Synchronize DSRM Password with a Domain Account


If you ever need to start a Domain Controller in Directory Service Restore Mode, you know the pain to find the appropriate password. When the DC is up and running, you can reset this password pretty easily with ntdsutil.exe. Managing it by hand is error prone and so not offer any benefits, so let’s make a GPO ! Continue reading

Override Bitlocker to Go Group Policy PowerShell

Override Bitlocker to Go Group Policy


In some organization, group policies admins enforce Bitlocker to go (Deny write access to removable drives not protected by BitLocker), that can be pretty annoying if you have an USB stick for your car, an ebook reader, or any type of device that does not support Bitlocker. Continue reading