Link to home
Start Free TrialLog in
Avatar of ragnarok89
ragnarok89

asked on

Manage Active Directory (2008 SP2) using Powershell 2 on XP SP3

Hi All,

I want to be able to manage AD, specifically crate new users, using powershell from my workstation. I just can't get it to work. Here's what I've done so far, hopefully you can point out my mistake(s)?

My Domain Controller is SP2 and has DotNet 3.51 SP1 installed

1. Downloaded install guide from http://www.microsoft.com/downloads/en/details.aspx?FamilyID=008940c6-0296-4597-be3e-1d24c1cf0dda&displaylang=en

2. As per guide, installed KB969166 on Domain Controller

3. As per guide, tried to install KB967574 on Domain Controller, but received error: "The update does not apply to your system"

4. As per guide, tried to install Windows6.0-KB968934-x64.msu on Domain Controller, but received error: "The update does not apply to your system"

5. Downloaded PSCX extension from http://pscx.codeplex.com/releases/view/45101on my workstation

6. As per instructions, installed files to 'My Documents\WindowsPowerShell\Modules' on my workstation

7. As per instructions, opened powershell window on my workstation and ran command "Import-Module Pscx" sucessfully

8. ran command "get-psprovider"

Name                 Capabilities                                      Drives
----                 ------------                                      ------
WSMan                Credentials                                       {WSMan}
Alias                ShouldProcess                                     {Alias}
Environment          ShouldProcess                                     {Env}
FileSystem           Filter, ShouldProcess                             {C, S, D, E...}
Function             ShouldProcess                                     {Function}
Registry             ShouldProcess, Transactions                       {HKLM, HKCU}
Variable             ShouldProcess                                     {Variable}
Certificate          ShouldProcess                                     {cert}
AssemblyCache        ShouldProcess                                     {Gac}
DirectoryServices    ShouldProcess, Credentials                        {}
PscxSettings         None                                              {Pscx}
FeedStore            ShouldProcess                                     {Feed}

I do not see the ActiveDirectory Provider


9. ran command "Get-PSDrive"

Name           Used (GB)     Free (GB) Provider      Root
----           ---------     --------- --------      ----
Alias                                  Alias
C                  21.49        251.34 FileSystem    C:\
cert                                   Certificate   \
Env                                    Environment
Feed                                   FeedStore
Function                               Function
Gac                                    AssemblyCache Gac
HKCU                                   Registry      HKEY_CURRENT_USER
HKLM                                   Registry      HKEY_LOCAL_MACHINE
Pscx                                   PscxSettings
Variable                               Variable
WSMan                                  WSMan

I do not see AD or anything else pointing to my Active Directory domain.


Any ideas what I'm doing wrong?
Avatar of soostibi
soostibi
Flag of Hungary image

Have you tried Quest's software:
http://www.quest.com/powershell/activeroles-server.aspx

It need only client side installation.
Anyway, the Management Gateway that you installed in step 1 is needed for the Windows Server 2008 R2/Windows 7 compatible Active Directory Module that is part of the AD RSAT tools.
Install Quest CMDLets on your workstation.
By default these cmdlets will connect to any available domain controller with the credentials of the user that starts powershell - so you can run ps as domain admin.
Alternatively, most od cmdlets let you use -Service option for pointing DC you want to use.

The cmdlets are extremely helpful - here are some examples:
http://ss64.com/ps/quest.html
ASKER CERTIFIED SOLUTION
Avatar of markpalinux
markpalinux
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Agree with Mark about the Windows 7 management workstation.  If you are trying to run the AD cmdlets then take a look at Ashley's blog here

http://blogs.technet.com/b/ashleymcglone/archive/2011/03/17/step-by-step-how-to-use-active-directory-powershell-cmdlets-against-2003-domain-controllers.aspx

Did a nice job of spelling it out.

The Quest AD cmdlets also work well on XP systems.

Thanks

Mike
Avatar of ragnarok89
ragnarok89

ASKER

soostibi,

I had installed this, but I wanted to be able to do it with the built-in powershell. In this way, I could execute a .PS1 script from any PC. Also, the management gateway was never installed (see step 3 and 4).

markpalinux:

assuming I get a Win7 workstation, from where do I download the AD module, and how do I install it?

After reading this, I believe it is built in. Still requires a Windows 2008 R2 domain controller.
Active Directory Administration with Windows PowerShell
http://technet.microsoft.com/en-us/library/dd378937%28WS.10%29.aspx

Thanks,
Mark
If you want to use the AD module, you have to install the
AD Management Gateway Service on the Domain Controller according to the Install Guide.

And onto a Windows 7 client install the RSAT tools from:

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d

After you installed this, you'll be able to add the relevant component from Control Panel/Programs/Turn Windows Features on and off.

In this list you'll see among the Remote Server Administration Tools the Active Directory Module in the AD tools category.
We just got a Win7 PC, will be trying it tomorrow.