With the attack on RDP getting more and more each day, many Admins are forced to use remote tools to get onto servers. Managing your exchange 2019 server or legacy servers does not require you to login to the desktop, you can use remote PowerShell and because the Exchange Admin Center is web based, it […]
I’m happy to share some field notes and experiences with the Windows Autopilot White Glove feature which is available with the Windows 10 1903 release. I’ve done a lot of testing and engineering for a recent project which also included this brand new feature. First things first (Requirements) This is probably the most important information […]
A few weeks ago Microsoft finally announced support for macOS FileVault disk encryption management in Microsoft Intune. This is a highly requested macOS management feature and expands the macOS management settings in Intune. In this blog I will have a look at the settings which we can configure as admin, how the end-user experience is and where we, as IT […]
Downloads Welcome to the downloads section! Here you can find a collection of my PowerShell scripts and modules. Have fun with it! Active Directory Domain Services Section (1.1) ad.ps1 Blog post: Active Directory Domain Services Section (Version 1.1) Alert me, if a DC is down DC_Alert.ps1 Blog post: PowerShell: Alert me, if a Domain-Controller is down Notify me, […]
What is the Local Administrator Password Solution? Simply put, Microsoft’s LAPS tool randomises the local administrator account on each computer and stores the new password on the computer object in Active Directory. Specifically, part of the installation process extends your Active Directory schema to include two new values: ms-Mcs-AdmPwd Stores the current Administrator password. ms-Mcs-AdmPwdExpirationTime […]
The OneDrive for Business team has made a number of changes to support automatic configuration of OneDrive, including support for automatically signing in, configuring known folder migration, enabling offline files, and more. But since the OneDrive client is configured via GPO and not MDM policies, that meant using some rather nasty-looking custom OMA-URI policies in […]
Remember when Windows Server 2008 R2 was released, and one of the exciting new features was Managed Service Accounts? Managed Service Accounts (MSAs) held so much promise – automatic password management and automatic SPN registration. Remember all of those service you have in the domain, that are over-privileged, and whose passwords haven’t changed in the past 5 […]