Jason Yoder, MCT

For this exercise, we are going to have to use the Active Directory module of PowerShell.  You will need to execute this in a PowerShell session or ISE running on a Windows Server 2008 R2 server or a Windows 7 client with RSAT installed. Import-Module ActiveDirectory I have already set up a security group called Astronauts_GG.  The members of this group are Neil Armstrong, Gus Grissom, Sally Ride, and David Wolf .  Out next step is to be able to enumerate all the members of this group.  To do this, type: Get-ADGroupMember –Identity Astronauts_GG You will see each user object listed for each member of the group. Specifying the logon hours is going to be a bit more complex.  Let’s take a look at the logon hours for a user from Active Directory Users and Computers.  Right click a user account and select Properties   Click the Account tab.  Now click the Logon Hours… button.  Below is an image of the logon hours graphic: ...

This is not as hard as what you might think. From a previous blog, I showed you how to add a Static IP address to server core. netsh interface show interfaces Record the index number of the interface you want to work with. In this case, let's say it is 3. netsh interface ipv4 set address name=3 source=static address=10.10.1.10 mask=255.255.0.0 To add an address for your DNS server: netsh interface ipv4 set dnsservers name=3 source=static address=10.10.1.1 primary . The above example assumes that you set your network interface card to an IP address of 10.10.1.10 and then set interface to use the address of a DNS server at 10.10.1.1

At one point, the tombstone value for Microsoft networks was 60 days. The problem with that is that prestaged computers did not always make it from the factory to being joined on the domain in time. For that reason, Microsoft started to change the tombstone value to 180 days. Here are two guidelines to help you determine the tombstone value: On a domain controller in a forest that was created on a domain controller running Windows Server 2003 with Service Pack 1 (SP1), Windows Server 2003 with Service Pack 2 (SP2), Windows Server 2008, or Windows Server 2008 R2, the default value is 180 days. On a domain controller in a forest that was created on a domain controller running Windows 2000 Server, Windows Server 2003, or Windows Server 2003 R2, the default value is 60 days. To absolutely know, follow this procedure on your Windows 2008 domain controller: 1. Click Start , point to Admi...

Below is the link for the latest version of Powershell V2 as of the writing of this article. The ISE (Integrated Scripting Environment) is good tool for those who are scripting in Powershell. It offers 3 windows. One for the script you are writing, one for the output, and one for commands. It makes writing powershell scripts faster and easier. Download: http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=c913aeab-d7b4-4bb1-a958-ee6d7fe307bc&displaylang=en