How to fix: Get-ADGroupMember : The size limit for this request was exceeded

Working in a larger Active Directory environment I occasionally got the error:

When trying to read all the members (recursively) of an AD Group. This was annoying since in the alternatives are limited especially when using the -recursive option. You could try with:

or

However these don’t have the recursive option. And …
Continue reading How to fix: Get-ADGroupMember : The size limit for this request was exceeded

Azure AD connect sync error: FederatedDomainChangeError

When synchronizing identity data from your on-prem Active Directory environment to the Azure Active Directory environment using the Azure AD connect tool you might occasionally get an error. One example is the error: FederatedDomainChangeError Details This error typically occurs after you have changed the UserPrincipalName suffix of an user from one federated domain to another …
Continue reading Azure AD connect sync error: FederatedDomainChangeError

Azure AD – Check and clean your on-prem AD with IdFix before migrating

Before you start syncing your On-Premises Active Directory with Azure Active Directory you should check and fix any issue’s there might be with any of the accounts. Microsoft has released a tool for this called: IdFix which you can download directly from Microsoft: IdFix DirSync Error Remediation Tool This tool will scan your On-Prem AD …
Continue reading Azure AD – Check and clean your on-prem AD with IdFix before migrating

How to downgrade the Domain and Forest functional level

With older versions of Windows Server it was not possible to downgrade the domain and forest functional level once upgraded. However this has changed since Windows Server 2012R2, using PowerShell you can now downgrade the Domain and Forest functional level. To do so follow these steps: 1. Log on to the domain controller as domain …
Continue reading How to downgrade the Domain and Forest functional level

Get all DC’s, FSMO role holders and uptime

As an IT consultant I often visit new customers and it is always good practice to just double check which DC’s are available in the organization, which sites they belong etc. To make it easy for myself I created a script that will get the: DC’s in the domain Uptime (in Hrs.) Site the DC …
Continue reading Get all DC’s, FSMO role holders and uptime