Quest AD Management Shell – Moving AD User Objects

Code Snippet: Moving disable user objects in Active Directory using PowerShell and Quest Management cmdlets.Task:Task: Moving all disabled users in the '/Users' OU to the /Users/Disabled OU.Code:Add-PSSnapin -Name Quest.ActiveRoles.ADManagement -ErrorAction SilentlyContinue$Users = Get-QADUser -SearchRoot 'ad.domain.com/Users/' -DisabledWrite-Host "Moving $Users.Count Users."ForEach($User In $Users){Move-QADObject $User.DN -NewParentContainer 'ad.domain.com/Users/Disabled'}Hope this helpsAll information is provided on an AS-IS basis, with no …

Exchange 2010 on a Windows 2008 R2 Domain Controller

Issue: “Service ‘MSExchangeTransport’ failed to reach  status ‘Running’ on this server.”I am building my virtual lab using VMWare Fusion at home, It consists of a Windows 2008 R2 server with AD Domain Services installed and Exchange 2010.Please Note:I am running AD (Global Catalog) and Exchange 2010 on the same server and this is not a …

AD and Kerberos Token Bloat – Analyzing Group Nesting

How To: Analyze Nested AD Groups.I am working on a Kerberos Token size issue (Token Bloat) and need to accurately depict a groups nested members for token size analysis and remediation.Brief Token Bloat Explanation:Token Bloat is where due to several factors including deep group nesting the Kerberos token utilized in AD for resource authentication bloats towards …