Get-ADuser Attributes From CSV List Of Users – PowerShell

I would like to explain how you can take a list of users, maybe from Office 365 or Azure AD, that has just their UPN, and then export their on-premise AD attributes to a csv file

(more…)

Read More

Azure AD Roles & Administrators

Starting in July 2018, Microsoft added some new cool features to help Administrators review roles and permissions in Azure AD. This included a complete list of the built-in roles and a description of what they enabled the member to do, especially making it a lot easier to answer questions such as “How many Global Admins do we have?” or “What permissions does my account have?”

Let’s have a look at this in a bit more detail

(more…)

Read More

Get AD Group members from a list of AD Groups in Excel – Powershell

A customer had a list of Active Directory groups that they wanted to know who were the members and also export this to an Excel file.

(more…)

Read More

Count Objects in AD OUs – Powershell

A recent request we had was to count the number of objects in each OU in AD, so we could identify which ones were not being used any more. To achieve this we used a PowerShell script, and exported to a csv file.

(more…)

Read More

Count Number of AD Users – PowerShell

Very quick piece of PowerShell that will count the number of AD Users in your domain

We can then extend this to only count the Enabled AD users

This is all well and good but we want to dive deeper and search on multiple OUs.

(more…)

Read More

Export Subnets from Active Directory Sites and Services

As part of an AD upgrade project we have recently been working on, need to discover what existing AD sites were deployed, and whether these needed to be deployed in the new AD environment.

This can be quickly achieved using some simple PowerShell commands

(more…)

Read More

Active Directory Users Created In Last 30 Days – PowerShell

As part of an Active Directory project we have been involved with, there had been a compliance issue where the Service Desk were creating users with “Password Never Expires”, which was against the security policy of the company.

To help identify the incorrectly created Users and also to fix them, this script was created;

(more…)

Read More

Create Active Directory Test Users – PowerShell

A quick and simple PowerShell script that can be adjusted for your own lab environment that will create (in this example 1000) test users in Active Directory

(more…)

Read More

Active Directory Dormant User Report – PowerShell

Working on a recent large multi site Active Directory environment, we were asked to come up with a PowerShell script that will help the AD Team identify dormant user accounts in their AD domain.

Firstly, we had to establish what a dormant user was, and it was agreed that this would be a User account that has not logged in for 60 days. Then we needed to find out of there were any exceptions to this policy, such as maternity or sick (we didnt want to report on this accounts). Finally, we wanted to exclude any Service accounts or Resource accounts, so we had to get the DN of these as well.

(more…)

Read More