joeware - never stop exploring... :)

Information about joeware mixed with wild and crazy opinions...

3/5/2009

Thanks to Active Directory Product Group and MVP Program and Thanks to my friends Dean/Erika for their hospitality

by @ 9:24 am. Filed under general

I just wanted to take a moment to send out a general thanks to the Active Directory Product Group at Microsoft. I always enjoy seeing the team as a whole but really enjoy the individual talk time with the PM’s and Devs even more. My favorite time for this summit was the open session where we got to sit and discuss the Recycle Bin feature stuff with Tim and Stephanie. Not because I think it is the only cool feature or anything, but because I really enjoyed the open discussion and it was nice to learn the technical details behind a feature that has been so long in coming. 

Uday and Moon, your presence was missed. Also I will miss seeing a large portion of the DS Team at DEC/TEC… Unfortunately it seems only a few of the DS Team will be able to make it to DEC/TEC due to budget cutbacks at MSFT. This is unfortunate because I often hear from the attendees that they really appreciate the availability of the Microsoft DS Team resources at DEC to respond to questions and hear feedback. Since this is the only conference with solid real deep focus on the DS pieces this is the best conference for Microsoft to send those resources but someone at some level doesn’t seem to understand that.

It was odd having my good friend Dean over on the other side of the fence as a Microsoft employee but I think it was good and he did Microsoft proud. I had a lovely time visiting with him and his wife (hmmm good meatballs) and awesome son (Hello Lucas… volcano!!!).

Just a quick FYI for those who kept asking me… The fact that Dean is working on PowerShell a lot now is not going to sway my opinion on it. Again, sorry to all those who asked me that specific direct question… but no. Not even for Dean. 🙂 I will or will not use PowerShell when it becomes compelling specifically for me to use. This isn’t to say it isn’t the right answer for others, but that is for each individual to decide. I doubt there is anything that can be presented or said in a single presentation that could get any serious folks to just jump whole hog, this will be something admins choose to do or not based on their own thoughts, needs, and preferences. I found it odd when asked by some of the PM’s if I was just all of a sudden going to change my mind on it because of a good presentation. Does anyone make up their mind on whether they will change directions based on a good presentation? Once I need to do something that isn’t truly feasible for me to do (by my definition, no one else’s) in perl or command line tools that I have or can write, I will maybe look in that direction. More on the PowerShell stuff and specifically the DS Team’s AD and ADAM cmdlets for PowerShell in a later blog post.

 

Also a general thanks to the overall MVP program for having the Global Summit. It is always useful to me and this year by moving the Executive presentations to the end it really made me feel like my time was used well.

 

   joe

Rating 3.00 out of 5

2/27/2009

Sounded like a good plan in the beginning…

by @ 11:56 pm. Filed under quotes

I’m sure that sounded like a good plan in the beginning…
I’ve had lots of those…
Like when I tried to breed wiener dogs with cats to get wiener cats…
Well you don’t get long skinny cats…
You get one dead cat and a dog with lots of scratches.

      – Randy (TV Sitcom – My Name is Earl)

Rating 4.00 out of 5

2/19/2009

The Eleanor of the new age…

by @ 4:56 pm. Filed under general

The real Eleanor if you don’t know who she is…

original

 

The replacement? (http://www.thalondesign.com/files/smart.htm)

 

Rating 3.00 out of 5

Getting QFE info from a machine in CSV format through WMI

by @ 4:47 pm. Filed under tech

Recently needed to pull some QFE info to validate some things… Found some fun commands.

wmic qfe list full /format:htable

wmic /node:”servername” qfe list full /format:csv

Rating 3.50 out of 5

Finding Active Directory (or ADAM) objects that have multiple values in a specific attribute

by @ 4:46 pm. Filed under tech

Today I ran into an issue where a syncing tool blew up because it encountered an object that had multiple values in an attribute that “normally” has a single value in it and it didn’t know how to properly sync that object. Well obviously whomever set up the syncing tool kind of made a mistake because the attribute in AD was multivalued so there was always a chance this would happen so they should have accounted for it in the configuration of the syncing tool. But they didn’t and so I had to go figure out what was going on. Looking at it I quickly realized the problem and was able to point out that an object had multiple values for destinationIndicator and the company standard was to only have a single value. So this raised the question for me, are there any other objects out there in the same boat? I.E. They had multiple values for that attribute and would eventually cause me pain in the syncing tool…

So the generic question was, how do I quickly ascertain which objects had multiple values for a given attribute… Initially I thought, this will be a bit of a pain, I will have to output all objects with that attribute populated and then parse the attribute out with a script… Then I thought… Well I don’t actually care about the various values, just whether or not there are multiple values at all… Then a flash of EUREKA! AdFind to the rescue… (again).

Side Bar: I love when I come up with new ways to use my utilities that I never thought of before. It just encourages me more and more to have flexibility at the core of the utilities because I never know what I or someone else may end up doing with them.

