Monthly Archives: March 2019

Useful PS Active Directory commands

14 Thursday Mar 2019

Posted by in ADCS, PowerShell

≈ Leave a comment

1.Retrieve a user from AD based on Logon Name

Get-ADUser -Identity [LogonName]

2.To retrieve all properties of AD object

Get-ADUser -Identity [LogonName] -Properties *

3.To retrieve a subset of properties and output in table format

Get-ADUser -Identity [LogonName] -Properties *   | Select-Object samaccountname,name..[Any Property] | Format-Table -Autosize

  1. To retrieve a AD group and its properties, members

  Get-ADGroup -Identity [GroupName] -Properperties * | Select -ExpandProperty Members

  1. To retrieve pwd for IIS App Pool account

Import-Module WebAdministration

  Get-ChildItem -Path IIS:\AppPools\ |

Select-Object name, state, managedRuntimeVersion, managedPipelineMode, @{e={$_.processModel.username};l=”username”}, @{e={$_.processModel.password};l=”password”}, @{e={$_.processModel.identityType};l=”identityType”} |

format-table -AutoSize                    

Creating GMSA (Group Managed Service Account) using PS commands for ADFS Install

10 Sunday Mar 2019

Posted by in ADFS, PowerShell

≈ Leave a comment

Steps for creating GMSA
  1.  Open PS ISE as Administrator run >Add-KdsRootKey -EffectiveTime((get-date).AddHours(-10)) this will output a Guid this will generate a new root key in the Active Directory.
  2. Create a new ADservice account using New-ADServiceAccount [GMSAName] -DNSHostName [adfs.idynamics.com] -ServicePrincipalNames http:/[adfs.idynamics.com]
  3. Set SPN using setspn -s host/adfs.idynamics.com [idynamics]\[GMSAName]$