Tag: How to

How to resolve orphan SID’ account name with Powershell

Sometimes you open an Access Control List and discover an orphan SID. However, before removing the permission you want to know to which account this SID was matching. The SID matched to a local account In this case, you are done. There is no way to find to which account name the SID was matching. … Continue reading How to resolve orphan SID’ account name with Powershell

Clean up orphaned Foreign Security Principals

Clean up orphaned Foreign Security Principals

Foreign Security Principals or FSPs have existed since Windows Server 2000. However, you could work as a system administrator for years without even noticing their presence because the mechanism behind them is almost fully transparent—almost. Contents of this article: FSPs in a nutshell Why an FSP becomes an orphan How to identify and clean up … Continue reading Clean up orphaned Foreign Security Principals

How to scan, fix and troubleshoot disks with Powershell

How to scan, fix and troubleshoot disks with Powershell

I still see the old good chkdsk command everywhere in blog posts. However, since Windows 8 and Windows 2012 Server you have now the Repair-Volume which is doing the same work. Like for the chkdsk tool, you have the scan, spotfix and the OfflineScanAndFix parameters. In addition, here are some other useful tools cmdlets: - … Continue reading How to scan, fix and troubleshoot disks with Powershell

Fast event log search in PowerShell with the FilterHashtable parameter

In my last post, I showed you how to display and find specific events with the Get-WinEvent cmdlet. Whereas you can filter event messages easily with the Where-Object cmdlet, using the Data key from the FilterHashtable parameter is much faster. Contents of this article - Measuring the speed difference - Raw data structure of an … Continue reading Fast event log search in PowerShell with the FilterHashtable parameter