Powershell Get all groups that are managed by a user

After execution you have to enter the samaccountname and the managed groups will be shown in a grid-view. If no groups are managed by the entered user, nothing will popup.

Download Script

$acccount = Read-Host “Enter user name”
Get-ADGroup -LDAPFilter "(ManagedBy=$((Get-ADuser -Identity $acccount).distinguishedname))" | Out-GridView

Powershell Set GPO permissions based on Naming Convention

Set GPO permissions based on naming convention/displayname using Powershell:
https://gallery.technet.microsoft.com/Set-GPO-permissions-based-812d21e2

Domain Controller time is out of sync

Hardware->
Check hardware
Check VM configuration and Hypervisor settings
Check network / firewalls

Operating System->
On the affected DC run the following in cmd:
w32tm /config /syncfromflags:domhier /update
W32tm /resync /rediscover
net stop w32time && net start w32time

No change check the following regkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config
AnnounceFlags must be set to 10 (Dec) or a (Hex)
If you have to set it just run again:
net stop w32time && net start w32time

At least you can try to set default settings:
net stop w32time
w32tm /unregister
w32tm /register
net start w32time

Free ebook: Introducing Windows Server 2016

Follow the link to get the book:

https://blogs.msdn.microsoft.com/microsoft_press/2016/09/26/free-ebook-introducing-windows-server-2016/?

Powershell: Get GPOs with unknown SIDs

This script will save all GPOs with unknown SIDs to a csv named GPOWithUnknownSIDs-DATE.csv. The file includes the GPO Displaynames and the unknown SIDs.

Donwload the script from techet:
https://gallery.technet.microsoft.com/Get-GPOs-with-unknown-SIDs-38e276bd