Scripting

Script to Find Missing Subnets in Active Directory

January 21, 2014

This PowerShell script will collect all Netlogon.log files from the Domain Controllers, export the last x lines and combine it into one file of unique IP Addresses in CSV format. This easily and simply allows you to then identify any missing subnets that need to be added and associated to an Active Directory Site. Yes, there […]

Read the full article →

Script to Create Group Policy Objects and WMI Filters to Manage the Time Server Hierarchy

January 10, 2014

This PowerShell script will create the Time Server GPOs and WMI Filters for the Domain Controllers to ensure your time server hierarchy remains correct for transfer and seizure of the PDC emulator FSMO role holder. However, before I talk about the script it’s important to provide some background information on the required settings for the Windows Time […]

Read the full article →

Script to create a Kerberos Token Size Report

December 20, 2013

SCRIPT UPDATED 22nd September 2017 This PowerShell script will enumerate all user accounts in a Domain, calculate their estimated Token Size and create a report of the top x users in CSV format. However, before I talk about the script it’s important to provide some background information on Kerberos token size; how to calculate it; and […]

Read the full article →

A change to the fields in the Netlogon.log file from Windows 2012 and above

December 13, 2013

If you collate and report on the Netlogon.log files from Domain Controllers, you’ll notice that many existing scripts may fail to correctly split the lines when processing the logs from Windows 2012 Domain Controllers; unless of course you’ve already noticed and made an allowance for it.

Read the full article →

Enabling the Active Directory JET Database Performance Monitor Counters

June 20, 2013

When monitoring the performance of Domain Controllers there are certain counters over and above the default ones that will provide you with advanced information to ensure that they are sized and performing correctly. These are the JET Database Performance Counters.

Read the full article →

Script to set the Adobe Print As Image option

September 12, 2012

Having deployed a new printing solution in a large University environment, we were faced with all sorts of printing errors, slow printing, and out of memory errors on the printers themselves; specifically when printing PDFs. This is related to how the PDFs are processed, which becomes a challenge in a higher education environment where the […]

Read the full article →

PaperCut Client Launch or Logon Script for Windows

September 11, 2012

Having deployed PaperCut print management software in a large University environment, we were faced with the challenge of how to ensure that the client (pc-client-local-cache.exe) launched successfully and consistently at every logon to meet all the use cases. We also had to consider how we were going to specify the different types of command line parameters. […]

Read the full article →

An improved and enhanced version of the famous LaunchApp.wsf

September 3, 2012

Have you ever wondered why your logon script fails to map network drives when an Administrative user logs onto a computer with User Account Control (UAC) enabled; even though the drive mapping process completes successfully? To understand this you need to read the section from “Group Policy Scripts can fail due to User Account Control” […]

Read the full article →

Finding Orphaned Group Policy Objects

September 3, 2012

Group Policy Objects (GPOs) are stored in two parts: GPC (Group Policy Container). The GPC is where the GPO stores all the AD-related configuration under the CN=Policies,CN=System,DC=… container, which is replicated via AD replication. GPT (Group Policy Templates). The GPT is where the GPO stores the actual settings located within SYSVOL area under the Policies folder, which […]

Read the full article →