Domain Administration¶

This page contains PowerShell and Batch tools for Windows domain administration.

Tools¶

Tool: exchangeonline-tools.ps1
Description: PowerShell commands for administering Microsoft Exchange Online
Use Case: run the individual commands in this file to use PowerShell to administer Microsoft Online Exchange
Usage: run individual commands in the document to perform the task described by the comments

Script: Get-AccountLockoutStatus.ps1
Description: this PowerShell function checks all domain controllers for lockout event IDs and displays tabled information with Username, Time, Computer Name and Caller Computer
Use Case: run this script to obtain information about locked out active directory objects
Optional Parameters:
ComputerName: will only check the specified computer name instead of all domain controllers
Username: will only check the specified username instead of all usernames
DaysFromToday: will set the number of days to check in the event log (the default is 3 days)
Usage:
Command: PS C:\> .\Get-AccountLockoutStatus.ps1
Result: defines the Get-AccountLockoutStatus function
Command: PS C:\> Get-AccountLockoutStatus -Computername DC01 -Username John -DaysFromToday 10
Result: will display lockout events from DC01 for username John for the past 10 days

Tool: Get-ADPCReport.ps1
Description: this PowerShell script obtains all Active Directory computers and creates a report called "ActiveDirectoryComputers.html" in the directory where the script is run
Use Case: run this script to obtain an HTML report of all computer objects in Active Directory
Usage:
Command: PS C:\> .\Get-ADPCReport.ps1
Result: generates ActiveDirectoryComputers.html in the same directory as the script

Script: Get-DomainControllers.ps1
Description: PowerShell script to output DC and FSMO role information to the console
Use Case: run this script to obtain Active Directory Domain Controller role information
Usage:
Command: PS C:\> .\Get-DomainControllers.ps1
Result: FSMO domain controller information about the current environment will be printed to the console

Script: Get-DomainReports.ps1
Description: PowerShell script that generates 4 csv reports about the current domain environment: user-report.csv, computer-report.csv, groups-report.csv, and domain-report.csv, and places them in a directory named by the user
Use Case: run this script to obtain user, computer, group and domain information about the current environment
Usage:
Command: PS C:\> .\Get-DomainReports.ps1
Result: script will prompt for a directory to store reports and will generate user-report.csv, computer-report.csv, groups-report.csv, and domain-report.csv in that directory

Script: Get-DomainUPNs.ps1
Description: PowerShell script that creates CSV of UPNs of the current domain
Use Case: run this script to obtain the User Principal Names of all users of the current domain
Usage:
Command: PS C:\> .\Get-DomainUPNs.ps1
Result: creates a list of all UPNs to C:\Temp\UPNs.csv

Script: Get-GPOReports.ps1
Description: PowerShell script that exports all Group Policy into HTML format
Use Case: run this script to obtain Group Policy about the current domain environment
Usage:
Command: PS C:\> .\Get-GPOReports.ps1
Result: generates an HTML report for each GPO policy in the directory "\GPO-Reports"

Tool: WinDomainEnum.bat
Description: this batch script obtains information about the current Windows domain including information about networking, domain controllers, password policy, users, groups, computers, admins, and more
Use Case: run this script to obtain information about the current Windows domain environment
Usage:
Command: C:\> .\WinDomainEnum.bat
Result: select the option corresponding to the needed information