Blog

Lees hier de laatste IGA-ontwikkelingen

LDAP: how-to bind to Active Directory

When using scripts and Active Directory, there are several ways to connect to a domain or forest: GC://tools4ever.local Connects to the global catalog of the domain, relying on DNS records ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

,

LDAP: managing exchange features using protocolsettings attribute

Active Directory stores the contents of the “Exchange features” tab in various attributes. The protocol settings for Outlook Web Access, POP3 and IMAP4 are stored in the attribute “protocolSettings” (multi-valued). ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

, ,

UMRA: have unit managers create their own temporary employees

Usually when a new employee enters the company, operations will receive a request for a new user account. When an external or temporary employee needs a user account, usually the ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

PowerShell: add and remove send-as permissions

Adds the sendas permission to a user object using ExtendedRights add-ADPermission -identity "CN=Arnout van der Vorst,OU=Accounts,DC=tools4ever,DC=local" -user "CN=Ab Vos,OU=Accounts,DC=tools4ever,DC=local" -AccessRights ExtendedRight -ExtendedRights Send-As Removes the sendas permission from a user ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

,

Databases: SQL query using group by and having

Suppose you have a database containing employee information, where the table structure is roughly: temployee employeeid firstname lastname ... tcontract employeeid contractnumber date_end ... Table “temployee” holds 1 record for ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

,

Exchange 2000/2003: scripted pst mailbox export

To export Exchange mailboxes in bulk using a script, you can use both mailmig or ExMerge. I prefer mailmig since that is always part of the default Exchange Management Tools ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

,

VBScript: hide mailbox in Exchange 5.5

Same as all scripts working with Exchange 5.5, download and install the AcctCrt COM components from Microsoft. Only issue with this script is that it’s not easy to reverse the ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

, ,

UMRA: mass reset permissions on home directories

If you are in a migration project or trying to cleanup your existing file system, you may want to apply new or reset existing permissions on home directories. Most fileservers ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

UMRA: sync your active directory with any hr-system

Active Directory user creation is usually a pre-request operation, where a paper form is filled out by a member of HR and brought to operations to create the account. This ...
Lees meer

UMRA: monthly password expiration

In Active Directory networks where security is important, you might want to introduce monthly password expiration to a special group of user accounts. Let’s say you have 5000 employees, of ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

,

UMRA: temporary software licenses

A popular method to control software licenses, such as Microsoft Visio, Publisher and Project, is to make these licenses temporary. In most networks, these applications are represented by groups in ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

VBScript: create Exchange 5.5 mailbox using ADSI and LDAP

For the below script to work, you need the AcctCrt COM components to be installed. You can download this component form the Microsoft site. strDomainNT4 = "TOOLS4EVER" strUsername = "avdvorst" strEx55Server ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

, , ,

Databases: oracle dump database table layout

In SQL Server there is a nice feature which lets you generate an SQL script from any database using the SQL Enterprise Manager. Oracle can do the same using sqlplusw: ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

, ,

Databases: date and time functions

Unfortunately databases don’t all use the same SQL language. In most cases, the notation of SQL queries is roughly the same, however in some cases there are differences, for instance ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management

AD: which attributes are stored in the global catalog?

The Global Catalog (GC) doesn’t store all attributes. Refer to http://support.microsoft.com/kb/256938 for all default GC attributes in Windows 2000 Active Directory. You can easily check if an attribute is stored in ...
Lees meer

Arnout van der Vorst

Categorieën

Identity en Access Management