User Administration¶
This page contains PowerShell and Batch tools for Windows user administration.
Tools¶
- Get-AzureUserInfo.ps1
- Get-LocalAdmin.ps1
- Get-LocalUsers.ps1
- Get-OnlinePasswordAge.ps1
- Get-SIDInfo.ps1
- Import-UsersCSV.ps1
- WinUserEnum.bat
Get-AzureUserInfo¶
- Tool: Get-AzureUserInfo.ps1
- Description: PowerShell commands for navigating Azure Active Directory objects
- Use Case: run these commands to use PowerShell to administer Azure Active Directory
- Usage: contains individual commands for navigating Azure user objects
Get-LocalAdmin¶
- Tool: Get-LocalAdmin.ps1
- Description: PowerShell function to get the local administration of the specified computer
- Use Case: run this script to obtain the local admin of the specified computer
- Usage: run
Get-LocalAdmin.ps1to import the functionGet-LocalAdministratorBuiltin. - Command:
PS C:\> Get-LocalAdministratorBuiltin -ComputerName $Target - Result: displays the local administrator information to the console about the computer defined by the -ComputerName parameter, which is $Target in this case
Get-LocalUsers¶
- Tool: Get-LocalUsers.ps1
- Description: PowerShell script to obtain a list of local users and group memberships for a remote computer
- Use Case: run this script to obtain local user information for a remote computer
- Usage: create a txt file called "Servers.txt" that contains a list of the remote computers being targeted then run the script
- Command:
PS C:\> .\Get-LocalUsers.ps1 - Result: creates
LocalUSers.csvwhich contains the local users for the computers denoted inServers.txt. These files should be in the same directory asGet-LocalUsers.ps1
Get-OnlinePasswordAge¶
- Script: Get-OnlinePasswordAge.ps1
- Description: PowerShell commands that return a list of passwords change dates for Microsoft Online Exchange users
- Use Case: run the commands in this script to obtain information about Microsoft Online Exchange user password information
- Usage: contains individual commands for connecting to Microsoft Exchange Online and obtaining password information
Get-SIDInfo¶
- Tool: Get-SIDInfo.ps1
- Description: PowerShell commands for obtain SID information about a given domain user
- Use Case: use these commands when an SID must be obtained from a known domain username or when a domain username must be obtained from a known SID
- Usage:
- Command: define $USER with the domain username and execute the SID from username commands
- Result: the SID for the $USER will be returned
- Command: define $SID with the domain user SID and execute the Username from SID commands
- Result: the domain username for the $SID will be returned
Import-UsersCSV¶
- Tool: Import-UsersCSV.ps1
- Description: PowerShell function to input username from a CSV into Active Directory
- Use Case: run this PowerShell script to quickly create users from a CSV list of users
- Usage: input user information into ADUsers.csv
- Command:
PS C:\> .\Import-UsersCSV.ps1prior to running function - Result: defines the Import-UsersCSV PowerShell function
- Command:
PS C:\> Import-UsersCSV -Path C:\ADUsers.csv - Result: inputs the users specified in
C:\ADUsers.csvinto Active Directory
WinUserEnum¶
- Tool: WinUserEnum.bat
- Description: Batch script that returns windows user information
- Use Case: run this script to obtain user information about a given computer or domain environment
- Usage: run for options for obtaining user info
- Command:
C:\> .\WinUserEnum.bat - Result: select the corresponding user type to generate information about that user type