Tag Archives: active directory

Active Directory Permissions and C#

I’ve been doing some work recently with C# querying AD for locked out users. One of the requirements for this was to only show users that can be altered by the user running the program.

Fortunately there is a computed AD attribute available for this to do the job, called allowedAttributesEffective. Here is some sample code to check a user for attributes you can write to:

Exchange 2003, PFDAVAdmin and PowerShell

I’ve been working with Exchange 2003 a bit recently, as part of a migration to Office 365. Most of the work has been around getting permission data, mailbox sizes and some other related data.

As part of that, I’ve written a couple of PowerShell scripts to grab some information we needed for the migration. The first is a script to get data from Exchange and AD in a 2003 domain using WMI. The second is a script to parse and output permission data from a PFDAVAdmin export in a more usable format.

I’ve put the two scripts on GitHub in my miscellaneous repository, under the PowerShell folder. Hopefully they come in useful to anyone else needing to make more sense of PFDAVAdmin exports, or pull mailbox data from Exchange 2003.

Keeping authentication to network resources alive while working with MacOSX 10.6

If you have problems with your Mac not playing nicely with network resources after sleep, you may find adding the following managed preference useful. It makes the mac prompt for a password after coming out of screensaver/sleep.

Workgroup Manager com.apple.screensaver preferences

Unfortunately, there’s no GUI checkbox or anything for this setting in Workgroup Manager, so I’ve taken a screenshot and highlighted the required setting.