Domain Controller Patch/Hotfix Level Double Check

  Its very easy to make assumptions, one assumption I seem to make frequently is assuming all of the domain controllers in a forest are at the same patch level.  If any of you have ever talked to someone from MS usually the first thing they will have you do is install multiple patches related…

1

Audit All GPO’s for Deny User Right Assignments in an AD forest.

  In large delegated Active Directory environments, one of the things I hear often is if I follow the Microsoft recommendations on creating a GPO to deny Enterprise Admin and Domain Admin rights to access  “Tier 1” or “Tier 2” computers.  How do I know if I am overwriting a GPO that may already contain…

1