AD GPO SW Deploy Lab - michael-D-S/SYS-265 GitHub Wiki

Michael Sargent SYS-265-01, 3/4/2025


Ad GPO + SW Deploy ,Tech Journal


Overview:

Setup GPO

Deploy Application

Trouble Shooting:`

Could not login to domain admin could not update group policy with gpupdate /force To resolve this issue, you can try the following steps:

Log in using a local administrator account3.

Open an elevated PowerShell prompt and run the following command to test the secure channel:

powershell

Test-ComputerSecureChannel

If it returns "False," proceed to the next step3.

Attempt to repair the secure channel using:

PowerShell

Test-ComputerSecureChannel -Repair

If successful, you should now be able to log in with your domain admin account3.

If the above method doesn't work, you can try the following alternative:

Ensure you have network connectivity, then open an elevated PowerShell prompt.

Run the following command, replacing "DomainName\Administrator" with your domain admin credentials:

PowerShell

Test-ComputerSecureChannel -Repair -Credential DomainName\Administrator

This will prompt you for the domain admin password and attempt to repair the trust relationship7.

"This was given by Perplexity AI assistance from Luc"

Commands Used:`

Creating an OU via powershell

New-ADOrganizationalUnit -Name "Inputnamehere" -Path "DC=[domain],DC=[name]"

Deleting an OU via powershell (and any issues)

Set-ADOrganizationalUnit -Identity "OU=[name],DC=[domain],DC=[name]" -ProtectedFromAccidentalDeletion $flase
Remove-ADOrganizationalUnit -Identity "OU=[name],DC=[domain],DC=[name]" -Recursive

Moving Items to a new OU (via powershell or gui)

Move-ADObject -Identity "CN=[nameofitem],CN=[location],DC=[domain],DC=[name]" -TargetPath "OU=[OUname],DC=[domain],DC=[name]"

Searching the Event Log using Powershell

Get-WinEvent -FilterHashtable @{Logname = 'TypeofLog'; ID=[ID#] | Format-table