pwsh..GPO Perms

Building a report Don’t forget you need the GroupPolicy module installed. That will come from RSAT. set a variable to capture all GPO info Use this to get the access rights Script from Easy365Manager – another most excellent site


This shows copying from local to a domain sysvol to update the policy store. But really it is just an example of copying local to remote. NOTE: Since this references copying into the domain sysvol you MUST perform this as a domain or enterprise admin. If you can copy to sysvol without those creds you … Read more

pwsh..Az Login

AzureCLI Endpoints when behind a proxy To Login login to gcch by setting the cloud type first Then login: Welcome to Azure CLI! – always good to see Use az -h to see available commands or go to Welcome to the cool new Azure CLI! – Everything below is a dump from the terminal … Read more


Checking AD group for users that are enabled: Checking AD group for users that are disabled: Copy users from one group to another – Excellent site with, well excellent information. And aren’t most admins lazy? That’s why scripting is so important to us.

pwsh..AD Account Searches

Attributes Converting Manager attribute to show the manager’s email address. Contractors & Admins Searching for contractors based on a list of users provided. Filtering on Surname, DisplayName having (Contr) in it, and making sure they are enabled Disabled Accounts Searching for accounts that have been disabled and left in an OU LockedOut Accounts

pwsh..AD Account Disable/Enable/Lock

Disable Search for an account with name bobdob found only in a given OU and disable Disable, but make sure it’s the correct account From a CSV file Inactive Users NOTE: Active Directory synchronizes the LastLogOnDate attribute, results returned when specifying the –AccountInactive parameter with the Search-ADAccount cmdlet can be inaccurate by as much as … Read more