How Old is the Admin Password

Here’s a quick one-liner to find out how old the administrator password age (in days) is on a remote machine.

This requires RPC/DCOM access to the remote computer. Or use PowerShell remoting with Invoke-Command:


Updating Multi-Valued Active Directory Properties Part 1

Yesterday on Twitter, I got a tweet from @Docsmooth regarding how to update a multivalued property in Active Directory. There are a number of ways to handle this, especially from PowerShell naturally, so I tweeted one way in a series of tweets. But that’s a hard way to learn something, and anyone jumping in the middle of the tweet stream might have been a bit confused. So I thought I’d write up a more formal explanation. Because there are a few ways to handle this situation, I’ll cover each approach in a separate article. Today we’ll look at using ADSI in PowerShell. Continue reading

Get Local Admins One-Liner

Working with local users and groups can get a little messy in PowerShell. But I wanted to share a quick one-liner you could use to list all the members of the Administrators group. Continue reading

Create New Computer with ADSI

In Windows PowerShell 2.0: TFM, I wrote a short chapter on managing directory services. This chapter was written before Microsoft released their Active Directory module so I discussed how to use the ADSI type adapter. Well it turns out we can’t slip anything past our astute readers. Continue reading

New Book Project – Reviewers Needed

While at Microsoft TechEd, I signed the paperwork to write a second edition of Managing Active Directory with Windows PowerShell: TFM for SAPIEN Press. It’s hard to believe so much has happened since that book hit the shelves in less than 2 years. The 2nd edition will continue to include coverage of Quest Software’s PowerShell comdlets (naturally updated and expanded where necessary). Almost all of the ADSI content will be dropped and I’ll be explaining how to use the Microsoft ActiveDirectory provider and cmdlets. My goal is to write a book that is really two books in one.

To that end I’ll be in need of some rock-solid and reliable technical reviewers. I need 4-5 people who will have time and resources over the next 4-6 months to read manuscripts, test out code samples and provide constructive feedback. Ideally, a reviewer should be able to run the Quest cmdlets and the Microsoft cmdlets with either a Windows Server 2008 R2 domain controller or the Active Directory Management Gateway Service. Please DO NOT use your production environment. You will need to test from a Windows 7 desktop. It would be helpful to have reviewers from a variety of organizations from small 100 user companies to 10,000 plus.  Selected reviewers will receive a free printed copy of the final book and a $50 gift card (not to mention my grateful thanks and the admiration of your peers).

If you are interested, send me an email ([email protected]). Tell me about your PowerShell background, the scope of your Active Directory environment that you can test with and anything else you think I should know. If you are selected, you’ll get an email from me. If you aren’t selected, you’ll go on my list of alternate reviewers should people drop out early in the process.

I’m looking forward to the project and trust you will be as well.