All Posts

A PowerShell script to report every Active Directory account with an expiration date set, flagging which ones have already expired.

Knowing an account is locked out is only half the answer — this PowerShell script checks Event ID 4740 across every domain controller to find the computer that actually caused it.

A PowerShell one-liner and a full reporting script to list every enabled user account in Active Directory, plus the GUI method.

A PowerShell script to list every currently locked-out user account in Active Directory, with bad-password counts and timestamps — plus why Search-ADAccount, not Get-ADUser -Filter, is the cmdlet you actually need.

A PowerShell script to report exactly who has been delegated permissions on an Active Directory OU, filtering out the built-in defaults so only real delegations show up.