Report and Edit AD Site Links From PowerShell (Turbo Your AD Replication)

AD Replication in TRON terms “The Grid. A digital frontier. I tried to picture clusters of information as they moved through the computer. What did they look like? Ships, motorcycles? Were the circuits like freeways? I kept dreaming of a world I thought I’d never see. And then, one day… I got in!” (Kevin Flynn,…


TIP: 2 Ways userAccountControl Is Easier In AD PowerShell

Background Anyone who wants to write scripts for Active Directory will eventually run into the famous userAccountControl attribute.  Usually this comes up when you are searching for disabled accounts.  Actually this attribute is a bit flag for 22 different account settings!  You can find them clearly documented in KB305144.  In the GUI you find these…


Using PowerShell to Find Stale and Duplicate Active Directory Groups

PowerShell… “My mop!” One of the undisputed greatest movies of all time was UHF in 1989.  Stanley Spadowski and his mop were an amazing force for good.  He gave us all an important life lesson… “Life is like a mop.  Sometimes it gets dirty, and you have to clean it out.” I have often told…


Forensics: Monitor Active Directory Privileged Groups with PowerShell

Someone just now added Jimmy to the Domain Admins group! How do I know? Because I used PowerShell to check. Let me show you how. Some of the best customers that I visit get email pages when high value group memberships change. Obviously this is strongly encouraged for IT shops of any size. Of course…


Install the Active Directory PowerShell Module on Windows 10

Today I share a script to automate all of the manual steps involved with setting up the Active Directory PowerShell module on your Windows 10 workstation. Clickety, Click. Scripty, script. I recently reloaded my everyday work laptop. After three years it had in-place upgrades from Windows 8 to Windows 8.1 to Windows 10. You can…


Forensics: Audit Group Policy Links and Changes with PowerShell

Honorary Scripting Guy I would like to thank Ed and Teresa Wilson, the Microsoft Scripting Guy and the Scripting Wife, for bestowing upon me the title of Honorary Scripting Guy. This was a humbling surprise. It has been a joy to share my scripting passion with the community, and I will continue to do so….


AD PowerShell Password Reset Shortcut for Helpdesk

Introduction Back in May I released a post on the Hey Scripting Guy blog showing how to create a shortcut to unlock a user account with a PowerShell desktop shortcut.  That post was very popular, and the comments evolved into another shortcut to reset passwords.  Due to the popularity and utility of the idea I…


Back To The Future: Working with date data types in Active Directory PowerShell

Crazy Dates Set your watch for January 1, 1601, Marty.  Today we’re working with crazy dates in Active Directory PowerShell. If you have ever tried to script out Active Directory reports that included date fields, then you have likely run into this challenge.  There are “real” dates, and then “those” dates.  You know… the ones…


Use PowerShell to Find Windows XP Computers Still Alive in Your Active Directory Domain

PS PSA – PowerShell Public Service Announcement Usually I like to offer deep technical content on the blog, but today I’m going to keep it simple. Everyone should be keenly aware that Windows XP support officially ends on April 8, 2014. Many companies are migrating from Windows XP and need a quick script to check…


New Microsoft Download: Active Directory Replication Status Tool

Our Microsoft Customer Service and Support experts have released a new tool for diagnosing AD replication errors: ADREPLSTATUS.  Here is the description from the download page: The Active Directory Replication Status Tool (ADREPLSTATUS) analyzes the replication status for domain controllers in an Active Directory domain or forest. ADREPLSTATUS displays data in a format that is similar to REPADMIN…