The Active Directory Module for Windows PowerShell, which is included with Windows Server 2008 R2, can be used to administer Active Directory Domain Services (AD DS) objects, including computer ...

We configure our computer objects in dedicated OUs for computers based on branches. We have a main computer GPO, but this way we can apply different GPOs to each branch without affecting others. We ...

Improving Active Directory performance is on everyone's mind. You can do so relatively easily using disconnected recordsets. A disconnected recordset (DRS) is an ADO record that resides in memory. A ...

Earlier this week I saw a situation in which someone with a small, single-domain controller network performed a restoration of their domain controller. This restoration effectively reverted the Active ...

Active Directory (AD) is an excellent file and folder permissions, security, and management tool. It allows administrators to give permission to access specific folders to specific users. Simply put, ...

Several years ago I documented Windows updates that needed additional registry keys to be set before you are fully patched. These updates can be hard to keep track of. Microsoft recently released ...

“[LAPS] mitigates the risk of lateral escalation that results when customers use the same administrative local account and password combination on their computers. LAPS stores the password for each ...

Generative AI is accelerating password attacks against Active Directory, making credential abuse faster and more effective.