directory – Mohammed Wasay

Active Directory June 11, 2021

Get all the domains controllers in the AD forest along with their current FSMO roles

In a large enterprise an admin would need to keep track of all the domains in a AD forest, the domain names, the domain controllers (DC) , their IPs, and...

mo wasay

Active Directory April 22, 2020

Force synchronization for DFSR-replicated SYSVOL

One of my clients had a problem with processing GPO on client computers. Different computers applied different settings from the same GPO but from different domain controllers. All tests related...

mo wasay

entra-azure February 13, 2020

Get Primary, Secondary, Tertiary DNS values and more from Multiple Servers

Came across a unique request to get primary, secondary, and tertiary DNS values for multiple computers/servers across the domain. I started writing the script and got what I wanted. Now...

mo wasay

PowerShell August 8, 2019

Fix Active Directory broken security inheritance problem

Ran into a situation at a client location where in Active Directory, the security permissions applied to an OU were not getting inherited permissions on to the objects. Basically, security...

mo wasay

PowerShell September 14, 2018

Force Replication of all Domain Controllers on all Sites

If you want to replicate all Domain Controllers, then you have to start replication on each of them separately. This may take a while. To save time there is an...

mo wasay

Windows March 23, 2018

NSLookup still showing IP of demoted Domain Controller

So had an interesting issue today where a Domain Controller (DC) was demoted yet the IP of the demoted DC was still showing up when running nslookup internaldomain.local Demoted DC:Â MWDC04...

mo wasay

Windows August 8, 2017

Speed up Active Directory & DNS replication between Sites

Using the standard GUI Microsoft Management Consoles toÂ makeÂ the change toÂ speed up Active DirectoryÂ replicationÂ is not possible. The best result of usingÂ administratorÂ consoles will be toÂ increase domainÂ replicationÂ between domainÂ controllersÂ to 15 minutes.Â TheseÂ large time values were...

mo wasay

Windows June 14, 2017

The Lazy Way To Do Active Directory Inventory

From time to time admins have to run an inventory of what is running in the AD environment. This is a good practice for audits, inventory, removing decommissioned servers, or...

mo wasay

Windows June 6, 2017

Adding a security group to the Local Administrator Group in AD

[su_tooltip position=”north” content=”Note: I normallyÂ disable the built-in Administrator account., and make another account an admin. This is a good security precaution and in my opinion a best practice.”][/su_tooltip] Having a...

mo wasay

PowerShell April 25, 2017

Connecting to a remote domain controller using PowerShell

Covering one of the basic day to day task if you are a Windows Administrator; connecting to the domain controller. Â I try to minimize logging onto servers as much as...

mo wasay