Group Policy Blog

Dealing With The AccountExpires Date in Active Directory – With PowerShell

By┬ánow most of us are aware that Active Directory dates are not the easiest bits of data to deal with. Wrapping our heads around how AD stores and deals with dates is very interesting on an intellectual level, and equally infuriating on a productivity level. Accessing this data from PowerShell is a useful technique to […]

Azure AD Domain Services

Darren Mar-Elia was kind enough to take some time to walk through and share his thoughts on the Azure AD Domain Services. Microsoft recently released a preview and Darren jumped right in there picking it apart and helping us make sense out of the new capabilities. Take a look and hear his insight into expectations […]

Spiceworld 2015 – Austin, TX!

Hi everyone! I hope you are well and you all had a great summer. I have to admit I’m torn, not quite enough Summer for me (or my kids) but I’m extremely excited to get back into a rhythm and get cranking on some great work this year. We have an amazing year planned at […]

Group Policy Comment

Do you place ‘comments’ on your GPOs? Did you ever wonder how to manage these, or how they may be useful. I put up a quick post on my blog ( that walks through GP Comments and how to manage them. It points back to SDM Software for deeper solutions with Group Policy Compliance Manager […]

4th Edition of O’Reilly Active Directory Book is out!

Just a quick note to let everyone know that the 4th edition of the Active Directory Book from O’Reilly is out, courtesy of AD MVP Brian Desmond. For those of you who aren’t familiar with this book, its an invaluable resource for Active Directory Administrators, and Brian has added his considerable AD expertise to this latest update, […]

PowerShell Script to leverage AD Tombstone cmdlets

Well, Active Directory MVP and well-known speaker Guido Grillenmeier from HP has taken my AD tombstone reanimation cmdlets and fashioned a very cool PowerShell script that uses the cmdlets and the new AD snapshot mounting feature in Server 2008 to not only restore deleted objects but also restore their attributes that are lost when the […]

Going to DEC 2008? See you there!

NetPro is hosting their annual Directory Experts Conference next week in Chicago. If you haven’t been to this show, its a great place to mean all the giant brains in the Active Directory world and learn some cool things about AD and related technologies. If you are going, look me up when you’re there. I’m […]

Free GUI tool for Server 2008 fine-grained password management

As you may have heard, Microsoft is finally providing the ability to have fine-grained password policies within a single AD domain. That means you can now have different password policies for different user groups within AD. This feature is described nicely in Jorge de Almeida’s excellent blog entry. Well, now our friends at SpecOps have […]