Posts

Showing posts from August, 2023

SOLVED: Active Directory Inter-Site Topology Generator shows as "Invalid"

Image
You may find that the Inter-site topology generator is listed as "Invalid" in Active Directory sites and services. If you view the data in ADSIEdit.msc and open the NTDS Settings You see the referenced server has a 0ADEL: prefix The 0ADEL: prefix indicates that the server to which the connection is to be made has been deleted, and the Active Directory Recycle Bin has been enabled. The server object is in the Recycle Bin (Deleted Objects container).  While you're here - Why not check out our  Active Directory Documentation Tool ?

SOLVED: Why does Active Directory Sites and Services show a replication connection with 0ADEL: in the server name?

Image
In Active Directory Sites and Services you may see a replication connection with 0ADEL: in the name. The 0ADEL: prefix indicates that the server to which the connection is to be made has been deleted, and the Active Directory Recycle Bin has been enabled. The server object is in the Recycle Bin (Deleted Objects container).  While you're here - Why not check out our  Active Directory Documentation Tool ?

Loading and accessing Group Policy Object settings XML reports in C#.NET and PowerShell

Image
If you want to access the settings stored in a Group Policy object you can run the Get-GPOReport PowerShell cmdlet with the name and report type parameters. Get-GPOReport -Name "Default Domain Policy" -ReportType Xml (If you want to do this for a Starter GPO there's an extra step to follow detailed here ). You can also use the Group Policy Management Console. The output however is somewhat complex and there (doesn't seem to be) an XSL file or data model that corresponds to the entire report file. To resolve this we have provided a .NET API based on the .NET Framework 4.8. CENTREL.ThirdParty.Microsoft.GroupPolicy.Model.dll This FREE data model and test harness can be found here. https://www.centrel-solutions.com/support/tools.aspx?feature=GroupPolicyReportApi The API: Loads the GPO report as strongly typed .NET objects. Supports PowerShell. Allows you to find extensions by type. We are using this data model in our Server Documentation tool XIA Configuration Server. ht...

SOLVED: ActiveDirectory PowerShell error "Get-GPO : Current security context is not associated with an Active Directory domain or forest"

Image
When you run the GroupPolicy PowerShell cmdlet Get-GPO  you get the following error: Get-GPO : Current security context is not associated with an Active Directory domain or forest The same thing happens if you run the  Get-GPOReport cmdlet (and the fix is the same). This can occur if the user who is executing the command is not a member of a domain - perhaps you are running the command using a runas /netonly  from a workgroup machine. To resolve this issue you can specify both the server name to use to process the request and the domain from which to read the Group Policy objects. Get-GPO -Server "demo-xcs-2022.demoxcs2022.int" -Domain "demoxcs2022.int" -All  While you're here - Why not check out our  Group Policy Audit and Documentation Tool ?