All Posts

A PowerShell script to report every computer account in Active Directory with OS, enabled status, last logon date, and IP address.

A PowerShell script to report every contact object in Active Directory, flagging any with no email address set.

A PowerShell script to list every enabled Active Directory user who has not logged on in 90+ days (configurable) — the accounts still enabled, still a live attack surface, and nobody watching them.

A PowerShell script to bulk-export a group-to-member report for every group in Active Directory at once, for a full access-control review.

There is no PasswordExpiryDate attribute to filter on — this PowerShell script calculates it from PasswordLastSet and your domain (or fine-grained) password policy, and lists everyone expiring soon.