• AD Delegation – Access to Bitlocker Recovery keys

    Here is the process to create a custom delegation to allow users (other than Domain Admins) to access Bitlocker Recovery keys. Log into AD Users and Computers Make a new Security group called “deleg-computer-bitlockerrecovery” Add the relevant users to the group Navigate to the OU where you want to start the delegation. Right-click on the…

  • Domain Account Lock Out

    We had an instance where a user changed positions and because of that change his group membership changed.  When his group membership changed he started getting messages about his account being locked out when trying to logon to the system.  We would unlock his account, but within a few minutes it would lock again.  We…

  • Windows Server – Redirecting new accounts

    At work we have our AD set up so that when we add a new computer to the domain the computer account gets redirected to an OU that we created instead of the default location of “Computers”. I’ve wondered how that was done for some time, but never took a minute to search. So today…

  • Outlook – Delegates

    We have a lot of users that have been delegated access to other accounts. For the most part this doesn’t cause a problem, but problems do come up on occasion. The biggest problem is when someone who had been granted delegate permissions on another account leaves. We generally remove the account, but what happens to…