Powershell

A PowerShell script to report each Active Directory user's assigned manager, resolved to a readable name, flagging anyone with no manager set.

LastLogonDate can be up to two weeks stale. This PowerShell script queries the non-replicated LastLogon attribute on every domain controller directly and returns the real answer.

A PowerShell script to list every user in a specific Active Directory OU, including sub-OUs by default, before applying a GPO or handing the OU off to a delegated admin.

A PowerShell script to list Active Directory user accounts whose expiration date has already passed, flagging any that are still enabled.

A PowerShell script to list deleted Active Directory user accounts still sitting in the AD Recycle Bin — plus how to check whether the Recycle Bin is even enabled, and how to actually restore what you find.