Tuesday, December 13, 2016
Powershell: User Accounts With Kerberos Pre-Authentication Disabled
Use the following Powershell command:
Get-ADUser -Filter 'useraccountcontrol -band 4194304' -Properties useraccountcontrol | Out-GridView
Get a list of ALL the GP names and GUIDS
Just change: DC=yourdomin,DC=com to your domain name.
Dsquery * "CN=Policies,CN=System,DC=yourdomin,DC=com" -filter (objectClass=groupPolicyContainer) -attr Name DisplayName
Dsquery * "CN=Policies,CN=System,DC=yourdomin,DC=com" -filter (objectClass=groupPolicyContainer) -attr Name DisplayName
Friday, December 2, 2016
Powershell Get Windows 2003 or earlier Computer Objects Found in Active Directory
Use the
following Powershell syntax to determine the affected computers in your domain:
Get-ADComputer -Filter * -Property Name,OperatingSystem,OperatingSystemServicePack| Where-Object{($_.operatingsystem -like "*XP*") -or ($_.operatingsystem -like "*2000*") -or ($_.operatingsystem -like "*2003*") -or ($_.operatingsystemversion -like "*4.0*")}| Out-GridView
The output will be shown in a grid view.
Subscribe to:
Posts (Atom)