Active-Directory

The Windows PowerShell Integrated Scripting Environment (ISE) I’m not as hands on with my infrastructure as I used to be (due to promotion and expansion of roles), but along with that I do find my time is far more valuable now. With that in mind, I made a conscious effort to learn at least some basic PowerShell commands for often requested tasks. I found myself wasting a lot of time opening ADUC, finding the user / OU I was looking for, and doing whatever task was required (ex. adding to a group, resetting password, disable password expiration, etc.). Prior to Office 365, we were on a hosted Exchange 2007 platform and did not have PowerShell access. One of the big motivators for the switch was to open up scripting access so that we could start to see time savings. ...

I recently came into a situation where I wanted to update the CA certificate on my Tintri T820 with a new one from Active Directory. As I went through the process I realized it was not just a point and click process, so I opted to grab some screen shots and document the process. To get started, you should (not mandatory but highly recommended) check to see what algorithm your AD is using. Mine was still using SHA1, which has already been deprecated by some of the newer web browsers (*ahem* Google Chrome, I’m looking at you). I figured if I was going to go through this process now, I might as well follow the best practice and upgrade to a newer, more secure algorithm. ...