.::Blog Of Directory Service::.

The auditor of auditors: 'LepideAuditor Suite'

Last Updated on Tuesday, 23 May 2017 12:39

Written by Mahdi Tehrani

Today, in modern days of technology, the concept of auditing has become one of the interesting facts in Information Technology (IT). Back in days, when I was probably playing with my SNES, the concept of auditing was so hard to follow with built-in applications and consoles, but today, you can find many applications which either covers a specific part of auditing or support a huge number of services and applications. Among them, it is rare to find a solution which covers a whole range of services and audits, but ‘LepideAuditor Suite’ is one of those rare. In this article we will talk about this application.

Bulk change specific permissions for users

Last Updated on Monday, 17 October 2016 16:30

Written by Mahdi Tehrani

A friend of mine recently had problems regarding uploading certificates to GAL. As a matter of fact the users were unable to upload certificates when they choose "Publish To GAL". In this case the most errors you get is "Microsoft office Outlook was unable to publish your certificates. The server may be offline or your certificates may be invalid".

He was pretty much sure that the server is available, so we decided to re-check the security permissions for user objects and we found the problem.

Protect your domain against WannaCry malware

Last Updated on Sunday, 14 May 2017 09:42

Written by Mahdi Tehrani

As you all know the #wannacry malware hit the whole world in the last few days. The vulnerability behind this malware was leaked out by ShadowBrokers. Since the spreading rate of this vulnerability is greatly increasing, it is considered an obligation to prevent from this.

Can I have an automated security group?

Last Updated on Wednesday, 25 March 2015 21:45

Written by Mahdi Tehrani

Recently I faced a request from a client wanting a Dynamic Security Group in Active Directory which automatically update its members.. However we do have the concept of dynamic objects in Active Directory (I promise to speak on that on another article), but this one was completely different. The client wanted to have a security group which automatically removes the disabled users from it. So I started a lovely conversation with my lovely friend PowerShell.

‘List Object Mode’ in Active Directory, a myth or future settings?

Last Updated on Thursday, 13 April 2017 08:47

Written by Mahdi Tehrani

After long delay of being absent, I managed to fetch some time in order to pen down an article and share my thoughts about on of the features of Active Directory which has been always in total darkness for me. ‘List Object Mode’.

As long as I can remember, I’ve always had problem with the built-in concept of ‘Everything Visible in Active Directory for Authenticated Users’. It’s been a conflict for me during these times to convince myself about it. Sometimes I backed off and decided to stay behind and accept Active Directory as a Directory Service, but the other time I convinced myself why my domain users should see the objects of my AD domain?