I realized that all I had to do was be able to pick out objects that had multiple values for a single attribute so I typed up a command line like

adfind -h domainname -default -f “&(objectcategory=person)(destinationindicator=*)” destinationindicator -csv

and then added one simple switch that made all the difference in my ability to quickly scan through and find multiple values…

-csvmvdelim ####

So the whole command looked like

adfind -h domainname -default -f “&(objectcategory=person)(destinationindicator=*)” destinationindicator -csv -csvmvdelim ####

Now you may be sitting there thinking… “Well how the heck does that help anything???”. It doesn’t by itself, but when you combine that with grep or find or findstr or whatever and you pipe the output of that command into one of those search tools looking for the string #### it will only output those lines of the CSV output that match… I.E. Objects with multiple values for that attribute. So in its entirety it looks like

adfind -h domainname -default -f “&(objectcategory=person)(destinationindicator=*)” destinationindicator -csv -csvmvdelim #### | grep ####

I don’t know about anyone else but I just think that is pretty cool. 🙂

 

    joe

Rating 3.00 out of 5

Alaskan Clydesdale

by @ 11:38 am. Filed under humour

alaskan_clydesdale

Rating 4.33 out of 5

2/13/2009

AdFind V01.40.00 Released

by @ 4:53 am. Filed under updates

AdFind V01.40.00 has emerged from the cocoon… The Butterfly Release is now available. 🙂

After I released V01.39.00 I intended to go work on AdMod and get that updated and released, however I started hearing reports of typos and other comments on the functionality in AdFind V01.39.00. So I decided to work on AdFind a little more. As mentioned previously I am glad I did because while poking around in the source I figured out how to get adfind piping to adfind working which is a big win. 🙂

You can get AdFind V01.40.00 here —> http://www.joeware.net/freetools/tools/adfind/index.htm

You can get the new usage screens by typing adfind /? or looking here —> http://www.joeware.net/freetools/tools/adfind/usage.htm

 

Fixes for V01.40.00

o Added multi-DN piping capability (AdFind will read DNs from STDIN)

o The -alldc+ switch I added to V01.39.00 wasn’t enabled for use. I have enabled it now in V01.40.00

o Fixed typos in usage

o Added Windows Server 2008 R2 (Windows 7) Decodes

o Added –csvqesc to specify the character use to escape quotes inside of CSV fields. Default is \

o Documented –extsrvinfo, I added this in V01.39.00 but forgot to add it to the usage.

o Added –srvctls which allows you to specify arbitrary server controls

o Added –showdelobjlinks for Windows Server  2008 R2

o Added –showrecycled for Windows Server  2008 R2

o Added -showdel+ for Windows Server  2008 R2

o Added –tdcdshort which gives a secondary shorter format for –tdcd like (xxxd:xxh:xxm:xxs)

o Added –ic (intermediate count for multi-DN piping)

o Added –ictsv (intermediate count with TSV output for multi-DN piping)

o Added –db (display base for multi-DN piping)

o Added –stdinsort to sort multi-DN piping

o Added –subset to output a subset of the returned objects (every second, every tenth, etc)

o Added default environment variable and environment file reading

o Added shortcut –sc ou:xx to find OU’s

o Added shortcut –sc trustdmp to output trusts in a domain

Rating 3.00 out of 5

Off the cuff comments for a new Domain Admin

by @ 3:47 am. Filed under general

Yesterday I added a new member to the domain admins group in a company I do work for. Off the cuff I typed up a few comments to send along with the note indicating the access has been granted, thought I would share.

1. Do not share your credentials with anyone. Period.

2. Be scared when using the ID, you can do a lot of damage with it.

3. Have second and third thoughts before changing things.

4. When in GUI applications, if you don’t mean to change things, use CANCEL, not OK to exit dialogs.

5. You can do a lot from your normal userid, prefer to use it over the Domain Admin ID.

6. Try to solve issues without logging interactively into Domain Controllers.

7.  If you aren’t sure about something, don’t do it.

8. Ask questions. I much rather hear “I don’t know” than someone try to guess.

Rating 3.00 out of 5

2/12/2009

Happy Birthday Chuck! :)

by @ 8:07 pm. Filed under general

http://en.wikipedia.org/wiki/Charles_Darwin

Rating 3.00 out of 5

2/11/2009

Why is my Windows OS not seeing all 4GB of RAM…

by @ 6:22 am. Filed under general

This is a pretty common question folks ask about on the internet. They bought a new machine with 4GB of RAM and Windows is only telling them it has some lesser amount between 3GB – 4GB available so they think their machines are broken or that Windows is broken.

Here is an excellent article discussing this topic

http://www.hardforum.com/showthread.php?t=1035670

Rating 3.00 out of 5

[joeware – never stop exploring… :) is proudly powered by WordPress.]