Monday, April 19, 2010
display group memberships for a user
dsget user "cn=M T,ou=users,ou=disabled objects, dc=internal,dc=local" -memberof -expand >>MT.txt
move MT.txt desktop
move MT.txt desktop
Display members who have access to a folder
If it's a network drive, map it as T drive then type in
cacls t:/
Source
http://ss64.com/nt/xcalcs.html
cacls t:/
Source
http://ss64.com/nt/xcalcs.html
Wednesday, April 14, 2010
Active Directory: Copy Distribution List Members to Another Distribution List
Summary: In this example, we will copy all members from one Distribution Group to another Distribution Group.
Copy the contents below and save as copymembers.vbs to C: drive
Const ADS_GROUP_TYPE_GLOBAL_GROUP = &H2
Set objOU = GetObject("LDAP://OU=Security Groups, dc=company, dc=com")
Set objOldGroup = GetObject("LDAP://CN=mysourcegroup, ou=security groups, dc=company, dc=com")
Set objNewGroup = GetObject("LDAP://CN=mytargetgroup, ou=security groups, dc=company, dc=com")
On Error Resume Next
For Each objUser in objOldGroup.Member
objNewGroup.Add "LDAP://" & objUser
Next
Open Command prompt:
C:\>cscript copymembers.vbs
The script will copy all members in the "mysourcegroup" Distribution List to your "mytargetgroup" Distribution List.
Note: Some organizations like to use # in front of their Distribution List names so they appear together in the GAL. Because this is a special character it will need to be in double quotes to treat # as a literal.
Example:
("LDAP://""CN=mysourcegroup""
James Chong (MVP)MCSE M+, S+, MCTS, Security+
msexchangetips.blogspot.com
Copy the contents below and save as copymembers.vbs to C: drive
Const ADS_GROUP_TYPE_GLOBAL_GROUP = &H2
Set objOU = GetObject("LDAP://OU=Security Groups, dc=company, dc=com")
Set objOldGroup = GetObject("LDAP://CN=mysourcegroup, ou=security groups, dc=company, dc=com")
Set objNewGroup = GetObject("LDAP://CN=mytargetgroup, ou=security groups, dc=company, dc=com")
On Error Resume Next
For Each objUser in objOldGroup.Member
objNewGroup.Add "LDAP://" & objUser
Next
Open Command prompt:
C:\>cscript copymembers.vbs
The script will copy all members in the "mysourcegroup" Distribution List to your "mytargetgroup" Distribution List.
Note: Some organizations like to use # in front of their Distribution List names so they appear together in the GAL. Because this is a special character it will need to be in double quotes to treat # as a literal.
Example:
("LDAP://""CN=mysourcegroup""
James Chong (MVP)MCSE M+, S+, MCTS, Security+
msexchangetips.blogspot.com
List member of a group in exchange
dsget group "DN_of_group" -members -expand > userlist.txt
C:\Users\jqiu-admin>dsget group "CN=Sales - Products & Services,OU=Security Grou
ps,OU=Groups,OU=Prod,DC=internal,DC=local" -members -expand > userlist.txt
C:\Users\jqiu-admin>move userlist.txt C:\Users\jqiu-admin\Desktop\temp
1 file(s) moved.
C:\Users\jqiu-admin>dsget group "CN=Sales - Products & Services,OU=Security Grou
ps,OU=Groups,OU=Prod,DC=internal,DC=local" -members -expand > userlist.txt
C:\Users\jqiu-admin>move userlist.txt C:\Users\jqiu-admin\Desktop\temp
1 file(s) moved.
Copy group membership of a user to another user
1) Download the VB script from here:
http://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/copy-group-memberships-from-one-ad-user-to-another.aspx
2) Save the script to C drive;
3) Open up an command prompt;
C:\>cscript Copymembership.vbs existingEmployee newEmployee
where ntid1 is the existing employee's username and ntid2 is the new employee's username.
http://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/copy-group-memberships-from-one-ad-user-to-another.aspx
2) Save the script to C drive;
3) Open up an command prompt;
C:\>cscript Copymembership.vbs existingEmployee newEmployee
where ntid1 is the existing employee's username and ntid2 is the new employee's username.
Sunday, April 11, 2010
How to restore the sent item mailbox in outlook
You need to download this exe file(MFCMAPI 32 bit executable - March 2010 (6.0.0.18)) from here:
http://mfcmapi.codeplex.com/releases/view/41828
Extra then install it.
Look for mailbox
Double click PR_ATTR_HIDDEN and uncheck the "Boolean" box and click OK -> set the value to false. If it's true then your sent item mailbox won't show.
Correct the registry value using the information from the following article from the Knowedge Base online to prevent future issues with any users moved to the impacted Back-End Exchange Server:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;311154 (http://support.microsoft.com/default.aspx?scid=kb;en-us;311154)
To immediately correct the problem for existing users, you can use the following steps using MFCMAPI.EXE:
Launch MFCMAPI and click OK to the first window.
Click Session, click Log On and Display Store Table.
Choose the Outlook profile for the mailbox and click OK, provide credentials if prompted.
Double click the Mailbox - and a new window will open.
Expand the Root Folder .
Expand Top Of Information Store.
Single click to select the impacted folder - for example Contacts.
In the detail window, note the value of the PR_ATTR_HIDDEN property (T or F - T means it is Hidden).
Double click PR_ATTR_HIDDEN and uncheck the "Boolean" box and click OK.
Close all MFCMAPI windows and log off Outlook and restart.
The Contacts (or other) folder will be visible and the shortcuts will now work.
