OWA - blind and low vision experience

you can enable or disable blind and low vision experience on OWA for all users by modifying "OWALightEnabled" atribute:

Set-OwaVirtualDirectory -Identity 'server_name\owa (Default Web Site)' -OWALightEnabled $false

Protect OU from accidental delettion

verifiy if all organizational units from your actuve directory domain are protected from accidental deletion:

Get-ADOrganizationalUnit -Filter * -Properties * | Select-Object name , ProtectedFromAccidentalDeletion

to protect all your organizational unit objects use:

Get-ADOrganizationalUnit -filter * | Set-ADObject -ProtectedFromAccidentalDeletion:$true

users can also be protected using:

Get-ADObject -filter {(ObjectClass -eq "user")} | Set-ADObject -ProtectedFromAccidentalDeletion:$true

User's picture in active directory

To import the picture:

Import-RecipientDataProperty -Identity marius.dumitru -Picture -FileData ([Byte[]]$(Get-Content -Path "C:\tmp\user.jpg" -Encoding Byte -ReadCount 0))

To remove the picture:

Set-Mailbox samAccountName -RemovePicture

Compare 2 text files

fc.exe can be use to compare 2 files; can use binary or ASCII to compare files;

C:\>fc /?
Compares two files or sets of files and displays the differences between them

Ex: fc file1.txt file2.txt

Search for inactive active directory accounts

i found a neat cmdlet that can retrieve inactive, disabled, expired or expiring active directory accounts;

full details about the command can be found on technet;

pay attention to the "-TimeSpan" argument - if you do not use the correct /accepted formatting the search will return wrong objects;



Search-ADAccount -AccountInactive -UsersOnly -SearchBase 'OU=Users,DC=domain,DC=intra' -TimeSpan 90.00:00:00.0 | Select-Object name, lastlogondate