This script signs a PowerShell script with a code-signing certificate from the current user certificate store. It first searches for a certificate that matches the configured certificate name, checks whether it is still valid, and then applies a digital signature to the selected script. After signing, it writes a CSV log entry so the signing … Weiterlesen
In environments with internal PKI and Exchange Online, publishing S/MIME certificates centrally can save a lot of manual work. This PowerShell script exports public user S/MIME certificates from Active Directory, stores them as .cer files, and then writes them to Exchange Online mailbox attributes so they are available through the Global Address List (GAL). S/MIME in Exchange … Weiterlesen
This small PowerShell script checks whether a user account can authenticate against Active Directory. It is useful for quickly validating credentials during troubleshooting, onboarding, or when you want to confirm that a specific account and password combination works as expected. What the script does The script prompts for a user name and password, then uses … Weiterlesen
This PowerShell script helps monitor changes in Active Directory Group Policy Objects (GPOs). It compares the current day’s GPO export with the previous day’s data and generates a report that highlights new, deleted, renamed, and modified GPOs. What the script does The script exports all GPOs in the domain as XML reports and compares them … Weiterlesen
This PowerShell script helps you search all Group Policy Objects (GPOs) in the current domain for a specific string. It is useful when you need to quickly find where a setting, path, name, or keyword appears inside your GPOs without opening each policy manually. What the script does The script asks for a search string, … Weiterlesen
Sometimes a Microsoft Intune application needs to be reset because installation data is stuck or the app must be forced to reinstall. This PowerShell tool helps by loading a list of apps from a CSV file, letting the operator choose one, and then cleaning up related Intune Management Extension registry entries. It also reminds the … Weiterlesen
In distributed Active Directory environments, it can be useful to manually trigger replication after changes to Group Policies, user objects, or DNS records. This PowerShell script automates that process across all domain controllers and then checks the replication status afterwards. repadmin /syncall is the underlying command used to synchronize domain controllers, and Get-ADReplicationPartnerMetadata is used to read replication partner … Weiterlesen
In many environments, operational certificates for web servers and services are still requested manually via MMC or the web enrollment pages. This PowerShell script automates that process by generating a certificate signing request (CSR), submitting it directly to a Microsoft Enterprise CA, and optionally exporting the issued certificate as a PFX file. The script supports … Weiterlesen
This PowerShell script helps administrators automatically back up Active Directory Group Policy Objects (GPOs) and generate HTML reports of the current settings. It is designed as part of an IT‑security audit and change‑tracking workflow, especially for environments where Group Policy changes must be logged and recoverable. The script runs once per day as a scheduled task and performs four … Weiterlesen
When troubleshooting S/MIME in Exchange Online with Microsoft support, one of the key questions was: Is our internal CA certificate chain really stored correctly in the tenant? Exchange Online does not only rely on public online CAs; it maintains its own virtual certificate collection for S/MIME trust, which Outlook Mobile then uses to validate user certificates. To … Weiterlesen