Michael has been an IT Pro since 1998. He has worked predominantly in the Windows world including client and server operating systems, on-prem systems engineering (AD, DNS, etc.), and over the last ten years or so has embraced and immersed himself in all things Microsoft 365 - including Exchange Online, SharePoint Online, Teams, OneDrive, and Microsoft Entra ID. He has written articles here on Petri based on these technologies. Michael strives to help other IT Pros with getting more efficient (especially with PowerShell) in their day-to-day tasks and offering solid assistance on larger projects.
Last Update: Mar 25, 2025
This article delves into the Internet Printing Protocol (IPP) and its implementation in Microsoft Windows. We’ll explore what it is, the fundamental concepts, functionality, advancements in Windows 11, and essential troubleshooting techniques. It aims to offer you a comprehensive understanding of IPP. Introduction to Internet Printing Protocol (IPP) Microsoft announced support for the Internet Printing…
This article explores how Microsoft Entra’s new token theft protection policy can provide robust protection against token theft. By leveraging a new Conditional Access policy, organizations can safeguard their digital identities and sensitive data from cyberthreats. Securing your IT landscape is increasingly becoming critical. With cyberthreats on the rise, and showing no signs of slowing…
You are woken by a call at 7am to find out your Active Directory (AD) infrastructure has been hit by ransomware. The helpdesk is overwhelmed by calls from users who can’t log in and management is already demanding to know how long it will take to restore. You break into a cold sweat realizing IT…
Last Update: May 05, 2025
In this article, I’m going to show you how to check FSMO roles and which domain controllers (DC) hold the FSMO roles in Active Directory (AD). FSMO roles are assigned to specific domain controllers and are designed to prevent conflicts once data is replicated. You can also quickly transfer FSMO and seize FSMO roles using…
FSMO roles are a crucial piece in Active Directory functionality. Learn about their purpose, types, and how they work together in this guide. Windows Server Active Directory multi-master model A multi-master enabled database, such as Active Directory, provides the flexibility of allowing changes to occur at any domain controller (DC) in the enterprise, but it…
Personal Data Encryption (PDE) protects sensitive information from unauthorized access. Microsoft introduced the feature with Windows 11, version 22H2, but it hasn’t received a lot of fanfare. This article explains PDE, how it works, and why it might be needed in addition to BitLocker. What is Personal Data Encryption (PDE)? Personal Data Encryption (PDE) is…
Last Update: Apr 06, 2026
A simple (non-complex) Active Directory password (AD) is vulnerable to hacking and exploitation. Requiring complex passwords in your Active Directory password policy increases the effectiveness of passwords exponentially – each additional special character you require in your users’ passwords makes them ultimately impervious to brute-force attacks. Going back to the 2000s, Excel’s simple workbook-protected passwords…
In this article, I’ll show you how to list Active Directory users with PowerShell. While you can also list Active Directory (AD) users in Active Directory Users and Computers, PowerShell provides a much faster way. Check out how to list Active Directory Users with ADUC on Petri if you would prefer to perform this action…
Last Update: Nov 10, 2025
While there are numerous paid solutions available, many IT professionals overlook the relative abundance of free Active Directory tools that can streamline management tasks. Besides making your CFO happy, these tools offer robust features that can simplify complex administrative tasks and enhance security. In this blog post, we’ll explore why IT pros should consider integrating…
The Active Directory Administrative Center (ADAC) is a powerful, modern tool for managing Active Directory. Learn how to use it efficiently with our step-by-step guide and tips. What is Active Directory Administrative Center (ADAC)? The Active Directory Administrative Center (ADAC) is a tool designed for IT administrators and IT Pros to manage Active Directory. Users,…
Last Update: Sep 16, 2025
Over ten years ago, Microsoft announced the EASE or Active Directory Enhanced Security Admin Environment. Otherwise known as your Active Directory Red Forest, it isolates your privileged access administrative accounts in Active Directory (AD). Over the last four years, Microsoft has accounted for the retirement of the ESAE in favor of a more modern privileged…
Last Update: Sep 20, 2024
As an IT Pro in the Microsoft online landscape, you’ve certainly been seeing ‘Microsoft Entra ID‘ more often. What is this? Is there a difference between Entra ID vs Azure AD? It’s actually very simple. Read on to find out more! Entra ID vs Azure AD So, what is Microsoft Entra ID? Well, it’s very…