Wednesday, June 26, 2013

How to create local accounts via Group Policy

This step by step document shows how to create a local admin account across all domain joined PC’s for use with situations like remote support and notebooks, which are not always connected to the domain.
1. Open Group Policy Management
2. Create a new Group Policy Object called “Local Users Login Account” and link it to the appropriate OU.
3. Open up the newly created GPO called “Local Users Login Account”.
4. Under the Computer Configuration Node, Select PreferencesControl Panel Settings, Local Users and GroupsThen Right Click and select NewLocal User
5. In Action, Select Create. User name will be “RemoteAdmin”. Under Full name, type in a descriptive name. Select a password in Password and Confirm Password, and Uncheck User must change password at next logon, and checkPassword never expiresLeave Account never expires checked. Click on OK.
6. Now go to the Computer Configuration Node, and select PreferencesControl Panel SettingsLocal Users and GroupsRight click and select NewLocal Group.
7. Under Action, select Update, in Group name, select Administrators (built-in), and then click on Add under Members. In the Add box, type in RemoteAdmin for the name and click OK.Now Click on OK again.
8. Now wait for the group policy to update. If you don’t want to wait, you can open up a command prompt on a workstation and type “gpupdate /force”
Troubleshooting:
If you see the user being created but not added to the local administrators group, take a look at where you are assigning the GPO to. Ensure you are assigning it to User objects and Computer Objects.

Active Directory - Copy group members

Download and install QUEST ActiveRoles Management Shell for Active Directory

Start QUEST ActiveRoles Management Shell for Active Directory.



Get-QADGroupMember "<Group A>" | Add-QADGroupMember "<Group B>"

Exchange - Create new Mail Distribution Group

Open the Exchange PowerShell Module and type the following command.


new-DistributionGroup -Name '<Name Distributiongroup>' -OrganizationalUnit '<domain.local /Mail Distribution Groups>' -SamAccountName ' <Name Distributiongroup>' -Alias ' <Name Distributiongroup>'

Friday, April 5, 2013

Exchange - Schedule meetings only during working hours

If you are on Exchange 2007 or 2010, the admin can set it using Set-MailboxCalendarSettings cmdlet, specifically using ScheduleOnlyDuringWorkingHours

Open the Exchange PowerShell Module and type the following command.


Set-MailboxCalendarSettings -Identity "Conference Room 1" -ScheduleOnlyDuringWorkingHours $true

Exchange - Add Send-As permission to user

Open the Exchange PowerShell Module and type the following command.


Add-ADPermission "User1" -User "Domain\User2" -Extendedrights Send-As

Saturday, March 30, 2013

Exchange - Add users to a Distribution Group from a text file

Open the Exchange PowerShell Module and type the following command.


 Get-content C:\Temp\Sales.txt | Add-DistributionGroupMember “DL Sales”