https://wiki.plecko.hr/ 2026-04-15T12:54:02+00:00 https://wiki.plecko.hr/ https://wiki.plecko.hr/lib/tpl/bootstrap3/images/favicon.ico text/html 2019-10-31T09:05:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:ad.net&rev=1572509100&do=diff Managing everything in Active Directory via C# (Using System.DirectoryServices.AccountManagement) Before .Net, managing Active Directory objects was a bit lengthy and you needed a good knowledge on the principal store to have your head around on what you want to do. We ususally use the System.DirectoryServices namespace but with .Net 3.5 they introduced System.DirectoryServices.AccountManagement which is manages directory objects independent of the System.DirectoryServices namespace. text/html 2021-04-01T14:21:49+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:aduc&rev=1617279709&do=diff Active Directory Users and Computers custom LDAP query * Right click on 'Saved Queries' * New -> Query * Enter name * Click 'Define Query' * Select 'Custom Search' * Click 'Advanced' tab * Enter query and confirm * (&(samAccountName=*)(objectCategory=user)) text/html 2025-11-22T19:09:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:change_dc_ip&rev=1763834941&do=diff Change Domain Controllers IP address * Change the IP to the desired address * In the PowerShell box, run ipconfig /flushdns to remove any cached DNS entries created by the local DNS resolver. * Run ipconfig /registerdns to ensure the new IP address is registered by the text/html 2019-10-31T09:06:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:clean_up_server_metadata&rev=1572509160&do=diff Clean Up Server Metadata using cmd You can clean up metadata by using Ntdsutil.exe, a command-line tool that is installed automatically on all domain controllers and servers that have Active Directory Lightweight Directory Services (AD LDS) installed. Ntdsutil.exe is also available on computers that have RSAT installed. To clean up server metadata by using Ntdsutil text/html 2019-10-31T09:06:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:delegate_join_user&rev=1572509160&do=diff Delegate user to join computers to AD Delegate rights using Active Directory Users and Computers: * Open the Active Directory Users and Computers snap-in. * Right-click the container under which you want the computers added, and press Delegate Control text/html 2019-10-31T09:06:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:force_domain_controller_removal&rev=1572509160&do=diff Force Domain Controller Removal To force removal of AD DS from a domain controller * Click Start, click Run, type the following command, and then press ENTER: Dcpromo /forceremoval * If the domain controller hosts any operations master (also known as flexible single master operations or FSMO) roles or if it is a Domain Name System ( text/html 2019-10-31T09:06:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:get_property_length&rev=1572509160&do=diff Get LDAP property max length dsquery * "cn=Schema,cn=Configuration,dc=example,dc=com" -filter "(LDAPDisplayName=employeeID)" -attr rangeUpper text/html 2019-10-31T09:06:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:getadinfo&rev=1572509160&do=diff Powershell get AD info The system requirements for Exchange Server 2013 include the following for Active Directory: * Forest and domain functional level of Windows Server 2003 or higher (up to Windows Server 2012 R2 is supported with Exchange Server 2013 SP1 or later) text/html 2019-10-31T09:06:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:ntp&rev=1572509160&do=diff Active Directory NTP w32tm /config /manualpeerlist:pdc.vk7.local /syncfromflags:manual /reliable:yes /update text/html 2024-07-24T14:16:23+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:repair_trust&rev=1721823383&do=diff Repair computer account trust with AD Open PowerShell as admin Test-ComputerSecureChannel -Repair -Credential (Get-Credential) Lock and unlock the PC to test text/html 2019-10-31T09:06:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:start&rev=1572509160&do=diff Active Directory * Active Directory NTP * Active Directory Users and Computers custom LDAP query * Change Domain Controllers IP address * Clean Up Server Metadata using cmd * Delegate user to join computers to AD * Force Domain Controller Removal * Get LDAP property max length * Managing everything in Active Directory via C# (Using System.DirectoryServices.AccountManagement) * Powershell get AD info * Repair computer account trust with AD * Transfer or seize FSMO roles * Update c… text/html 2019-10-31T09:06:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:transfer_seize_fsmo_roles&rev=1572509160&do=diff Transfer or seize FSMO roles ntdsutil roles connections connect to server <FQDN of role holder> quit seize schema master seize naming master seize RID master seize PDC seize infrastructure master quit quit Use transfer keyword instead of the text/html 2020-02-06T12:59:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=windows:ad:upd_cmp_desc&rev=1580990340&do=diff Update computers description with currently logged on user via logon script Delegate users to allow them to change their description in AD * Open ADUC * Right click on domain object * Select Delegate control * Click Next * Add Domain Users