Cranta Ionut's questions

I have a small and maybe silly question in regards to Azure AD, when the password is changed in Azure using for example SSPR, how long does it takes to writeBack the password to AD, considering that the password writeback function is enabled. Is this instant or it has some dependencies ?

Thank you

I have tried to create a script for extracting but the output is not quite I desired.

$Servers = Get-ADDomainController -Filter * | Select-Object Name

foreach($server in $servers)
{
$compsystem = gwmi -q "Select * from win32_computersystem" | Select Model

write-output $Server is $compsystem"
}

The output is something like :

@{Name=ServerName} is @{Model=Proliant DL360 G6}

The servername is different but the Model is the same so i think it's in a continous loop after the first servers.

Any ideeas ?

Thank you,

My company has requested a list with all the users and groups from AD that have access rights to create users and in which OU's they have these rights.

Is there a way to get a complete list via PowerShell for example ? Or any other way ?

Thank you.

I need to change the instanceType attribute of a service account. If I try to change it from Active Directory Users and Computers console it's greyed out and if I try to change it via powershell with Set-Aduser i get "The attribute cannot be modified because it is owned by the system".

Anyone has any ideea on how can I change the instanceType attribute from 4 to 0 ?

I manage a domain with 4 domain controllers and i have been asked to enable Debug Logging for Incoming and Request packets. I have set the maximum size of the log file to 500MB.

First question I have, when it reaches 500MB it overwrites the log file or deletes it and start over from scratch

After enabling the debug logging I've been asked to create a daily scheduled task on each domain controller to copy the log files to a network path. Is it possible to create a script/bat file that copies the log files to that network path ? Or what options do I have ?

Get-ADUser -SearchBase "dc=contoso,dc=local" -filter * -properties Name, Surname, samAccountName, Enabled, PasswordNeverExpires, PasswordExpired, PasswordLastSet, MemberOf | Select Name, Surname, SamAccountName, Enabled, PasswordExpired, MemberOf | Export-Csv C:\temp\expired3.csv

I need a list of all users in the domain with this respective attributes, the problem is with the MemberOf attribute. Instead of getting the groups that they are part of I only get Microsoft.ActiveDirectory.Management.ADPropertyValueCollection

I have several domain controllers in my domain and I need to switch the IP between 2 of them ( one with Windows Server 2k8 R2 and one with Windows Server 2k12 R2 )

I did the following steps until now:

netdom computername xxx.contoso.com /add:xxy.contoso.com
netdom computername xxx.contoso.com /makeprimary:xxy.contoso.com
netdom comnputername xxx.contoso.com /verify

After this i rebooted the DC and deleted the old name.

netdom computername xxy.contoso.com /remove:xxx.contoso.com

After that I made the changes on the second DC:

netdom computername yyy.contoso.com /add:xxx.contoso.com
netdom computername yyy.contoso.com /makeprimary:xxx.contoso.com
netdom comnputername yyy.contoso.com /verify

Basically the same steps to switch ip's between them. The problem is now that both of them have name resolution problems. When i perform dcdiag /fix it recognizes the old name on both of them ( NOTE: both servers are virtual and i switched their IP's before starting the renaming operation ) and same problem in ADUC ( i can see xxx.contoso.com and xxy.contoso.com ) but when i connect to them both their hostnames are the corect ones that i changed.

Any advices on some troubleshooting ?

Thank you.

In the domain I'm working we created an attribute "regulationMatrix" . When I try a powershell command like get-aduser USER -properties * that specific attribute shows up only if it has a value set like "regulationMatrix : {PIC}", if not it doesn't appear on the output.

The attribute was recently added and now i have to add this attribute to 1000 users from a single OU.

Could someone help me with a script or command for example to modify the attributes to all users from the specific OU.

Thank you.

    $userlist = get-aduser -searchbase "OU=RandomOU,DC=contoso,DC=europa,DC=net" -filter * -properties regulationMatrix
foreach ( $users in $userlist ) {
    $username = $users.samaccountname
    $reg = $users.regulationmatrix
    write-host $username
    write-host $reg

set-aduser -identity $username -add @{'regulationMatrix'='PIC'}
            }

Thanks to Daniel i figured what to add, this worked perfectly.

I my domain I have several SQL servers and I need the Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Audit Policy\Audit policy change policy defined with Success.

I tried defining them locally via Local Policy. Everything seems fine for 20-25 minutes until it gets overridden with Not Defined.

My question is how is it possible to get overridden to Not Defined?

Thank you.

Is there any powershell command that outputs the users that have their passwords expired from a specific organizational unit (OU).

If so can it be combined in a script with another command that outputs the time when it expires for all the users in the specific OU ?

Thank you.

I have a list of ad-integrated computers and I need a list of them with their last reboot time. I found some comands like Get-WmiObject -ClassName win32_operatingsystem -ComputerName xxx | select csname, lastbootuptime but it's not what I need. I would need a script because there are lots of computers.

I have no experience with PowerShell, if someone could help me with some suggestions.

PS C:\Users\XxX> Get-wmiobject win32_operatingsystem -ComputerName LC006909 | select csname, @{label='LastRestart';expression={$_.ConverToDateTime($_.LastBootUpTime)}}

csname                                                      LastRestart
------                                                      -----------
LC006909

I get this output ... empty under LastRestart.