<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Shariq Sheikh &#124; Port 389 &#187; Active Directory</title>
	<atom:link href="http://www.shariqsheikh.com/blog/index.php/base/active-directory/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.shariqsheikh.com/blog</link>
	<description>- activity of Active Directory and the rest</description>
	<lastBuildDate>Fri, 20 Jan 2012 06:30:58 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Directory Service: Event ID 1480 and 1393, replication halted due to low disk space</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201104/directory-service-event-id-1480-and-1393-replication-halted-due-to-low-disk-space/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201104/directory-service-event-id-1480-and-1393-replication-halted-due-to-low-disk-space/#comments</comments>
		<pubDate>Fri, 29 Apr 2011 03:30:19 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Windows Server 2008]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/index.php/201104/directory-service-event-id-1480-and-1393-replication-halted-due-to-low-disk-space/</guid>
		<description><![CDATA[The information provided in event logs is often not too clear but it has definitely gotten better starting in W2K8. I recently encountered an issue where replication delays to certain DC were reported. I immediately looked at the repadmin&#160; replication summary and noticed that my deltas that usually stayed around within an hour had jumped [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201104/directory-service-event-id-1480-and-1393-replication-halted-due-to-low-disk-space/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Auditing Group Membership changes</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201103/auditing-group-membership-changes/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201103/auditing-group-membership-changes/#comments</comments>
		<pubDate>Thu, 03 Mar 2011 22:56:07 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/index.php/201103/auditing-group-membership-changes/</guid>
		<description><![CDATA[I often get this asked this question, “how do I audit group membership changes”. Whereas a lot of AD Change Monitor Tools (Quest, Netwrix etc.) have nice reports that can be generated to look up this information, this question comes up when a change auditor product for AD is not in picture. Let me cover [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201103/auditing-group-membership-changes/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PowerShell : How do I create Trust ?</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201102/powershell-how-do-i-create-trust/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201102/powershell-how-do-i-create-trust/#comments</comments>
		<pubDate>Thu, 24 Feb 2011 22:39:00 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[PowerShell]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/?p=974</guid>
		<description><![CDATA[A question was raised on ActiveDir regarding the ability to create Trust via a command line utility. It was discussed how netdom is no longer a supported command line utility to create Trusts. I referenced a snip from AD Cook Book using PowerShell to create Trust via the .Net AD namespace method alternatively.(System.DirectoryServices.ActiveDirectory). You can [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201102/powershell-how-do-i-create-trust/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Server Core R2 DC promotion fails due to unavailable ADDS binaries</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201102/server-core-r2-dc-promotion-fails-due-to-unavailable-adds-binaries/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201102/server-core-r2-dc-promotion-fails-due-to-unavailable-adds-binaries/#comments</comments>
		<pubDate>Mon, 21 Feb 2011 05:44:50 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Server Core]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/index.php/201102/server-core-r2-dc-promotion-fails-due-to-unavailable-adds-binaries/</guid>
		<description><![CDATA[I encountered an issue promoting a Server Core R2 to a domain controller. The DCPROMO on Server Core is handled via unattended mode with answer file. The error I received is below. It was due to Server Core’s inability to install/confirm ADDS binaries. C:UsersAdministrator&#62;dcpromo /unattended:answer.txt Checking if Active Directory Domain Services binaries are installed&#8230; Failed [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201102/server-core-r2-dc-promotion-fails-due-to-unavailable-adds-binaries/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PowerShell : How do I clear sIDhistory attribute ?</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201012/powershell-how-do-i-clear-sidhistory-attribute/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201012/powershell-how-do-i-clear-sidhistory-attribute/#comments</comments>
		<pubDate>Mon, 13 Dec 2010 21:02:02 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[PowerShell]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/index.php/201012/powershell-how-do-i-clear-sidhistory-attribute/</guid>
		<description><![CDATA[What is sIDhistory attribute ? The sIDhistory attribute is the key attribute that holds the previous SID(s) of Users and Groups objects that facilitate the Active Directory migrations. It contains previous SIDs used for the object if the object was moved from another domain. Whenever an object is moved from one domain to another, a [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201012/powershell-how-do-i-clear-sidhistory-attribute/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>PowerShell : How do I set the delegation sensitive flag on users and computers ?</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201008/powershell-how-do-i-set-the-delegation-sensitive-flag-on-users-and-computers/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201008/powershell-how-do-i-set-the-delegation-sensitive-flag-on-users-and-computers/#comments</comments>
