All Posts

A PowerShell script that recursively lists every member of Domain Admins, Enterprise Admins, and Schema Admins — including nested group membership — and flags the stale ones nobody has looked at in months.

A PowerShell script to audit who added or removed members from Active Directory groups, pulled from the Security event log across every domain controller.

A PowerShell script to list Active Directory users with recent bad password attempts and current lockout status, for spotting brute-force attempts or stale saved credentials.

A PowerShell script to list stale Active Directory computer accounts — the decommissioned machines nobody cleaned up, still bloating GPO processing and inventory counts.

A PowerShell script to list every server computer account in Active Directory, flagging which ones are domain controllers.