Keeping Active Directory secure and tidy with PowerShell: Identifying stale accounts

Maintaining a clean and secure Active Directory (AD) environment is essential for ensuring the safety and efficiency of your organisation’s network. Regularly identifying and managing stale accounts, those that haven’t been used in a long time, helps mitigate security risks, reduce clutter, and streamline user management. In this article, we’ll walk through a PowerShell script

Read More

Understanding the ‘Protected Users’ group in Active Directory: When to use it and when not to

Active Directory (AD) is packed with powerful security features designed to reduce the risk of identity compromise. One such feature is the Protected Users group. Introduced with Windows Server 2012 R2, the Protected Users group offers an additional layer of security for high-risk and high-privilege accounts by enforcing strict authentication policies. However, this group is

Read More

Troubleshooting 8 of the most common Active Directory issues

Active Directory (AD) is a powerful directory service, by Microsoft, which provides centralised authentication and authorisation for Windows-based networks. While it offers numerous benefits, domain administrators often encounter common issues that can impact its functionality. In this article, we will explore some of these issues and provide practical solutions to troubleshoot them effectively. 1) DNS

Read More

Enable additional Global Catalog Server

To enable another Global Catalog Server: Open the ‘Active Directory Site and Services’ MMC (Located within the ‘Administrative Tools’ section of the Control Panel Expand the ‘Sites’ folder on the left Expand the site that you want to alter, it may be ‘Default-First-Site-Name’ if you haven’t changed it Expand the ‘Servers’ folder Expand the Server

Read More