Active Directory

20 posts
2026

Moving FSMO Roles

Why is it necessary to move FSMO roles? In an Active Directory environment, not all Domain Controllers (DCs) are the same. Although most …
Read more

FSMO Role Function

FSMO (Flexible Single Master Operations) roles are critical roles in an Active Directory environment that are assigned to one or more domain …
Read more
2023

Exchange: How to Install Exchange Server

At this point, we should have completed the following: Extended the Active Directory schema Prepared the domain for Exchange Installed the …
Read more

Exchange: How to Install Exchange Server Prerequisites

For security and performance reasons, it is recommended to install Exchange only on member servers and not on Active Directory servers. In …
Read more

Exchange: How to Prepare Your Domain for Exchange

Exchange uses Active Directory to store information about mailboxes and Exchange server configurations in your organization. Before …
Read more

Exchange: How to Extend the Active Directory Schema

In this post, we’ll see how to extend the Active Directory schema and prepare it for an Exchange installation. The Active Directory …
Read more

Exchange: Verify AD Requirements for Exchange Server

Before starting any configuration, we must verify the Active Directory requirements to begin installing Exchange in our environment. The …
Read more

Active Directory: SYSVOL Folder not replicating

The SYSVOL directory is a folder on Windows domain controllers that contains information and data necessary for the logon system and other …
Read more

Active Directory: Password Settings Objects (PSOs)

Active Directory (AD) is a Microsoft directory service that allows system administrators to centralize the management of users, groups, and …
Read more
2021

ADDS: Configure and Promote a Second Domain Controller

In this post, we’ll see how to configure and promote a second domain controller. Having a second domain controller is crucial, as it …
Read more

PowerShell: How to Transfer Security Groups from One User to Another

A couple of days ago, I was asked for help copying security groups from one user to a new user. While it’s true that we can perform …
Read more

PowerShell: Send email to users when password will soon expire.

In this post, we’ll see how to alert users when their domain password will soon expire. To do this, we’ll create a PowerShell …
Read more

PowerShell: Create security groups for each server, remove local administrators and add them to the new group.

Security Procedure: Local Administrator Control Some time ago, I was asked to find a method to implement certain security and control …
Read more

GPO: How to Configure Password Policies

In this post, I will show you how to create a GPO to meet the minimum requirements for password policies. The first step is to access Group …
Read more

PowerShell: How to Create New Users in AD

The easiest way to create users in AD is undoubtedly using Active Directory Users and Computers, provided you only want to create one or two …
Read more

ADDS: Install, Configure, and Promote a Domain Controller

In this post, we’ll see how to install the ADDS (Active Directory Domain Services) role and how to promote our new domain controller. …
Read more

GPO: Enable script execution.

PowerShell script execution is disabled by default on domain-joined computers. If you attempt to run a script, you will receive a message …
Read more

How to Extend Schema

Schema Extension Context 1. Upgrading to a Newer Version of Windows Server When you add a new domain controller with a newer version of …
Read more

Active Directory: Delegation of Control.

Scenario Delegation of control in Active Directory can be very helpful when managing a large number of users from different locations. …
Read more

GPO: Maintain the Domain Admins group or other groups as local administrators within computers.

Situation. This is something I’ve seen in different places: sometimes, certain users with administrator privileges on a domain-joined …
Read more