Friday, January 29, 2016

Reset local admin password

Download Offline NT Password and Registry editor. -Soft is free!
Create bootable CD or USB.

Boot on Computer or Server.


Select Disk with installed WIndows



Select path ( windows\system32\config)











Chage efault


Configure NTP on Windows Server

Open Regedit as administrator

HKLM\System\CurrentControlSet\services\W32Time\TimeProviders\NtpServer

To enable NTP Server Change Enable , and set value 1




Restart Windows Time service :  

net stop w32time && net start w32time










Windows Server 2012 Install-Remove GUI


Install:

Install-WindowsFeature Server-Gui-Mgmt-Infra,Server-Gui-Shell –Restart

Remove:

Remove-WindowsFeature Server-GUI-Shell, server-gui-mgmt-infra -Restart

Find enabled Users not Member of Groups

Not member of group


(get-aduser -searchbase "OU=Test,DC=Test,DC=com" -Server test.com  -filter {(enabled -eq $true) -and ((memberof -ne "CN=Group1,OU=Groups,DC=test,DC=com") -and (memberof -ne "CN=Group2,OU=Groups,DC=test,DC=com"))}) |select UserPrincipalName |sort UserPrincipalName

Find AD users not loged on 90 days

Count:
Find AD enabled users form OU and Group:

$lastLogon = (get-date).adddays(-90).ToFileTime()

(get-aduser -searchbase "OU=Test,DC=test,DC=com" -Server test.com -filter {memberof -recursivematch "CN=Groupname,OU=Groups,DC=test,DC=com" -and (lastLogonTimestamp -lt $lastLogon) -and (enabled -eq $true)}).count

Export:

$lastLogon = (get-date).adddays(-90).ToFileTime()

(get-aduser -searchbase "OU=Test,DC=test,DC=com" -Server test.com -filter {memberof -recursivematch "CN=Groupname,OU=Groups,DC=test,DC=com" -and (lastLogonTimestamp -lt $lastLogon) -and (enabled -eq $true)}))}) -Properties lastlogondate | select Name, UserPrincipalName | sort name

PS Find Empty AD Groups

Import-Module activedirectory
Get-ADGroup -Filter * -Properties Members | where {-not $_.members} | select Name | Export-Csv C:\emptygroups.csv –NoTypeInformation