Active Directory: Password Expiry date Report for all accounts


I had a requirement to generate password expiry date report for all accounts to validate a password policy change. Here is what I came up with (who know someone have same need for this report). Important point is the calculated property msDS-UserPasswordExpiryTimeComputed. Which is in Long Date format. It will create an CSV file on … Continue reading Active Directory: Password Expiry date Report for all accounts

Fun: Get Weather information in PowerShell


Found these helpful sites (http://ipinfo.io and http://wttr.in and wrote an script to get and display weather information of your current location. Now in a shell, I can check weather information too. 🙂 <# Script: Get-Weather.ps1 Description: This script will * Get current location * Find the Weather info * Display the weather info Fun fact: … Continue reading Fun: Get Weather information in PowerShell

How to unblock an ActiveSync Mobile device in Exchange Online?


If the user's ActiveSync device is blocked (Quarantined), User might be getting this email: Subject: Your device is temporarily blocked from synchronizing using Exchange ActiveSync until your administrator grants it access. Your device is temporarily blocked from accessing content via Exchange ActiveSync because the device has been quarantined. You don't need to take any action. … Continue reading How to unblock an ActiveSync Mobile device in Exchange Online?

Solution: Invoke-WebRequest : The request was aborted: Could not create SSL/TLS secure channel.


You are running Invoke-WebRequest and hit with "Could not create SSL/TLS secure channel", It simply means TLS 1. 2 is not being used. Windows selects most strong cryptography from the list. How do you know what's your crypto list? Display the list of cryptos form this .Net Class variable: PS E:> [Net.ServicePointManager]::SecurityProtocol Tls, Tls11, Tls12 … Continue reading Solution: Invoke-WebRequest : The request was aborted: Could not create SSL/TLS secure channel.

Exchange: The recipient’s calendar has too much free busy data to display


If you can't see the troubled user's free/busy data and you get this error message. This means that user's calendar has more than 1000 items in the calendar. You would be asking "Why this limitation?" "Can I increase this limit?". I don't think so. I didn't any information on it yet. Your solution is to … Continue reading Exchange: The recipient’s calendar has too much free busy data to display

Exchange: Adding a member to a “Mail-Enabled” Security group “You don’t have sufficient permissions. This operation can only be performed by a manager of the group”


If you try to add (or Remove) member(s) to a mail-enabled security group in Exchange Admin Console or Shell, you will hit a wall with this error. You don't have sufficient permissions. This operation can only be performed by a manager of the group. + CategoryInfo : NotSpecified: (:) [Add-DistributionGroupMember], OperationRequiresGroupManagerException + FullyQualifiedErrorId : [Server=LV-EXCH04,RequestId=dba1bbc1-125a-4dcf-ac18-5db54f0c4a70,TimeStamp=5/21/2019 … Continue reading Exchange: Adding a member to a “Mail-Enabled” Security group “You don’t have sufficient permissions. This operation can only be performed by a manager of the group”

Exchange: Shared Mailbox is not able to open in Outlook (with Full Access permissions) or in OWA


A Shared mailbox is not show up in Outlook or not able to open in OWA, and it gives this error in OWA: "Your Account has been disabled" Do not check the Active Directory Account. It is nothing to do with the user account. Error message means OWA is disabled on the mailbox. Solution: Exchange … Continue reading Exchange: Shared Mailbox is not able to open in Outlook (with Full Access permissions) or in OWA

PowerShell: Find Account Lockouts and which computer is locking the account?


How many time have you researched where the account lockouts are happening? which computer is locking the AD account? It could be disconnected remote desktop sessionscheduled taskApplication on a serverService running with AD account contextWireless profile with PEAP setup on Phones and devices So I wrote this PowerShell script to query the Security events from … Continue reading PowerShell: Find Account Lockouts and which computer is locking the account?