Single or double quotes in Active Directory cmdlets

A special syntax for the Filter parameter is required for some Active Directory PowerShell cmdlets such as Get-ADUser to get the expected result.
This article explains perfectly how to properly handle it : http://www.powershellish.com/blog/2015-11-17-ad-filter

Advertisements

Setting aliases in Powershell 4

In Powershell, aliases are shortcuts for cmdlets or for your own functions.
You can create one easily using New-Alias or Set-Alias cmdlets.
To make them available within any Powershell session, put them in the $Profile configuration file.
Let’s have an example :

function start_vm() {
VBoxManage startvm "devbox"
}

Set-Alias -name svm -value start_vm -description "Booting dev VM"

To make these new aliases available in your current session, reload your configuration file :

.$Profile

To list all the available aliases :

Get-Alias

or

gal

Could not fetch our SID – did we join ?

If you get this message, your linux server is not member of an Active Directory realm.
To join properly the realm :

[root@localhost:~]# net ads leave -U

Join your server using an Administrator account in the right OU using the createcomputer option

[root@localhost:~]# net ads join -U createcomputer=DOMAIN/Servers/Non-Windows

Once joined, check the trust secret for your DOMAIN :

[root@localhost:~]# wbinfo -t
checking the trust secret for domain DOMAIN via RPC calls succeeded

In Microsoft Active Directory, what is the difference between security and distribution groups ?

To quote the documentation below regarding Active Directory groups,

Groups are used to collect user accounts, computer accounts, and other groups into manageable units. Working with groups instead of with individual users helps simplify network maintenance and administration.

There are two types of groups in Active Directory:

Distribution groups Used to create email distribution lists.

Security groups Used to assign permissions to shared resources.

Full details here : Active Directory Security Groups