Microsoft › ActiveDirectory

Entries feed - Comments feed

2023 Jan 8

Get a List of Enabled Users in Group(s)

In case you have an audit, and being asked to provide all the members of the group(s), and have a very specific pattern (like ending with "RW" as a random example), and you are not removing the users from the groups when they leave the company (anything if not everything is possible), you can use the following function (as it is, or add it to your $profile).

Continue reading...

2021 Dec 21

Check Sensitive Groups Membership

In the world of audit and escalated accounts, you will need to have an overview of the privileged groups and members there, this could be a regulator requirement, too. This small script will show how to do this, and have just one file per check with all the groups you need. Of course, it could be applied to any set of groups, no need to limit yourself.

Continue reading...

2021 Jun 20

Checking the *Real* Password Expiration Date

If you ever happened to have used ADAC for the users to set up their password policy to be different from the default for your domain, then you might have noticed the net user %username% /domain command will return not the expected value, as it checks the information quite differently. The script below will actually help to determine the real expiry date.

Continue reading...

2021 Jun 13

Remove the User from a Group if They are the Members of Another One

If you need to remove the user from a particular group based on the membership of another, you can do that super easy, barely an inconvenience.

Continue reading...

Check Users with No Groups by Pattern

Imagine the situation when someone (probably, from Audit) comes to you and asks to provide the list of users (if any) without a particular group (or groups by imaginary pattern). It could happen, so you need to be more or less prepared.

Continue reading...

2020 Sep 28

UPN Suffix Change for the Required Users

Sometimes you will need to change the UPNs for the users. Either to have the sync with Azure AD or for something else – it's good to be compliant with the 21st century.

Continue reading...