets to be provided (not complete:)
  • Test-ADRReplication
  • Get-ADRDomain
  • Get-ADRDomainController
  • Get-ADRForest
  • Get-ADRGlobalCatalog
  • Get-ADRMetaData
  • Get/Set/Test-ADRProperty
  • Get/Set/New-ADRSite
  • Get/Set/New-ADRSiteLink
  • Get/Set/New-ADRSubNet

Please let us know if there is feature you would like to see or any general feedback.

List of 2008 R2 Group Policy cmdlets

Rick Sheikh asked me about the Windows 2008 R2 GP cmdlets on blog post Build Lab w/ Quest AD CMDLets.

Here is a list (you have to add it via features.) and how to find them

import-module GroupPolicy
Get-Command -Module GroupPolicy | %{$_.Name}

Backup-GPO
Copy-GPO
Get-GPInheritance
Get-GPO
Get-GPOReport
Get-GPPermissions
Get-GPPrefRegistryValue
Get-GPRegistryValue
Get-GPResultantSetOfPolicy
Get-GPStarterGPO
Import-GPO
New-GPLink
New-GPO
New-GPStarterGPO
Remove-GPLink
Remove-GPO
Remove-GPPrefRegistryValue
Remove-GPRegistryValue
Rename-GPO
Restore-GPO
Set-GPInheritance
Set-GPLink
Set-GPPermissions
Set-GPPrefRegistryValue
Set-GPRegistryValue