Test Active Directory Credentials with PowerShell

This small PowerShell script checks whether a user account can authenticate against Active Directory. It is useful for quickly validating credentials during troubleshooting, onboarding, or when you want to confirm that a specific account and password combination works as expected. What the script does The script prompts for a user name and password, then uses … Weiterlesen

Monitor and Report Group Policy Changes with PowerShell

This PowerShell script helps monitor changes in Active Directory Group Policy Objects (GPOs). It compares the current day’s GPO export with the previous day’s data and generates a report that highlights new, deleted, renamed, and modified GPOs. What the script does The script exports all GPOs in the domain as XML reports and compares them … Weiterlesen

Search Group Policy Objects for a String with PowerShell

This PowerShell script helps you search all Group Policy Objects (GPOs) in the current domain for a specific string. It is useful when you need to quickly find where a setting, path, name, or keyword appears inside your GPOs without opening each policy manually. What the script does The script asks for a search string, … Weiterlesen

Trigger and Verify Full Active Directory Replication with PowerShell

In distributed Active Directory environments, it can be useful to manually trigger replication after changes to Group Policies, user objects, or DNS records. This PowerShell script automates that process across all domain controllers and then checks the replication status afterwards. repadmin /syncall is the underlying command used to synchronize domain controllers, and Get-ADReplicationPartnerMetadata is used to read replication partner … Weiterlesen

Reissue Certificates and Generating CSRs for an Internal Microsoft CA via Powershell

In many environments, operational certificates for web servers and services are still requested manually via MMC or the web enrollment pages. This PowerShell script automates that process by generating a certificate signing request (CSR), submitting it directly to a Microsoft Enterprise CA, and optionally exporting the issued certificate as a PFX file. The script supports … Weiterlesen

Automated AD Group Policy Backup and HTML Reporting

This PowerShell script helps administrators automatically back up Active Directory Group Policy Objects (GPOs) and generate HTML reports of the current settings. It is designed as part of an IT‑security audit and change‑tracking workflow, especially for environments where Group Policy changes must be logged and recoverable. The script runs once per day as a scheduled task and performs four … Weiterlesen

Changing the IP range in an Active Directory network

I had to completely change the IP range of one location because it was to be connected to our network, and the same IP ranges were already in use. Routing between the locations would therefore have been impossible and I didn’t want to use NAT for this. The following requirements were specified: The following list … Weiterlesen

Change Active Directory OU for new computer objects

When new computers are joined to Active Directory, they are often created in the default Computers container. That can be a problem because objects in this location do not receive the Group Policy Objects you may have designed for newly added systems. As a result, software deployment, security settings, local administrator assignments, or login messages may not … Weiterlesen

Active Directory Secure Schema Update (ADPREP) via Suspended Replication

Procedure for Performing a Safe Active Directory Schema Update Many have likely performed an Active Directory schema update without fully understanding or considering the associated risks. I recently encountered my first power outage during a schema update. Fortunately, it happened in my private test environment. As a result, the schema became corrupted. However, because it … Weiterlesen