links for 2008-09-30
by 
jayb
September 30, 2008 No Comments
links for 2008-09-25
by jayb
-
Windows search syntex
Popularity: 2% [?]
| 3.2 |
Related posts
September 25, 2008 1 Comment
links for 2008-09-11
by jayb
-
Welcome to TurboChargeAD.org, an online community resource presented by NetPro Computing. This is where NetPro and affiliated experts come to share tips, tricks, best practices, and more for your most challenging enterprise management and administration issues.
Popularity: 2% [?]
| 3.2 |
Related posts
September 11, 2008 No Comments
links for 2008-08-20
by jayb
August 20, 2008 No Comments
Active Directory Users and Computers Saved Queries
by jayb
Wow, check out these great ADUC saved queries from Ron Crumbaker at myITforum.com
Does anyone use the Saved Queries with in the ADUC?
I do, and I love them.
Here are some that might help you out.
Just Right Click on Saved Queries and Choose New and then Query.
Name the Query accordingly and then click on Define Query…
Then Find the Custom Search and click on the Advanced tab.
Paste each of these in the <add criteria from above to this list> area and then click OK.
Locked Out Users
(&(&(&(&(objectCategory=person)(objectClass=user)(lockoutTime:1.2.840.113556.1.4.804:=4294967295)))))
Dial In Access
(&(&(&(&(objectCategory=person)(objectClass=user)(msNPAllowDialin=TRUE)))))
Disabled User Accounts
(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=2))
No Expiring Accounts
(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=65536))
Active Accounts
(&(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2)))
Popularity: 18% [?]
Tags: active directory, activedirectory, help, love, mac, search, servers, vi, vista, windows, work, XPRelated posts
August 8, 2008 No Comments
Delegating Monitoring-Stopping-Starting services on Servers
by jayb
Thank you so much Jorge and the activedir.org mailing list. I’ve been trying to figure out how to get a junior admin access to restart the print spooler on a windows 2003 SP1 box for over a month.
Delegating permissions to manage services on servers is not the easiest thing to do. You can do it from the command line or through a GPO in the “System Services” node. Either way you MUST take the current configured permissions into account, otherwise you might/will experience issues!
I do not like to use a GPO to do this and prefer to use command line tools in scripts. I’m not going to post a script, but I’m going to provide the information for the delegation of the permissions required and how to achieve that. For the scripting part, what you need to do is retrieve the current SDDL, add what you want to add and write the complete new SDDL back.
Jorge ’s Quest For Knowledge! : Delegating Monitoring/Stopping/Starting services on Servers
Popularity: 9% [?]
Tags: activedirectory, admin, GPO, microsoft, nac, scripts, security, servers, windows, WP, XPRelated posts
July 9, 2008 No Comments
