Here is a quote from Jeff Weiner I came across in an article by Adam Lashinsky which you can find HERE

Focus has been — I’m oftentimes asked what keeps you up at night, and from day one it’s been focus and scale. And with regard to focus, you know, there’s the word focus and we’ve also created an acronym around it, FCS. So, the F is fewer things done better, the C is communicating the right information to the right person at the right time, and the S is the speed and quality of our decision-making.

I would like to focus on the F(Fewer things done better) here as it really struck me as extremely important.

Now I have never worked for a company that has experienced Hyper-Growth, however I can see where this strategy’s importance is more apparent to a company that is. I also think that the strategy is important for a company that is not growing. All too often employees are spread thin and as a result, the employee and the company will suffer. Why does this happen when the end result isn’t favorable? Two reasons, the employee has passion and wants to provide more value, and the company wants more value out of each employee and is more than willing to assign responsibilities. What is wrong with that? Nothing really, but it isn’t the correct approach to solve the issue of the employee and the company. In the Marine Corps we called this “Good initiative, bad judgement”.

A person who I respect and have worked with for many years told me that everyone has a worry basket and each persons worry basket isn’t always the same size. For example, some people may be able to hold five(5), while others may hold six(6) or eight(8). Although, the worry basket is always full; so if they take on another worry one of the previous has to be removed. In my opinion this same theory works for responsibilities. If you think of multitasking, you can only do/think of one thing at a time. So if you think of yourself as a great multitasker then maybe you have a larger basket with compatible worries/tasks/thoughts. For example, if an employee is well suited for customer service, then adding a task that is independent and segregated from the customer will impact their ability to switch worries/tasks/thoughts. This is because the employee is able to add and remove items from the basket more efficiently if they are leveraging the their strengths. I would suggest you check out this artcle about multitasking HERE and I’m sure you can find more.

Fewer things done better absolutely says it all. Identify your employees strengths, foster them and let them flourish to theirs and the company’s advantage. You will not only impact your bottom line, you will soon forget it because you are improving your top line. Which is a byproduct of the company and employee winning!

Modify Multiple Active Directory Accounts – PowerShell

The other day I wrote a script that populated my test server with 290 accounts. You can check it out HERE. Today I decided I would modify the logon hours for those accounts… It turned out to be more difficult than I thought because of the way you have to present the logon hours:

[byte[]]$hours = @(0,0,0,0,224,255,3,224,255,3,224,255,3,224,255,3,224,255,3,0,0)

There were a couple of sites that tried to explain it, but it easier to set the logon hours through the Active Directory Users and Computers MMC Snapin on a test user. Then go into ADSI Edit and take a look at the properties on the object and change the “Value Format” to Decimal:


After running the script, the end result is 290 accounts in the Employees OU changed from the default 24/7 logon to the following:


#Check if we are running in elevated powershell
If (-NOT ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(`
    [Security.Principal.WindowsBuiltInRole] "Administrator"))
    Write-Warning "You do not have Administrator rights to run this script!`nPlease re-run this script as an Administrator!"

#Check if the Active Directory Module is loaded
if(-not (Get-Module ActiveDirectory)){
	Import-Module ActiveDirectory

#Grab the specific accounts we want(Everything in the Employees OU)
$employees = Get-ADUser -Filter * -SearchBase "OU=Employees,DC=lmnop,DC=local"

#Logon Hours Monday - Friday from 5AM - 6PM
#(I don't know how this works so I set it in MMC and check the value in ADSIEdit in Decimal)

[byte[]]$hours = @(0,0,0,0,224,255,3,224,255,3,224,255,3,224,255,3,224,255,3,0,0)

# create a hashtable to update the logon hours and a description
$replaceHashTable = New-Object HashTable
$replaceHashTable.Add("logonHours", $hours)
$replaceHashTable.Add("description", "Employees can only logon from Monday through Friday from 5:00 AM to 6:00 PM")

$count = 0

foreach($employee in $employees){
Write-Host "Changing logon hours for" $employee.SamAccountName
Set-ADUser $employee.SamAccountName -Replace $replaceHashTable

Write-Host $count " Accounts have been modified"

Populating Active Directory with Users and Groups with PowerShell

I whipped up this script in order to populate my Lab VM running Windows Server 2008 R2 with users and groups. Plus I was bored and wanted to work on my PowerShell 🙂

I did have to load an update so that I could run a few of the cmdlets(New-ADUser, New-ADGroup, & Add-ADGroupMember) you can find the update and info on it here

#### Create Users and Groups in Fresh AD ####
#### I use this script to populate users and groups on a test server ####
#### Load Active Directory Module ####
Import-Module ActiveDirectory

#### CSV Format Below ####
## FirstName,LastName,UserName,Password,EmailAddress,Group1,Group2,Group3,Group4,Group5,Group6,Group7,Group8,Group9,Group10,Group11,Group12
## A. Scott,Wright,ascott0,WrA.57co,,DesktopAdmins,,Production Control,,,,,,,,,

### Import our CSV File ###

$UserList = Import-Csv "C:\ADShare\Powershell\AddUsers.csv"

$EmployeeOU = "OU=Employees,DC=lmnop,DC=local"

foreach ($User in $UserList){
	$FullName = $User.FirstName + " " + $User.LastName
	$Password = $User.Password
	$SAM = $User.UserName
	##Build Group List##
	$GroupList = @( 
	##Create User##
	New-ADUser -Name "$FullName" -SamAccountName $SAM -UserPrincipalName $SAM -DisplayName "$FullName" -GivenName $User.FirstName -Surname $User.LastName -EmailAddress $User.EmailAddress -AccountPassword ( ConvertTo-SecureString $Password -AsPlainText -Force) -Enabled $true -Path "$EmployeeOU" -PasswordNeverExpires $true
	##Check if group exists and Create if needed##
	Foreach($ADGroup in $GroupList){
		#Skip blanks
		if($ADGroup -ne ""){
				if(Get-ADGroup -Filter{SamAccountName -eq $ADGroup}){
				#Write-Host $ADGroup ": Exists"
				#Add User to Group
				Add-ADGroupMember $ADGroup $SAM
				Write-Host "Added $SAM to $ADGroup"
					#Write-Host $ADGroup ":Does Not Exist"
					#Create Group, Then add user to Group
					New-ADGroup -Name "$ADGroup" -Path "$EmployeeOU" -GroupScope Global
					Add-ADGroupMember $ADGroup $SAM
					Write-Host "Created Group $ADGroup"


Here is the complete CSV file I used (basically from the AdventureWorks Sample DB) AddUsers.csv

PowerShell is always fun.

NV Energy – Life Rescue

I recently left Tapani Inc. on 06Dec2013 and shortly after I took a short contract job working for Life Rescue, Inc. The job was to identify all confined space entry points at three(3) NV Energy power plants; Chuck Lenzie, Harry Allen, and Silverhawk. We created a base “Confined Space Data Sheet & Rescue Plan” for each entry point. I now know more about Natural Gas power plants than I would have ever imagined. (Living in Vegas kinda stunk over the holidays).

I will jump into something and normally do very well. I am a very dedicated hard working person, eager to learn new things.

I am now back home and looking to IT work.

Chuck Lenzie Map