A few days ago I was chatting with a colleague of mine in the UK about automated permissions assignment in AD through DSACLS. His reason to do this was because of CLM deployments where you had to use different kinds of Extended Rights that are defined in AD throughout the AD environment. Each AD deployment by default contains a set of Extended ...

What to do with user accounts that are or not mailbox enabled when the corresponding user(s) leave(s) the company. For that, and without buying a full blown solution you can create tooling in a simple way if the following process is sufficient for you.   IT IS A 5 STEP PROCESS: (1) Be sure to receive some notification a user has left the ...

Yesterday and today I (and some other people) were involved in heavy discussion how you can accomplish: Granting Admin level access for the OS on DCs but not within AD   The posts can be found in: NG: ''microsoft.public.windows.server.active_directory'' Post subject: ''Grant Administrative Access to a Domain Controller''   The ...

ADMTv3 has been out for a while and is the free Microsoft Migration Tool available for use (besides other small tools that can help you during your migration like NETDOM, SUBINACL, ROBOCOPY, etc.). It can be downloaded here Besides the tool you can also view and download documents with loads of info about migrations and how to use ADMT. The ...