A helpdesk-friendly Active Directory password reset tool that generates unique, pronounceable random passwords, eliminating weak reset passwords like Password1. Continue reading Active Directory Password Reset Tool
ADCleanup is a set-and-forget tool that automatically disables and moves dormant Active Directory user and computer accounts to designated OUs based on configurable inactivity thresholds. Continue reading Active Directory Cleanup Tool (ADCleanup)
An alternative to LAPS for centrally managing local account passwords using GPO, a file share, SQL Server encryption, and custom PasswordImporter/PasswordViewer tools. Continue reading How to manage local account passwords from Active Directory without LAPS
A tool that automates GPO phase-in by randomly adding Active Directory users or computers to a security filter group on a scheduled basis, eliminating manual rollout management. Continue reading Phasing in a Group Policy
A strategy for centrally managing local Administrators group membership from Active Directory by creating per-computer AD groups and synchronizing members via a scheduled tool. Continue reading Strategy to centrally manage Local Administrators group from Active Directory
A technique for using Active Directory user attributes like mobile number within Group Policy Preferences item-level targeting via LDAP queries and environment variables. Continue reading How to use User Attributes within Group Policy Preferences Item Level Filtering
How to extract Active Directory password hashes from an IFM backup using ntdsutil and DSInternals PowerShell module for security auditing purposes. Continue reading How to extract hashes from IFM backup
A step-by-step process for reducing Active Directory Administrators group membership by creating device-type-specific delegation groups using WMI filters and Group Policy. Continue reading Securing Active Directory Administrators Groups
A method to restore Active Directory Group Policy objects from SYSVOL backup data by creating a new GPO, overwriting its folder contents, and fixing the settings preview. Continue reading How to restore Active Directory Group Policy with only SYSVOL data
