Welcome to the Jocha blog!

Detect and Elevate a PowerShell session

We’ve set out to help a customer with automation within their IT department.
Some daily tasks require an elevated prompt, there is no way around it. But it’s not obvious how to check if the current prompt is elevated, or how to elevate the session. So here is a how-to…

Change the Azure AD Sync Schedule

I finally I got some time to play with the new Azure Active Directory Sync tool and its configuration.

The installation was very straight forward. The step-by-step instruction are provided on MSDN. The administration tools and scripts are located in difference places compared to DirSync which was little confusing in the beginning.

Office365 Safe Attachment Delay Report

Recently the Helpdesk have been getting cases about slow delivery times due to Office 365 ATP Safe Attachments. We have created a script to retrieve the data from Exchange Online, and then used Power BI to visualize it.

Get Active Directory pictures in Windows 10

We have been working on migrating a customer from Windows 7 over to Windows 10. Our goal is to have Windows 8 and 10 clients pull the pictures from Active Directory to the users local profiles.

Installing .NET Framework on Windows 8 and 2012

I have been struggling a bit with adding .NET Framework 3.5 on a few systems (and reference image for MDT). The posts on MSDN and TechNet are good, but not always crystal clear.

Here is how I solved the issues we were experiencing…

Breaking into a Windows System

Breaking into a Windows System

Do you ever get that sinking feeling, when you’ve forgotten the root password to your test lab?  Again?

I hate it too!  So I decided to figure out a way around it, using a work around…

Configure Windows 7 Network Adapter Binding Priority

Configure Windows 7 Network Adapter Binding Priority

A computer running Windows 7 may connect to networks with various adapters.

If you have a device that can connect to networks in multiple ways, you may wonder how Windows determines the priority of the installed network adapters.

Install Updates on Exchange Server 2010 DAG

Install Updates on Exchange Server 2010 DAG

To update the DAG members with new patches the process should be managed to prevent all of the DAG members from being offline at the same time.

You can move the active mailbox databases off a particular server so that it can be patched, and if necessary rebooted, without causing any downtime for mailbox users on that database.

AD Delegation: Default Permissions for GPOs

AD Delegation: Default Permissions for GPOs

When setting up Active Directory delegation, you want administrators to be able to maintain Group Policy without being a Domain Admin.

If you read TechNet, Microsoft tells you to use Group Policy Creator Owners. However CO does not have permissions to modify or edit any other group policy objects.

Force an Address Book Refresh on Lync Client

Force an Address Book Refresh on Lync Client

I ran into a situation where I needed to force the address book to refresh on a computer that had the Lync client installed. The process to do so isn’t well documented, so I decided to create this post in case anyone else has a similar requirement. Here’s how you force the address book to refresh on a Lync Client.

How to Export Mailboxes with Exchange Server 2010 SP1

How to Export Mailboxes with Exchange Server 2010 SP1

Exchange Server 2010 Service Pack 1 introduced a new method for exporting mailboxes called Mailbox Export Requests. This new method replaces the previous Export-Mailbox command.
Before we look at how to create a new mailbox export request in Exchange 2010 SP1 there are a few things that you should understand.

Verifying Domain User Home Directory

Verifying Domain User Home Directory

Some administrators prefer to do everything manually, other automated. I have always preferred to have as much as possible automated or at least set up with a script so the action can easily be repeated without varying end results.

I have written a script which verifies that all users that should have a home folder has one, and that it has the appropriate permissions.