{"id":5951,"date":"2015-09-08T12:00:14","date_gmt":"2015-09-08T11:00:14","guid":{"rendered":"http:\/\/www.markwilson.co.uk\/blog\/?p=5951"},"modified":"2015-09-05T22:49:12","modified_gmt":"2015-09-05T21:49:12","slug":"viewing-active-directory-object-updates-with-repadmin","status":"publish","type":"post","link":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm","title":{"rendered":"Viewing Active Directory object updates with RepAdmin"},"content":{"rendered":"<p>A couple of weeks back,\u00a0I found myself having to investigate what had caused an Active Directory\u00a0user account to be updated. We could see the last modified time\u00a0on the Object tab for a user account in Active Directory Users and Computers (<code>dsa.msc<\/code>) and it&#8217;s <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/dd391845(v=ws.10).aspx\">also available using PowerShell<\/a>.<\/p>\n<p>What I really wanted to know though, was what attribute(s) on the object had changed.<\/p>\n<p>It turns out that viewing Active Directory object updates is remarkably simple &#8211; even as a normal (non-admin) user. First of all you need to know the distinguished name (DN) for the object. If you don&#8217;t have access to any administrative tools then the following script might be useful (<a href=\"http:\/\/blogs.technet.com\/b\/heyscriptingguy\/archive\/2008\/05\/12\/how-can-i-determine-the-distinguished-name-of-the-ou-where-the-logged-on-user-s-user-account-resides.aspx\">taken from the &#8220;Hey, Scripting Guy!&#8221; blog<\/a>):<\/p>\n<p><code>Set objSysInfo = CreateObject(\"ADSystemInfo\")<\/code><br \/>\n<code>strUserName = objSysInfo.UserName<\/code><\/p>\n<p><code>Set objUser = GetObject(\"LDAP:\/\/\" &amp; strUserName)<\/code><br \/>\n<code>strOUName = objUser.Parent<\/code><\/p>\n<p><code>Set objOU = GetObject(strOUName)<\/code><br \/>\n<code>Wscript.Echo objOU.distinguishedName<\/code><\/p>\n<p>If you run this script, it will display something like:<\/p>\n<p>OU=Users,OU=<em>companyname<\/em>,DC=<em>domainname<\/em>,DC=<em>tld<\/em><\/p>\n<p>I also needed to know the name of a domain controller &#8211; that&#8217;s easy as the <code>%logonserver%<\/code> environment variable will provide the information.<\/p>\n<p>Armed with that information, I could then use <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/cc770963.aspx\">the <code>repadmin.exe<\/code> command<\/a> to find out some more information about the user object. I\u00a0did need to install the <a href=\"https:\/\/www.microsoft.com\/en-gb\/download\/details.aspx?id=39296\">Remote Server Administration Tools (RSAT) for Windows 8.1<\/a>\u00a0to get repadmin on a client machine (there are similar RSAT packages for <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=7887\">Windows 7<\/a>\u00a0and <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=45520\">Windows 10<\/a> too). Specifically, the command I used was <code>repadmin.exe \/showobjmeta servername \"CN=Mark\u00a0Wilson,OU=Users,OU=companyname,DC=domainname,DC=tld\"<\/code><\/p>\n<p>The resulting output contains all sorts of information, including which domain controller made the update for each attribute, at what date\/time, to which version, and with which unique serial number (USN). So, for example, I can see the date when my password was last set (from unicodePwd, ntPwdHistory, and pwdLastSet) and that it was version 6.\u00a0 There&#8217;s more information in <a href=\"http:\/\/blogs.technet.com\/b\/askpfeplat\/archive\/2012\/05\/07\/how-to-track-the-who-what-when-and-where-of-active-directory-attribute-changes-part-ii-the-case-of-the-mysteriously-modified-upn.aspx\">Rick Bergman&#8217;s Ask Premier Field Engineering (PFE) post on how to track the who, what, when and where of Active Directory attribute changes<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A couple of weeks back,\u00a0I found myself having to investigate what had caused an Active Directory\u00a0user account to be updated. We could see the last modified time\u00a0on the Object tab for a user account in Active Directory Users and Computers (dsa.msc) and it&#8217;s also available using PowerShell. What I really wanted to know though, was &hellip; <a href=\"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Viewing Active Directory object updates with RepAdmin<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[218],"tags":[102],"class_list":["post-5951","post","type-post","status-publish","format-standard","hentry","category-technology","tag-active-directory"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Viewing Active Directory object