Domain Controller HTTP Redirect

No Gravatar

First, I’m not a networking guy so if this steps on some best practice please comment below on a better solution.

For a recent customer, a new domain (we’ll say was setup for both internal and external access.  The customer found that employees within the company network were not able to access the webpage without specifying  Instead they were directed to a domain controller and thus a dead end.  Obviously we didn’t want to install IIS on each DC just to redirect the traffic.  Thankfully we found what looks to be a simple solution… port proxy at the server network interface level.  So far the testing looks perfect.

To enable the proxy (or forward)

netsh interface portproxy add v4tov4 listenport=80 connectport=80 protocol=tcp

OR  netsh interface portproxy add v4tov4 listenport=80 connectaddress=<website IP> connectport=80 protocol=tcp

To see the forwarder(s)

netsh interface portproxy show all

To delete the forwarders

netsh interface portproxy delete v4tov4 listenport=80



April 8, 2015

Posted In: Uncategorized

Unable to find LiteTouch.wsf

No Gravatar

Not long ago I was using MDT 2013 to develop a few images.  Deploying from the server, whether booting from PXE, CD/DVD, or a USB drive worked fine.  However, when I created a stand-alone ISO and extracted it to a bootable USB Hard Drive, the image deployment failed with the following error:

Script not found
Unable to find LiteTouch.wsf needed to continue the deployment.

The error didn’t occur if I used the same ISO attached to a Hyper-V guest.

As I investigated I noticed that both the _SMSTaskSequence and MININT folders were not on the OSDrive, but on the USB drive.  I found a few forum posts and blogs that offered DISKPART CLEAN as an option but this didn’t resolve my issue.

I eventually found some guidance from Keith Garner (MVP) that suggests that if a USB Hard Drive is larger than the target OSDrive, this error could result.  I played around with partition sizes and a few other things but it made no difference.  Only when I changed to a physically smaller USB drive was the problem resolved.

Apparently this “feature” was introduced in MDT 2012 and it still exists in MDT 2013.  Hopefully this will be fixed in MDT 2013 Update 1 (or whatever the next version will be called).


April 3, 2015

Posted In: Uncategorized

Creating Custom Active Directory Attributes

No Gravatar

… how to create custom attributes in AD and link/assign/associate them to object Classes (computers, Users, etc.)

First let me give credit to Farhan Kazi for a great article on how to do this with at post at

A customer requested that I implement a solution to help keep their Active Directory clean of old/inactive Computer objects.  While this is something I’ve done manually many times, I finally have a customer willing to automate the solution.  As part of that exercise I wanted to write the “Previous OU” and some other data to the AD Computer object.  I intended to use ExtensionAttribute15; however, I quickly realized that this attribute did not exist.  As I discovered, ExtensionAttribute[1-15] are created by Microsoft Exchange which was not part of this environment.  So, I needed a new field to store the data.  Here is what I did.

Basic steps to create a new attribute and associate it to a Class / object

  • Logon to a domain controller with administrative and Schema Admin rights
  • Open a command prompt as an Administrator
  • register the Schema MMC snap-in by running regsvr32 schmMgmt.dll
  • generate the OID via PowerShell or VBScript
  • Open Active Directory Schema mmc snap-in
  • Right-click on the Attributes folder, and Create New…
  • Create an attribute for the Previous OU
    • Description: customPreviousOU
    • Common Name: customPreviousOU
    • X.500 OID: <copy/paste from the script>.1
    • Syntax: Unicode String
    • Attribute is active: checked
  • Create an attribute for the Disabled On date
    • Description: customDisabledOn
    • Common Name: customDisabledOn
    • X.500 OID: <copy/paste from the script>.2
    • Syntax: Generalized Time
    • Attribute is active: checked
  • Assigned the Attributes to a Class (object type)
    • Open the properties of Computer in the Classes folder
    • In the Attributes tab select Add and select the new attributes.  Select OK to save and close.

The new attribute(s) can be viewed / modified in ADSI Edit or via a script.  Below are a few PowerShell commands to view and modify the custom attributes.

[cc lang=’powershell’ ]
Import-Module ActiveDirectory
Set-ADComputer MyComputer$ -add @{customPreviousOU=”lab.local/TestLab/Workstations”}
Set-ADComputer MyComputer$ -replace @{customDisabledOn=$(Get-Date)}
Set-ADComputer MyComputer$ -clear customPreviousOU,customDisabledOn
Get-ADComputer -Filter {customPreviousOU -Like “lab*”} -Property * | ft sAMAccountName, enabled, customPreviousOU, customDisabledOn


Create a custom Active Directory attribute
Create a custom Active Directory attribute


Create a custom Active Directory attribute
Create a custom Active Directory attribute


Assigning an attribute to a Class/Object type
Assigning an attribute to a Class/Object type
View/Edit a custom attribute in ADSI
View/Edit a custom attribute in ADSI

June 10, 2014

Posted In: Uncategorized