Search Domain GPOs for Any Text String with PowerShell
A PowerShell approach for searching every Group Policy Object in an Active Directory domain for any string or setting reference.
Term View
Entries linked to "Active Directory" across the quiet archive.
A PowerShell approach for searching every Group Policy Object in an Active Directory domain for any string or setting reference.
A collection of useful commands and steps for troubleshooting Group Policy Objects (GPOs) in a Windows Active Directory environment.

A PowerShell script that generates an HTML diagnostics report for user lockouts in Active Directory, including password age, expiration details, and account status.

A comprehensive guide to managing user visibility in the Global Address List (GAL) using PowerShell, covering both on-premises Active Directory and Exchange Online environments with detailed scripts for checking and modifying the msExchHideFromAddressLists attribute.

This PowerShell script performs the following actions: It retrieves the Windows identity and security principal of the current user account. It then retrieves the security principal for the Administrator role. It checks if the current user is running as an administrator. If the user is not running as an administrator, the script relaunches itself as an elevated process. If the user is running as an administrator, the script displays a menu with three options: “Delta Sync”, “Full Sync”, and “Exit”. The user is prompted to select an option by entering the corresponding number. Based on the user’s selection, the script runs the appropriate command using the Start-ADSyncSyncCycle cmdlet with either the Delta or Initial policy type. If the user selects “Exit”, the script exits. Finally, the script displays a message indicating that it is running and to check the “miisclient” to confirm. It then pauses for 10 seconds using the Start-Sleep cmdlet. $myWindowsID = [System.Security.Principal.WindowsIdentity]::GetCurrent() $myWindowsPrincipal = New-Object System.Security.Principal.WindowsPrincipal($myWindowsID) $adminRole = [System.Security.Principal.WindowsBuiltInRole]::Administrator if (-not $myWindowsPrincipal.IsInRole($adminRole)) { $newProcess = New-Object System.Diagnostics.ProcessStartInfo "PowerShell" $newProcess.Arguments = $myInvocation.MyCommand.Definition $newProcess.Verb = "runas" [System.Diagnostics.Process]::Start($newProcess) exit } Write-Host '1) Delta Sync (Recommended, unless told to do a full sync)' Write-Host '2) Full Sync' Write-Host '3) Exit' $selected_menu_item = Read-Host 'Which number would you like to run (1 or 2)? (Enter Number and Press Enter)' switch ($selected_menu_item) { 1 { Start-ADSyncSyncCycle -PolicyType Delta } 2 { Start-ADSyncSyncCycle -PolicyType Initial } 3 { Write-Host 'Exit'; exit } default { Write-Host 'Incorrect Input' -ForegroundColor Red } } Write-Host 'Running Now.... Check miisclient to confirm' Start-Sleep -s 10

Browse Routes
Discovery Layer
A secondary exploration surface for following relationships beyond the visible ledger.
Matching entries