updates with RepAdmin - markwilson.it<\/title>\n<meta name=\"description\" content=\"Using the Windows repadmin.exe command to view the update date\/times on an object at an attribute level\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Viewing Active Directory object updates with RepAdmin - markwilson.it\" \/>\n<meta property=\"og:description\" content=\"Using the Windows repadmin.exe command to view the update date\/times on an object at an attribute level\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm\" \/>\n<meta property=\"og:site_name\" content=\"markwilson.it\" \/>\n<meta property=\"article:published_time\" content=\"2015-09-08T11:00:14+00:00\" \/>\n<meta name=\"author\" content=\"Mark Wilson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@markwilsonit\" \/>\n<meta name=\"twitter:site\" content=\"@markwilsonit\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark Wilson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2015\\\/09\\\/viewing-active-directory-object-updates-with-repadmin.htm#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2015\\\/09\\\/viewing-active-directory-object-updates-with-repadmin.htm\"},\"author\":{\"name\":\"Mark Wilson\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\"},\"headline\":\"Viewing Active Directory object updates with RepAdmin\",\"datePublished\":\"2015-09-08T11:00:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2015\\\/09\\\/viewing-active-directory-object-updates-with-repadmin.htm\"},\"wordCount\":312,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\"},\"keywords\":[\"Microsoft Active Directory\"],\"articleSection\":[\"Technology\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2015\\\/09\\\/viewing-active-directory-object-updates-with-repadmin.htm#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2015\\\/09\\\/viewing-active-directory-object-updates-with-repadmin.htm\",\"url\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2015\\\/09\\\/viewing-active-directory-object-updates-with-repadmin.htm\",\"name\":\"Viewing Active Directory object updates with RepAdmin - markwilson.it\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#website\"},\"datePublished\":\"2015-09-08T11:00:14+00:00\",\"description\":\"Using the Windows repadmin.exe command to view the update date\\\/times on an object at an attribute level\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2015\\\/09\\\/viewing-active-directory-object-updates-with-repadmin.htm#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2015\\\/09\\\/viewing-active-directory-object-updates-with-repadmin.htm\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2015\\\/09\\\/viewing-active-directory-object-updates-with-repadmin.htm#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Viewing Active Directory object updates with RepAdmin\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/\",\"name\":\"markwilson.it\",\"description\":\"get-info -class technology | write-output &gt; \\\/dev\\\/web\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\",\"name\":\"Mark Wilson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\",\"width\":800,\"height\":800,\"caption\":\"Mark Wilson\"},\"logo\":{\"@id\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\"},\"description\":\"A Chartered IT Professional, with recent experience in technology leadership, IT strategy and practice management roles, Mark Wilson is an Enterprise Architect in the Advisory and Management Group at risual. During a career spanning more than two decades, Mark has gained widespread recognition as an expert in his field including both industry and national press exposure. In addition to certifications from Microsoft, VMware, Red Hat, The Open Group and Axelos, Mark held a Microsoft Most Valuable Professional (MVP) award for three years and is now part of the MVP Reconnect programme. Mark is also well-known on social media and maintains an award-winning blog.