Reference:
http://support.microsoft.com/kb/924226/en-us
http://mfcmapi.codeplex.com/releases/view/41828
Extra then install it.
Look for mailbox
Double click PR_ATTR_HIDDEN and uncheck the "Boolean" box and click OK -> set the value to false. If it's true then your sent item mailbox won't show.
Correct the registry value using the information from the following article from the Knowedge Base online to prevent future issues with any users moved to the impacted Back-End Exchange Server:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;311154 (http://support.microsoft.com/default.aspx?scid=kb;en-us;311154)
To immediately correct the problem for existing users, you can use the following steps using MFCMAPI.EXE:
Launch MFCMAPI and click OK to the first window.
Click Session, click Log On and Display Store Table.
Choose the Outlook profile for the mailbox and click OK, provide credentials if prompted.
Double click the Mailbox -
Expand the Root Folder .
Expand Top Of Information Store.
Single click to select the impacted folder - for example Contacts.
In the detail window, note the value of the PR_ATTR_HIDDEN property (T or F - T means it is Hidden).
Double click PR_ATTR_HIDDEN and uncheck the "Boolean" box and click OK.
Close all MFCMAPI windows and log off Outlook and restart.
The Contacts (or other) folder will be visible and the shortcuts will now work.
Reference:
http://support.microsoft.com/kb/924226/en-us
Tuesday, April 6, 2010
Where to find the command prompt in windows?
Find command prompt: \\ComputerName\c$\WINDOWS\system32
It is the ipconfig.exe file.
Type in set in command prompt:
C:\Documents and Settings\jqiu-admin>set
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\jqiu-admin\Application Data
CLIENTNAME=D735054T
ClusterLog=C:\WINDOWS\Cluster\cluster.log
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=AXONREMOTE-K1
ComSpec=C:\WINDOWS\system32\cmd.exe
EXCHICONS=C:\Program Files\Exchsrvr\bin\maildsmx.dll
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\jqiu-admin
LOGONSERVER=\\WINDCP18
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Program Files\HP\NCU;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\
Wbem;C:\WINDOWS\system32\WindowsPowerShell\v1.0;C:\Program Files\System Center O
perations Manager 2007\;C:\Program Files\Windows Imaging\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 5, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0205
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=RDP-Tcp#42
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\JQIU-A~1\LOCALS~1\Temp\2
TMP=C:\DOCUME~1\JQIU-A~1\LOCALS~1\Temp\2
UATDATA=C:\WINDOWS\system32\CCM\UATData\D9F8C395-CAB8-491d-B8AC-179A1FE1BE77
USERDNSDOMAIN=INTERNAL.LOCAL
USERDOMAIN=INTERNAL
USERNAME=jqiu-admin
USERPROFILE=C:\Documents and Settings\jqiu-admin
windir=C:\WINDOWS
Look at what's under path then put it under envrionment -
A more permanent way to manage environment variables is provided in the System Properties dialog box. Open Control Panel-Performance and Maintenance-System (or right-click on My Computer and choose "Properties"). In the box that opens, click the "Advanced" tab to obtain the dialog box shown below. Next, click the button "Environment Variables".
For more information, click this link below:
http://vlaurie.com/computers2/Articles/environment.htm
It is the ipconfig.exe file.
Type in set in command prompt:
C:\Documents and Settings\jqiu-admin>set
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\jqiu-admin\Application Data
CLIENTNAME=D735054T
ClusterLog=C:\WINDOWS\Cluster\cluster.log
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=AXONREMOTE-K1
ComSpec=C:\WINDOWS\system32\cmd.exe
EXCHICONS=C:\Program Files\Exchsrvr\bin\maildsmx.dll
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\jqiu-admin
LOGONSERVER=\\WINDCP18
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Program Files\HP\NCU;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\
Wbem;C:\WINDOWS\system32\WindowsPowerShell\v1.0;C:\Program Files\System Center O
perations Manager 2007\;C:\Program Files\Windows Imaging\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 5, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0205
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=RDP-Tcp#42
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\JQIU-A~1\LOCALS~1\Temp\2
TMP=C:\DOCUME~1\JQIU-A~1\LOCALS~1\Temp\2
UATDATA=C:\WINDOWS\system32\CCM\UATData\D9F8C395-CAB8-491d-B8AC-179A1FE1BE77
USERDNSDOMAIN=INTERNAL.LOCAL
USERDOMAIN=INTERNAL
USERNAME=jqiu-admin
USERPROFILE=C:\Documents and Settings\jqiu-admin
windir=C:\WINDOWS
Look at what's under path then put it under envrionment -
A more permanent way to manage environment variables is provided in the System Properties dialog box. Open Control Panel-Performance and Maintenance-System (or right-click on My Computer and choose "Properties"). In the box that opens, click the "Advanced" tab to obtain the dialog box shown below. Next, click the button "Environment Variables".
For more information, click this link below:
http://vlaurie.com/computers2/Articles/environment.htm
Saturday, April 3, 2010
Why can't I join my computer to the domain?
I have a Win2k8 server - server1, got DNS and ADDS installed.
Domain name server.com.
I got another Win2k8 server - server2, can ping server.com but why can't I join it to the domain?
--> check your DNS on server2, make sure it's pointing to the server1's ip not the router's IP!
Domain name server.com.
I got another Win2k8 server - server2, can ping server.com but why can't I join it to the domain?
--> check your DNS on server2, make sure it's pointing to the server1's ip not the router's IP!
Subscribe to:
Posts (Atom)