A tool that automatically syncs Active Directory group membership with organizational unit contents, enabling OU-based permission assignment similar to NDS containers. Continue reading How to Implement Active Directory Shadow Groups
A PowerShell-based approach to managing Windows Firewall rules as code, using conditions and Group Policy to dynamically apply firewall rules across servers and workstations. Continue reading Windows Firewall as Code
A method to securely set local account passwords across domain computers using AES-256 encrypted tokens deployed via Active Directory Group Policy. Continue reading Active Directory – Securely Set Local Account Passwords
A guide to creating an Active Directory service account with password reset and account unlock permissions, with a downloadable Visual Studio project. Continue reading Active Directory – Securely Set Local Account Passwords
UserResourceCleanup monitors user data folders against Active Directory to automatically remove data belonging to accounts that no longer exist, recovering disk space. Continue reading UserResourceCleanup
AutoAD automates Active Directory object placement by using computer descriptions and subnet information to move computer and user objects into the correct Organizational Units. Continue reading Automated object placement using AutoAD
A helpdesk-friendly Active Directory password reset tool that generates unique, pronounceable random passwords, eliminating weak reset passwords like Password1. Continue reading Active Directory Password Reset Tool
ADCleanup is a set-and-forget tool that automatically disables and moves dormant Active Directory user and computer accounts to designated OUs based on configurable inactivity thresholds. Continue reading Active Directory Cleanup Tool (ADCleanup)
An alternative to LAPS for centrally managing local account passwords using GPO, a file share, SQL Server encryption, and custom PasswordImporter/PasswordViewer tools. Continue reading How to manage local account passwords from Active Directory without LAPS
A tool that automates GPO phase-in by randomly adding Active Directory users or computers to a security filter group on a scheduled basis, eliminating manual rollout management. Continue reading Phasing in a Group Policy