\",\"sameAs\":[\"http:\\\/\\\/www.markwilson.co.uk\\\/\",\"https:\\\/\\\/www.instagram.com\\\/markwilsonuk\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/markawilson\\\/\",\"https:\\\/\\\/x.com\\\/markwilsonit\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCWHlZCoHRTocdvtrOJ2IL4A\"],\"url\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/author\\\/mark-wilson\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Viewing Active Directory object updates with RepAdmin - markwilson.it","description":"Using the Windows repadmin.exe command to view the update date\/times on an object at an attribute level","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm","og_locale":"en_GB","og_type":"article","og_title":"Viewing Active Directory object updates with RepAdmin - markwilson.it","og_description":"Using the Windows repadmin.exe command to view the update date\/times on an object at an attribute level","og_url":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm","og_site_name":"markwilson.it","article_published_time":"2015-09-08T11:00:14+00:00","author":"Mark Wilson","twitter_card":"summary_large_image","twitter_creator":"@markwilsonit","twitter_site":"@markwilsonit","twitter_misc":{"Written by":"Mark Wilson","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm#article","isPartOf":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm"},"author":{"name":"Mark Wilson","@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468"},"headline":"Viewing Active Directory object updates with RepAdmin","datePublished":"2015-09-08T11:00:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm"},"wordCount":312,"commentCount":0,"publisher":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468"},"keywords":["Microsoft Active Directory"],"articleSection":["Technology"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm","url":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm","name":"Viewing Active Directory object updates with RepAdmin - markwilson.it","isPartOf":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/#website"},"datePublished":"2015-09-08T11:00:14+00:00","description":"Using the Windows repadmin.exe command to view the update date\/times on an object at an attribute level","breadcrumb":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/viewing-active-directory-object-updates-with-repadmin.htm#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.markwilson.co.uk\/blog"},{"@type":"ListItem","position":2,"name":"Viewing Active Directory object updates with RepAdmin"}]},{"@type":"WebSite","@id":"https:\/\/www.markwilson.co.uk\/blog\/#website","url":"https:\/\/www.markwilson.co.uk\/blog\/","name":"markwilson.it","description":"get-info -class technology | write-output &gt; \/dev\/web","publisher":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.markwilson.co.uk\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":["Person","Organization"],"@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468","name":"Mark Wilson","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1","url":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1","width":800,"height":800,"caption":"Mark Wilson"},"logo":{"@id":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1"},"description":"A Chartered IT Professional, with recent experience in technology leadership, IT strategy and practice management roles, Mark Wilson is an Enterprise Architect in the Advisory and Management Group at risual. During a career spanning more than two decades, Mark has gained widespread recognition as an expert in his field including both industry and national press exposure. In addition to certifications from Microsoft, VMware, Red Hat, The Open Group and Axelos, Mark held a Microsoft Most Valuable Professional (MVP) award for three years and is now part of the MVP Reconnect programme. Mark is also well-known on social media and maintains an award-winning blog.","sameAs":["http:\/\/www.markwilson.co.uk\/","https:\/\/www.instagram.com\/markwilsonuk\/","https:\/\/www.linkedin.com\/in\/markawilson\/","https:\/\/x.com\/markwilsonit","https:\/\/www.youtube.com\/channel\/UCWHlZCoHRTocdvtrOJ2IL4A"],"url":"https:\/\/www.markwilson.co.uk\/blog\/author\/mark-wilson"}]}},"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":5986,"url":"https:\/\/www.markwilson.co.uk\/blog\/2015\/09\/troubleshooting-missing-objects-azure-ad-sync.htm","url_meta":{"origin":5951,"position":0},"title":"Troubleshooting missing objects in Azure AD sync","author":"Mark Wilson","date":"Friday 11 September 2015","format":false,"excerpt":"I have a half-written blog post about Microsoft Azure Active Directory (AAD) Connect - the latest incarnation of the directory synchronisation engine used to populate a cloud directory for Office 365 and other online services. That post will stay half-written for a while longer as\u00a0it needs a bit more work\u2026","rel":"","context":"In &quot;Technology&quot;","block_context":{"text":"Technology","link":"https:\/\/www.markwilson.co.uk\/blog\/topic\/technology"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":471,"url":"https:\/\/www.markwilson.co.uk\/blog\/2005\/04\/managing-identity-with-microsoft.htm","url_meta":{"origin":5951,"position":1},"title":"Managing identity with Microsoft Identity