This is why I Love PowerShell… It’s simple, yet functional. From an Administrative perspective, I think we can all agree that any changes in your Domain Admins group without your knowledge would be of interest to you. If you’re in a large organization with access to enterprise management tools you probably have some …

The intent of this script is to quickly get some basic information about an Active Directory infrastructure. I have used it when I’m doing some work on an environment I’m not familiar with, it gives you a quick look at what you’re dealing with without a whole lot of effort. NOTE: I tested this code exclusively on a …

This is a simple script that will read the contents of a CSV file and create a new Active Directory User as well as a new Exchange Mailboxes for each object (row in the spreadsheet). You can select which Organizational Unit you want to put the Users in as well as which Exchange Database each users mailbox is created …

Today we’re talking a little more about Active Directory reconnaissance, for lack of a better term. If I start a new job, the first thing I want to do is find out how my infrastructure is configured. This script will search through Active Directory, or a subset of Active Directory, and look for Organizational Units …

More Active Directory PowerShell goodness… this time, creating Active Directory User objects in bulk using a CSV file. You will see 2 different code blocks below. The first, is as simple as you can get using minimal parameters and code. The second code block includes more parameters and addresses the issue of storing …

Update 4 May 2017: I’ve been contacted by a few people that were having trouble running the code in the Get-GroupMember function. I have replicated the error on one of my DCs but another DC in a different domain the Get-GroupMember function works fine. I’m still not entirely sure why the code works for some but not …

In this video, I talk a little more about performing Active Directory Maintenance with PowerShell. Specifically, finding user objects that have not authenticated to the domain in X number of days. This script will search an Organizational Unit for Users accounts that have not authenticated to the Domain in 1 hour. …

I have a pretty simple script today. All it does is import your Active Directory group information from the CSV file and create the groups based on the information imported. This is pretty much as simple as it gets but very effective for creating multiple groups in different organizational units. The format of the CSV …

If you’re in a large Enterprise you may have computer objects lurking in Active Directory that have not authenticated to the Domain in a while. This script will allow you to find those objects, disable them and move them to an alternate Organizational Unit.