Skip to content

Tag: Active Directory

Building a script to find all members of a given group

Some time ago, I was asked to provide a list of everyone with access to a specific system. After communicating with the client, it transpired that they were particularly interested in knowing who were the members of a set of Active Directory groups. While this can be done manually, I wanted to try my hand at building a PowerShell-script that returned the information the client was asking for, and which I could reuse at some later point, as such requests pop up with some regularity.

Leave a Comment

Exporting AD group members’ display name

Five years ago, I showed you how to export a list of members of an Active Directory group, using a command line query. One issue I’ve run into using this query, is that I get their user name, not their actual name, which tends to make the resulting list hard to parse. As I had a need to export a relatively large number of group members names as part of a recent ticket, I needed a solution that gave me what I wanted straight out of the box.

Leave a Comment

Powershell: Exporting Active Directory Contacts

Some time ago, I needed to have a list of all Contacts registered in Active Directory. Knowing that there are a lot of them (numbering at least eighty), getting the data manually was not a viable alternative, particularly knowing that the same objective can be achieved through Powershell. I eventually came up with a solution. To make following it logically easier, I’m going to include commentary on each step:

Leave a Comment

AD Group member does not show up in Exchange address book

A couple of months ago, a customer sent us a ticket, complaining that a mail group was incomplete. Specifically, his manager was not listed among the recipients. The mail group in question contained all managers, and membership was gained through dedicated active directory (AD) organisational units (OUs), one for the manager of each business unit (BU). I checked the Exchange address book in Outlook, and sure enough; the manager group for his BU was not listed among the recipients.

Leave a Comment

Active Directory: Accessing the Attribute Editor

A month or so ago, I was asked to find a specific attribute (objectGUID, in case you wondered) of a group in Active Directory, for use in some third-party system. Thinking that this would be easily accomplished, I opened my Active Directory Users and Computers-window, and found the group in question. I opened the properties, but found the Attribute Editor tab sorely missing:

Leave a Comment

Unable to make Active Directory group member of another group

Some time ago, I was working on a request to limit access to a folder to members of four AD groups. Following the established practice at my employer, I created the group to grant access to the folder, and the one to control who has access. I made the latter a member of the former, and went to add the members. Two of the AD groups that were to have access were added, no problem. The other two were not. Not only that, I couldn’t even find them when searching for them,

Leave a Comment

Fixing “The security database on the server does not have a computer account for this workstation trust relationship”

When working in a corporate environment with Active Directory, you may, from time to time, encounter computers that users cannot log on to, as they receive an error message saying:
 

52 Comments