Windows Performance Analyzer (WPA) has opened my eyes to a lot of things in the past week! For one, 30 seconds of our 40 second login was being eaten by GPClient. I noticed that we had a lot of GPOs linked to high level OUs even though only a few machines actually needed the policy.
The picture above shows an example. So how can I automatically find out what computers need which policy and then relink the GPO closer? Let’s script it!
Being the responsible and forward thinking administrator that you are, you enabled Accidental Deletion Protection for your Domain. But now, you are frustrated that you have to jump through a few more hoops just to delete something that you really want to delete! After all, it is kind of silly for the domain administrator to get an Access Denied message in Active Directory!
To fix this, we are going to modify Active Directory Users and Computers and add a “Yes – I am really sure. Please delete this” button.
Ever have that Oh Sh!t – Stomach Churning – Career Ending moment where you accidentally deleted something you shouldn’t?
Why is Delete right beside Rename!
Because even Admins make mistakes, it is a best practice to protect every critical object in AD from accidental deletion. How you ask?
When I first started learning about Active Directory, Group Policy always seemed very fickle. Sometimes I could run GPUpdate, other times I had to run /force.
As it turned out, Group Policy was always working – I just didn’t understand it. So what’s the difference between GPUpdate and GPUpdate /force? Continue reading
If you have file servers, you most likely run user quotas. Not running quotas would allow users to quickly fill up the entire drive. Quotas are no guarantee of smooth sailing though. One of our file servers got down to 10% free space. In the same way that Social Security over promises benefits, we over allocated quotas. Too many users and not enough pie! There has to be a better way to manage the File Server Resource Manager quota email because it has some problems that I didn’t like.
With a bit of PowerShell – that old report can be extended. Here is how I wanted to extend it:
Still interested? Well, here is the code: Continue reading