Table of Contents Title Page Copyright Publisher's Note Dedication Acknowledgments About the Authors About the Contributing Authors Introduction Who Should Read This Book What Is Covered in This Book How to Contact the Author Part I: Administering Service Delivery Chapter 1: Using PowerShell with Active Directory Understand the Basics of PowerShell Understand How PowerShell and ActiveDirectory Work Together Chapter 2: Managing Domains and Forests Manage AD Domains Manage Active Directory Trusts Chapter 3: Managing Sites and Replica- tion Manage the Site Topology Manage Replication Chapter 4: Managing Domain Controllers Manage How the Active Directory Service Is Provided Manage Server-Specific Settings Part Uf: Managing Active Directory Data Chapter 3: Configuring Active Directory Dependencies Configure DNS Manage Domain Time Chapter 6: Administering User and Group Accounts Manage User Accounts Manage GroupsChapter 7: Managing Computer Accounts, Objects, and Organizational Units Manage Objects Manage Computer Accounts Manage Organizational Units Chapter 8: Managing Group Policies Me é Group Policy Settings Manage Group Policy Application Part Il: Protecting Your Invest- ment in Active Directory Chapter 9: Automating Active Directory Security Secure the Forest Manage BitLocker Chapter 10: Backing Up Data and Recovering from Disasters Back Up Active Directory Data Restore Data Chapter 11: Monitoring Health and Performance Keep Active Directory HeaithyTrack Domain Controller Performance IndexAutomating Active Directory® Administration with Windows PowerShell® 2.0 WILEY Wiley Publishing, Inc.Acquisitions Editor: Agatha Kim Development Editor: Kim Beaudet Technical Editor: Steve Patrick Production Editor: Dassi Zeidel Copy Editor: Tiffany Taylor Editorial Manager: Pete Gaughan Production Manager: Tim Tate Vice President and Executive Group Publisher: Richard Swadley Vice President and Publisher: Neil Edde Book Designer: Maureen Forys, Happenstance Type-O-Rama Proofreader: Rebecca Rider: Paul Sagan, Word One, New York Indexer: Ted Laux Project Coordinator, Cover: Katie Crocker Cover Designer: Ryan Sneed Cover Image: © Andrey Volodin / iStockPhoto Copyright © 2011 by Wiley Publishing. Inc., Indianapolis, Indiana Published simultaneously in Canada ISBN: 978-1-118-02731-8 ISBN: 978-1-118-11854-2 (ebk.) ISBN: 978-1-118-11856-6 (ebk.)ISBN: 978-1-118-11855-9 (ebk.) No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions. Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in thiswork as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read. For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the US. at (877) 762-2974, outside the U.S. at (317) 572-3993 or fax (317) 572-4002. Wiley also publishes its books in a variety of electronic formats and by print-on-demand. Not all content that is available in standard print versions of this book may appear or be packaged in all book formats. If you have purchased a version of this book that did not include media that is referenced by or accompanies a standard print version, you may request this media by visiting http://booksupport.wiley.com. For more information about Wiley products, visit us at www.wiley.com. Library of Congress Cataloging-in-Publication Data is available from the publisher. TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. Active Directory and Windows PowerShell are registered trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarksare the property of their respective owners. Wiley Publishing, Inc., is not associated with any product or vendor mentioned in this book.Dear Reader, Thank you for choosing Automating Active Directory — Administration with Windows PowerShell 2.0. This book is part of a family of premium-quality Sybex books, all of which are written by outstanding authors who combine practical experience with a gift for teaching. Sybex was founded in 1976. More than 30 years later, we're still committed to producing consistently exceptional books. With each of our titles, we're working hard to set a new standard for the industry. From the paper we print on, to the authors we work with, our goal is to bring you the best books available. I hope you see all that reflected in these pages. I'd be very interested to hear your comments and get your feedback on how we're doing. Feel free to let me know what you think about this or any other Sybex book by sending me an email at [email protected]. If you think you've found a technical error in this book, please visit http://sybex.custhelp.com. Customer feedback is critical to our efforts at Sybex. Best regards, —~Y Neil Edde Vice President and Publisher Sybex, an Imprint of WileyThis book is dedicated to my beautiful and virtuous wife, Brenna, who exemplifi es every trait of the Proverbs 3] woman. Ken St. Cyr To my family. Laura E. HunterAcknowledgments There's no way I could have written this book without my tremendous support system. At the head of that system is my best friend and amazing wife, Brenna. She has the patience of a saint and is wise beyond her years. It's through her support and help that I was able to have the time to take on this project and the encouragement to finish. Alongside her are my brilliant and adorable children, Lincoln and Nora. Their helpfulness was manifested in their cuteness and willingness to let me write. When I first entertained the thought of taking on this book, I looked at the timeline and realized that it was impossible for me to go about this one alone. My first choice for a coauthor was the obvious one; Laura Hunter's name is almost synonymous with Active Directory. Thankfully. when I asked her to coauthor this book with me, she was happy to do it. So, a big thanks goes out to Laura for helping me write this. Along with Laura, we had two contributors working on this book, Chas Jeffries and Nick DiCola. Both Chas and Nick bring an incredible amount of experience and expertise in security and Active Directory, and I am thankful that they were able to help. It was a great pleasure to work with the wonderful group of professionals at Wiley. In particular, I would like to thank the development editor, Kim Beaudet; the production editor, Dassi Zeidel: editorial manager, Pete Gaughan; copy editor Tiffany Taylor; and the compositors at Laserwords. I would also like to thank my good friend and technical editor, Steve Patrick, who is one of the