All Posts

A PowerShell script to pull a user logon history from the Security event log across every domain controller, with logon type translated into plain English.

A PowerShell script to report every Organizational Unit in Active Directory with object counts, GPO links, and delete-protection status, for finding empty or unprotected OUs.

A PowerShell script to list every Active Directory account with the PasswordNeverExpires flag set — a near-universal finding in security audits, and worth reviewing on a schedule, not just once.

A PowerShell script to list every member of an Active Directory security group, including contacts that Get-ADGroupMember silently skips.

A PowerShell script to report when every Active Directory user last changed their password, with calculated age in days and flags for accounts that have never had one set.