		<pubDate>Mon, 23 Aug 2010 20:27:57 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[PowerShell]]></category>
		<category><![CDATA[ADWS]]></category>
		<category><![CDATA[One-liner]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/index.php/201008/powershell-how-do-i-set-the-delegation-sensitive-flag-on-users-and-computers/</guid>
		<description><![CDATA[Kerberos Delegation, constrained and unconstrained is a complex topic, and one that often comes up when Security implications of External/Forests Trusts are discussed. Few days ago, on ActiveDir a similar topic was shed light upon. In brief Brian Arkills sums it up below, The other security implication that most folks seem oblivious to is the [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201008/powershell-how-do-i-set-the-delegation-sensitive-flag-on-users-and-computers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PowerShell : How to lookup Schema version of your forest ?</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201007/powershell-how-to-lookup-schema-version-of-your-forest/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201007/powershell-how-to-lookup-schema-version-of-your-forest/#comments</comments>
		<pubDate>Fri, 30 Jul 2010 16:42:35 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[PowerShell]]></category>
		<category><![CDATA[Windows Server 2008 R2]]></category>
		<category><![CDATA[ADWS]]></category>
		<category><![CDATA[One-liner]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/index.php/201007/powershell-how-to-lookup-schema-version-of-your-forest/</guid>
		<description><![CDATA[The schema version is revealed via the objectversion attribute off of the schema object from your configuration head of the forest i.e “cn=schema,cn=configuration,dc=yourdomain,dc=int”. So using Quest Cmdlets, you can run this query : Get-QADObject "cn=schema,cn=configuration,dc=yourdomain,dc=int" -ip objectversion &#124; select objectversion The –ip is the alias for includedproperties. And, when using the native AD Cmdlets of [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201007/powershell-how-to-lookup-schema-version-of-your-forest/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Reviewing few very useful adds in Quest AD Cmdlets v1.4</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201007/reviewing-few-very-useful-adds-in-quest-ad-cmdlets-v1-4/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201007/reviewing-few-very-useful-adds-in-quest-ad-cmdlets-v1-4/#comments</comments>
		<pubDate>Fri, 16 Jul 2010 16:08:09 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[PowerShell]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/index.php/201007/reviewing-few-very-useful-adds-in-quest-ad-cmdlets-v1-4/</guid>
		<description><![CDATA[Whereas most of newly added cmdlets focus on&#160; PKI and Email Address Management in v1.4, there are a few cmdlets and handful of new parameters that ought to come in very handy with your AD tasks. Below I review a few that I think are some great adds : When you are enumerating a large [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201007/reviewing-few-very-useful-adds-in-quest-ad-cmdlets-v1-4/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Quest AD Cmdlets a.k.a Active Roles Management Shell version 1.4 gets released</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201007/quest-ad-cmdlets-a-k-a-active-roles-management-shell-version-1-4-gets-released/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201007/quest-ad-cmdlets-a-k-a-active-roles-management-shell-version-1-4-gets-released/#comments</comments>
		<pubDate>Thu, 15 Jul 2010 21:55:12 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[PowerShell]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/index.php/201007/quest-ad-cmdlets-a-k-a-active-roles-management-shell-version-1-4-gets-released/</guid>
		<description><![CDATA[From version 1.2 with 49 cmdlets, to version 1.3 with 63 cmdlets and now on to version 1.4 that has 32 new cmdlets making it total of 95. Here are the new cmdlets in v1.4 : • Get-QADLocalCertificateStore • New-QADLocalCertificateStore • Remove-QADLocalCertificateStore • Get-QADCertificate • Where-QADCertificate • Add-QADCertificate • Import-QADCertificate • Show-QADCertificate • Edit-QADCertificate • [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201007/quest-ad-cmdlets-a-k-a-active-roles-management-shell-version-1-4-gets-released/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Create Active Directory Delegations Report with PowerGUI</title>
		<link>http://www.shariqsheikh.com/blog/index.php/201006/create-active-directory-delegations-report-with-powergui/</link>
		<comments>http://www.shariqsheikh.com/blog/index.php/201006/create-active-directory-delegations-report-with-powergui/#comments</comments>
		<pubDate>Mon, 28 Jun 2010 16:30:24 +0000</pubDate>
		<dc:creator>Rick</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[PowerShell]]></category>

		<guid isPermaLink="false">http://www.shariqsheikh.com/blog/index.php/201006/creating-active-directory-delegations-report-with-powergui/</guid>
		<description><![CDATA[Often times you need to analyze your existing permissions (delegations) on your AD Objects within your domain/forest, perhaps you have just taken over an administrative role over AD and would like to quickly surface information regarding what group and user accounts have certain rights across the board in a pertinent domain. With PowerGUI and Kirk [...]]]></description>
		<wfw:commentRss>http://www.shariqsheikh.com/blog/index.php/201006/create-active-directory-delegations-report-with-powergui/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

