Powershell --> Powerquick : retrieve event viewer settings and/or search for locked user account

Hi mates,
quick and useful : check event viewer settings as record count, state (full or....) file size and so on.
Additionally below you can find a separate script that allows you to query Event Viewer searching for locked out users.
Nothing more, it's easy to understand and adapt to your needs.
Here you are :



Hope this help.
Bye

Today challenge : Domain Password policies and Fine-Grained P.P.

Hi Mates,
this is a new section that wants to describe, briefly, what happens every day in my technical-sysadmin life.
I don't want to bore you with complicate concepts but only to focus on a simple "adventure" that every day "stole" me sometime  (leaving also on me something that I had forgotten or that I didn't know).
Today I had to face up with a GPO in a customer Active Directory domain (Windows 2008 R2). Practically the customer told me that even if the value of the parameter "Minimum password age" was set to 0 she was not able to change repeatedly her password.
The core of the issue was that being her a SysAdmin she was added in a group (Shadow) part of the Fine-Grained Password Policy.

Powershell : retrieve all groups and members in Active Directory

Hi mates,
I needed to extract, few weeks ago, some information from one of my customer's Active Directory.
I was worried about the format.....the final output for this huge information.
Searching and trying I found the way to extrapolate everything I need and write it to Excel in order to provide something that could be filtered, ordered, and so on.
Nothing special.....but useful

Powershell --> Powerquick : get (some) important remote pc info

Hi mates,
here again with a quick Powershell script that could help you during the day by day routine.
Some info to retrieve from a remote pc that could be useful for a massive software installation, to group specific computer with specific software installed, to......it's up to your fantasy.
Obviously you can find thousand of this kind of script on the internet but I feel the need to share, share and share......
Improve it without any limit.....

Powershell --> Powerquick : change Active Directory attributes for a specific group of users

Hi mates,
quick and dirty tips : change Active Directory user account attributes......I needed to do it for and old Exchange 2003 environment.
Only to give you a fast and reliable solution.....nothing more.
Here you are :

Powershell : manipulate Excel files

Hi mates,
I needed to manipulate some Excel files and merge some data with my customer's Active Directory.
The main goals were to :
1. be sure that the files were consistent
2. correct eventual anomalies
3. merge part of its contents with some specific fields of the Active Directory
Theoretically this is something that is usually made in accordance with the HR dept. In particular when they use a system the is totally different or separated from our main directory.
The fact is that for several purposes some fields needs to be populated : for example to assign budget or to split some costs between different sub-companies.

Powershell : find and move disabled computer account.....Active Directory cleaning

Hi mates,
I needed to perform some active directory cleaning.
The most important consideration about this activity is that most of the modern software are continuously in touch with AD, querying it, retrieving data and so on.

To have a partial clean situation we putted in production another script that disables the computer accounts that do not logon to the domain from 90 days.
Having a lot of disabled computers we would like to optimize also the vertical software that rely in AD.

Powershell modify active directory user account data

Hi mates,
a customer asked me to do a quick operation on his Active Directory.
Practically the needs were :

1. add into a specific group a list of users retrieved from a TXT file
2. retrieve active directory users members from this group
3. for each user modify the description field for future usage maintaning the old value in case it exists

Powershell manage local users and group, nest domain users with domain group and local computer admins

Hi mates,
few months ago one of my customer told me :
"I need to clean a lot of servers in terms of local administrators group. At the sametime I would like to change the method to manage local administrators.....is it possbile to create one group for each single server so I can manage members from AD ?
And what we can do for the current situation ? Is it possible to clean without creating issue ? "
Effectively there were a lot of external partner's account inside these local groups, additionally there were a lot of internal application guys username
Anyway what I needed to do is well explained inside the script.....so enjoy :

Powershell report user list and their expiring date

Hi mates,
how many times you asked to yourself : how can I generate a report regarding active directory expiring users ?
I had, few months ago, the need to search in a specific OU, which users where active or not and which users have the expiration date configured.
This report was used for several purposes : check the status of interim users, consultant, partners and so on.
This report gives you a good visibility of the status of a specific set of users :

Powershell quick clean to resigned users

Hi mates,
how many times you asked to yourself : how can I clean active directory from the group membership perspective ?
How can I clean resigned users ? few months ago we were discussing about the importance of group membership.
Sometimes the group membership could determine how many licenses I'm using for a specific product, how many sessions (Citrix for example) I'm potentially delivering to the end users.
Anyway independently of what is your usage and purpose of it, we were also discussing about to maintain "alive" (or zombified) the resigned users in a specific OU.

Powershell delete active directory user account...a little bit better

Hi mates,
how many times you asked to yourself : how can I delete active directory users ?
How can I do it storing administrative credentials and converting the result in JSON format ?
A friend of mine asked me a simple script to should be executed in a mixed environment : Linux/PHP and Windows.
He has to delete an active directory user account having as a back result, a JSON converted string.
Additionally he asked me to capture eventual errors
Let's see what I've done....quickly :