Display members of an AD group

Run the following PowerShell command 

Get-ADGroupMember -identity "GROUPNAME" -Recursive | Get-ADUser -Property DisplayName | Select Name,ObjectClass,DisplayName

How to Add Active Directory Schema Snap-In

The Active Directory Schema Snap-In is not an option in MMC by default. If it’s missing from the Add/Remove Snap-In screen, perform these steps.

1. Select the “Start” button, then type “CMD“.
2. Right-click “Command Prompt” and select “Run as Administrator“.
3. Type the following, then press “Enter“:
   
   regsvr32 schmmgmt.dll
   
   
4. You should receive a message that registration succeeded.

Now you should be able to add the snap-in using these steps:

1. Hold the Windows Key and press “R” to bring up the Run box.
2. Type “mmc“, then press “Enter“. The Microsoft Management Console opens.
3. Select “File” > “Add/Remove Snap-In“.
4. Select “Active Directory Schema“, then select “Add“.
5. Select “OK“.

The Active Directory Schema option will now be available to use.

Force Replication of Domain Controllers Through CLI Command

Login to a domain controller and launch command prompt as administrator.

Run the following command: repadmin /syncall /AdeP

Find email address in Active Directory

1. Open Active Directory Users and Computers
2. Select your domain name > click on Find Objects... > select Custom Search > Advanced
3. In Enter LDAP query field type: (proxyAddresses=smtp:email@domain.com)
4. Press Find Now
5. You can also use wildcards, i.e. (proxyAddresses=smtp:email*)

How to check which domain controller a PC authenticated against

On the PC in question run this command:

echo %LOGONSERVER%

Active Directory: How To Reset Password Expiration Date

From Active Directory Users & Computers, ensure Advanced Features are enabled on the View menu

Navigate to the Users account. You should find an Attribute Editor tab.

Scroll to the pwdLastSet field. Modify it by entering 0 (zero) in the value field. Click OK. This sets the value to (Never) as in the password has never been set. Click OK on the User Account Properties box.

Open the User’s Account Properties again. Go back to the Attribute Editor tab. Scroll to pwdLastSet and modify it with a value of -1. Click OK twice.

When you view the pwdLastSet value, it will now indicate today’s date.

Useful Event Log Event IDs

1074 - Reboot initiated
4740 - Account Lockout