Access is denied msg after scheduled powershell script uses Quest ActiveRoles 7.1 Management Shell

My customer asked me to create scheduled task uses cmdlets from Quest ActiveRoles 7.1 Management Shell. Missing documentation caused my long fight with ‘Access is denied’ monster.

Fully Qualified Error ID = System.UnauthorizedAccessException,Quest.ActiveRoles.ArsPowerShellSnapIn.Commands.RemoveGroupMemberCmdlet2

System.UnauthorizedAccessException: Access is denied.
at System.DirectoryServices.Interop.UnsafeNativeMethods.IAds.SetInfo()
at System.DirectoryServices.DirectoryEntry.CommitChanges()
at Quest.ActiveRoles.ArsPowerShellSnapIn.DirectoryAccess.AdsiDirectoryObject.SetInfo()
at Quest.ActiveRoles.ArsPowerShellSnapIn.BusinessLogic.ObjectCache.Save(IEnumerable`1 controls)
at Quest.ActiveRoles.ArsPowerShellSnapIn.Commands.RemoveGroupMemberCmdlet2.ProcessRecord()
at System.Management.Automation.CommandProcessor.ProcessRecord()

But solution is so easy, you have to first use this cmdlet

Connect-QADService -Service "quest_server.fqdn" -Proxy

SSO issue with “AADSTS50008: Unable to verify token signature.”

Client trying to login to Office 365 portal gets error message

AADSTS50008: Unable to verify token signature. The signing key identifier does not match any valid registered keys.

after replaced ADFS 3.0 Service Communication certificate instead of expired one. Steps were done according to usefull blog article. New cert is valid but clients cannot login to the Portal.


Microsoft recommends to run following command from powershell running on ADFS server only in case if you want manualy renew token signing certificates, but I think it’s good idea to do it in our case:
Update-MSOLFederatedDomain -DomainName [domain name]
The same problem is described here.

How to download inaccessible updates from Microsoft site

If you need download updates for unsupported operating system as is Windows XP, for example NLS support for Remote Desktop Client from URL resp. URL you’ll got error message

We're sorry, this download is no longer available.

There is way how to download it trough Windows Update Catalog site here:

Now you can download the file


That’s all

Sharing e-mail domain between Office 365 and Kerio Connect

Sharing e-mail domain as it described in title of this post it by Microsoft isn’t recommended solution, but possible.

Office 365 PowerShell Basics

To connect to Office 365 you need to download and install “Microsoft Online Services Sign-in Assistant” and to know how to do it. There are some tips.

DPM Server: how to hardlink eseutil.exe using Fsutil

Quick hint is here:


Another cmdLet commands to get Exchange Server version

Run under PowerShell on Exchange Server:


How quickly set up MS SCCM DPM 2012 R2 Agent

First, you have to copy installation folder from DPM server “\\DPMSERVER\agents\RA\4.2.1273.0” to local folder , for example “c:\install\DPM”.


Hľadá sa internetová škola na Slovensku

This post is only in Slovak language
Môj syn Martin bol donedávna normálnym žiakom normálnej školy. Dnes je siedmakom v internetovej škole, bežná denná školská dochádzka mu nehrozí. No tá internetová škola je česká.

Píše domáci školák: Moje tri roky v domácej škole

This post is only in Slovak language
Volám sa Ondrej Krajčovič. Narodil som sa v Bratislave, ale bývame v Igrame. Mám päť súrodencov. Ja som asi v strede. Mám deväť rokov a chodím do domácej školy. Na začiatku druhého ročníka som odišiel zo školy kvôli…

1 2 3 4