AD Get last password set and expiry info

By Matt Comment Closed
get-aduser -filter * -properties passwordlastset, passwordneverexpires |ft Name, passwordlastset, Passwordneverexpires   to Export to CSV Get-ADUser -filter * -properties passwordlastset, passwordneverexpires | sort-object name | select-object Name, passwordlastset, passwordneverexpires | Export-csv -path c:\temp\user-password-info.csv...
Read More

disable (turn off) the default Windows 2012 Administrator Complexity

By Matt Comment Closed
If the server is not on a domain 1. On the start menu type Administrative Tool 2. Select Local Security Policy. 3. Change the password Must Meet Complex Requirements option to Disabled.   In a domain enviroment Group Policy Management Expand Forrest >> Domains >> Your Domain Controller. Right click on the Default Domain Policy and click on the Edit from the context menu. Now Expand Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Account Policies -> Password Policy Double-click on the Passwords Must Meet Complexity Requirements option in the right pane. Select Disabled  under define this policy setting: Click Apply then OK all the way out and close the GPO window. In order to refresh the policy type the following command: “gpupdate /force”  in the CMD window and click ENTER. ...
Read More

Office 365 – Creating a shared Mailbox & Change Send as and Full access

By Matt Comment Closed
Create a shared mailbox and change full access and send as permissions: Access Exchange admin centre and ​Go to Recipients, then shared and click on the + icon Enter the require display name and email address ​​​ To add users (this would be both send as and full access, if some users only need full access skip this step) click on the + unders users​, search for the use or select them from the list and either click add or double click on the user and click on OK ​ If you need to add users that only have full access or make changes to existing permissions on shared mailbox, double click on the mailbox ​ In the mailbox settings go to mailbox delegation and click the + under the required permission "full access" and "send as"​​ ...
Read More

Disabling Windows Hello for business

By Matt Comment Closed
Disabling Windows Hello for business: I use Office 365 I wanted to test out the AD Connect. Which allows me to join the pc's the azure domain and login with AD accounts setup on the DC, this allows me to keep existing permission on Server and I do not need to join it to Azure AD. What I found was that when logging in it prompted to setup a pin, to get pass this follow the steps below: Enter in Login credentials click on setup PIN, then click on the X, it will give an error message, click on Skip for now open Group Policy gpedit.msc Got to "Administrative Templates > Windows Components > Windows Hello for Business" under both User configuration and Computer configuration, double click on Use Windows Hello for Business and select Disabled Log off and back in to confirm it is working ...
Read More

Enabling Nested Virtualization

By Matt Comment Closed
A Hyper-V host running Windows Server 2016 or Windows 10 Anniversary Update. A Hyper-V VM running Windows Server 2016 or Windows 10 Anniversary Update. A Hyper-V VM with configuration version 8.0 or greater. An Intel processor with VT-x and EPT technology. Shutdown VM Open Powershell as admin and run this command on Hyper-V host "Set-VMProcessor -VMName <VMName> -ExposeVirtualizationExtensions $true When using Nested Virtualization you can not use dynamic memory. Set to VM to Static memory if it isn't already Start VM Install Hyper V role More info: https://docs.microsoft.com/en-gb/virtualization/hyper-v-on-windows/user-guide/nested-virtualization   Script that will prompt you to enter name of VM $Server = Read-Host -Prompt 'Input your server name' Set-VMProcessor -VMName $Server -ExposeVirtualizationExtensions $true...
Read More