Build a Tiered AD Model
Reading Time: 6 minutesHow to build a tiered AD model with Tier 0 for AD, Tier 1 for servers, and Tier 2 for workstations, including the sg- security groups, per-role account counts, and the deny-logon GPOs that enforce it.
GPOs with PowerShell
Every AD environment I've inherited has had the same problem. Hundreds of GPOs, half of them doing nothing, and nobody willing to delete any of them because nobody knows which ones are actually in use. So they sit there. They slow down gpresult, or They confuse the...
Working In the System
Working Within the System: Notes from a Sysadmin I've been doing this work long enough to watch the same pattern play out over and over. An admin gets handed a problem, sees a cleaner way to solve it, and instead of working the problem inside the structure they were...
For the Love of LDAP
Over the past 5 years, I have heard the conversation of how do we move our AD to the cloud. Oh the cloud, loud, mild, my child, it's not as easy as you think. There are things in older environments that can tur some people's feathers if it ever glitch or goes down. I...