Integration Server","author":"Mark Wilson","date":"Monday 18 April 2005","format":false,"excerpt":"I last saw the Microsoft Identity Integration Server (MIIS) product in my days at ICL, when it existed as a product called Zoomit Via. Since then, Microsoft has bought the rights to the metadirectory services technology and rewritten the product in various forms with MIIS 2003 being the latest incarnation,\u2026","rel":"","context":"In \"Microsoft Identity Integration Server\"","block_context":{"text":"Microsoft Identity Integration Server","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/miis"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":4795,"url":"https:\/\/www.markwilson.co.uk\/blog\/2013\/02\/searching-active-directory-with-powershell-and-a-users-phone-number.htm","url_meta":{"origin":5951,"position":2},"title":"Searching Active Directory with PowerShell and a user&#8217;s phone number","author":"Mark Wilson","date":"Tuesday 26 February 2013","format":false,"excerpt":"I have a guilty secret: I screen my incoming phone calls. I no longer answer blocked numbers on my work phone - it's always PPI spam - and I recognise the numbers of those I work closely with, so I can prioritise my response (i.e. do I want to be\u2026","rel":"","context":"In &quot;Technology&quot;","block_context":{"text":"Technology","link":"https:\/\/www.markwilson.co.uk\/blog\/topic\/technology"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/images\/rsat-ad-psh.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":485,"url":"https:\/\/www.markwilson.co.uk\/blog\/2004\/09\/script-to-disable-password-expiry-for.htm","url_meta":{"origin":5951,"position":3},"title":"Script to disable password expiry for local Windows accounts","author":"Mark Wilson","date":"Friday 10 September 2004","format":false,"excerpt":"One of the shortcomings of the net user command in Windows is the inability to set the password never expires flag on an account (account expiry options can be set, but not password expiry and the full syntax is described in Microsoft knowledge base article 251394). There are 13 flags\u2026","rel":"","context":"In \"Microsoft Active Directory\"","block_context":{"text":"Microsoft Active Directory","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/active-directory"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":89,"url":"https:\/\/www.markwilson.co.uk\/blog\/2004\/09\/recommendations-for-active-directory.htm","url_meta":{"origin":5951,"position":4},"title":"Recommendations for Active Directory object naming","author":"Mark Wilson","date":"Thursday 2 September 2004","format":false,"excerpt":"Microsoft publishes best practice guidance under the general heading of Microsoft solutions for management. All of these best practices are based on the Microsoft Operations Framework (MOF), which includes guidelines on how to plan, deploy, and maintain IT operational processes in support of mission-critical service solutions. Within this guidance is\u2026","rel":"","context":"In \"Microsoft Active Directory\"","block_context":{"text":"Microsoft Active Directory","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/active-directory"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":623,"url":"https:\/\/www.markwilson.co.uk\/blog\/2006\/08\/delegation-of-active-directory.htm","url_meta":{"origin":5951,"position":5},"title":"Delegation of Active Directory administration (using Quest ActiveRoles Server)","author":"Mark Wilson","date":"Thursday 10 August 2006","format":false,"excerpt":"Recently, I've been working with a client who has an extraordinarily high number of users with domain administrator rights (i.e. those who are members of the Domain Admins group). The problem is historic and they are in the process of moving from Windows NT to Active Directory (AD); whilst AD\u2026","rel":"","context":"In \"Microsoft Active Directory\"","block_context":{"text":"Microsoft Active Directory","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/active-directory"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts\/5951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=5951"}],"version-history":[{"count":5,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts\/5951\/revisions"}],"predecessor-version":[{"id":5966,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts\/5951\/revisions\/5966"}],"wp:attachment":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=5951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=5951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=5951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}