A little while ago, I had a user call in and ask when their password would expire. Luckily, this information is readily accessible if you know where – and how – to look. Here’s how:
Category: How To
With some regularity, I find myself needing to fetch information from the BIOS of a client computer, preferably without having to go onsite to do so. This may be because I need to know what BIOS version the client is running, the serial number of the computer, or when it was manufactured. If you’re running SCCM (System Center Configuration Manager), this is relatively easily done. Here’s how:
Back in December, I showed you how to install RSAT on a Windows client. As you will have seen, the method depends on what version of Windows the client is running, which means that correctly identifying the version running is somewhat important (although trial and error does work – eventually).
A little while ago, I was asked about when a specific user last logged in with their active directory (AD) user account. While looking up that information was easily done, finding out how to look up the information was a mite more challenging. There are a number of ways of achieving it; including command line and Powershell commands. My preferred way of doing it is using the Attribute Editor in Active Directory Users and Computers (ADUC). Here’s how:
Among my many areas of responsibility at work, is contacting all the users found in various data breach lists that our InfoSec team get their hands on (typically, these are the same lists that eventually make their way to HIBP). Not unsurprisingly, there is a significant amount of overlap between some of these lists, and one of the things I do is to ensure that I do not contact users about passwords I’ve already talked to them about.
You may, for one reason or another, need to install Remote Server Administration Tools (RSAT) on your Windows client computer. You may want to perform administrative tasks in Active Directory Users and Computers, administer Certificates in Active Directory Certificate Services, or administer DNS or DHCP in DNS or DHCP Server Tools.
From time to time, I have found it useful to schedule the sending of emails, such as reminders to others about something, requests for updates and so on. Luckily, this is a feature which is easily available in GMail.
For most users, the message headers of any given email are irrelevant; the email has arrived, and that is all there is to say about that. It does, however, have applications both in IT support and in information security. While those applications are outside the scope of this article, accessing the message header is not.
With surprising regularity, I need to check when a user last logged in. I recently found a command that returns this information;
quser. Using it is simple enough; open a command prompt, enter the command, and hit return:
Some time ago, I was asked to provide a list of everyone with access to a specific system. After communicating with the client, it transpired that they were particularly interested in knowing who were the members of a set of Active Directory groups. While this can be done manually, I wanted to try my hand at building a PowerShell-script that returned the information the client was asking for, and which I could reuse at some later point, as such requests pop up with some regularity.