Stale user accounts can be a big problem…even more so when they are not disabled.  I’m a firm believer that if you have an account that is not being used it should be disabled.  However depending on the size of your Active Directory that can be a daunting challenge.  Below you will find a snippet […]

Wow, that is a lot of delegating…seriously how many times can you say it in one sentence.  Today’s post is one that threw me for a loop.  As a domain admin I have the right to configure constrained Kerberos delegation.  There may come a time when you want to delegate that out to a user […]

Here are two ways for you to use PowerShell to raise your Forest Functional level to Server 2008 R2: get-adforest | set-adforestmode -forestmode windows2008R2Forest –confirm:$false set-adforestmode –identity netbiosname windows2008R2Forest –confirm:$false Either way will work.  Enjoy

Tip of the day today is to view your Active Directory Tombstone period while using PowerShell From a PowerShell prompt, type (get-adobject "cn=Directory Service,cn=Windows NT,cn=Services,cn=Configuration,dc=AdminPrep,DC=Local" -properties "tombstonelifetime").tombstonelifetime The result shows up in days…very cool.  Just make sure to change dc=AdminPrep,DC=Local to match your domain.