Tag Active Directory

13/02/2023

Get ACL Permissions for a specific OU

By Stephen Hackers in Active Directory, Batch Scripts and PowerShell, Cloud & Datacenter Management, Cyber Security, Microsoft, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell Tag Active Directory, Identify Weakness, Improve Security, Monthly Security Checks, PowerShell, Query, Security

# Get ACL Permissions for a specific OU (Get-ACL "AD:$((Get-ADOrganizationalUnit -Identity 'OU=Computers,DC=Test,DC=LOCAL').distinguishedname)").access | Select IdentityReference,AccessControlType,ActiveDirectoryRights.IsInherited #Other examples available from https://www.easy365manager.com/how-to-document-ou-delegation/ https://shellgeek.com/get-ad-ou-permissions-report/

01/02/2023

Query Active Directory – Security Script

By Stephen Hackers in Active Directory, Batch Scripts and PowerShell, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Server 2016, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell Tag Active Directory, Identify Weakness, Improve Security, Monthly Security Checks, PowerShell, Query, Security

PowerShell script to query active directory : Identify Accounts with Password expiring is disabled Identify Accounts have not logged on for 30 or 90 days and accounts have never logged…

24/04/2020

Office 365 Additional Security, Require MFA to Domain Join Devices in Azure Active Directory

By Steve in Active Directory, Cloud & Datacenter Management, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, Admin Center, Azure, Device Settings, MFA, Windows 10

How to enable the feature to prompt for Multi Factor Authentication when joining a device to an Azure Active Directory domain. We would also like to limit the number of…

24/04/2020

Office 365 – Configure Users To Reset Non-Administrators Passwords

By Steve in Active Directory, Business Applications, Cloud & Datacenter Management, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, Assign, Azure, How to, Office365, Password, Reset, Roles

The support desk will require the function to reset users passwords in your environment. Their is a pre-configured role already available in Office 365. Follow these basic steps to assign…

24/04/2020

Office 365 How To Configure External Collaboration Settings with Domain Restrictions

By Steve in Active Directory, Cloud & Datacenter Management, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, Azure, block guests, block members, Collaboration, Domains, External, invite, Office365, Restrict, Secure, Security, target domains, Users

In Office 365, how do you configure external collaboration settings but restrict certain domains from collaboration. This is all configured under Azure Active Directory Admin Center. A few clicks and…

24/04/2020

How To Register an Application in Your Office 365 Tenancy

By Steve in Business Applications, Enterprise Mobility, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, App, Applications, Azure, Office365, Publish, Register, Registration

Start in Microsoft 365 Admin Centre and browse to Azure Active Directory Browse all services and click "App Registrations" Click "New Registration" Enter application details and URL

23/04/2020

Office 365 Password Protection – Custom Banned Passwords – Greyed Out

By Steve in Active Directory, Enterprise Mobility, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, Azure, Banned, Enterprise Mobility, Greyed Out, Office365, Password, Password List, Passwords, Protection, Unavailable

So you have decided to increase security by adding a banned password list but the option in Azure Active Directory admin center is greyed out. Problem is licensing. This feature…

23/04/2020

In Office 365 Add users automatically to a group based on property

By Steve in Enterprise Mobility, Microsoft, Microsoft Azure, Office 365, Office Apps & Services Tag Active Directory, Azure, Dynamic, Groups, Office365

Dynamic membership rules for groups in Azure Active Directory and automatic licensing. Configured in Azure Active Directory Admin Center. Add New Group Select Dynamic User or Device Example Looks…

11/09/2018

Task : Output A List Of Home Drive Paths Configured In Active Directory

By Steve in Active Directory, DS Commands, Microsoft, Microsoft Server 2016, Microsoft Windows Server 2012, Powershell Tag Active Directory, CSV EXPORT, DSQUERY, Get-ADUser, HOME DRIVE, PowerShell, USER PROPERTIES

#DSQuery dsquery user -name "*" -limit 0 | dsget user -samid -hmdir -hmdrv -profile >c:\temp\usersV2.txt #PowerShell # More flexibility # Includes the state of the computer account (Enable or…

14/08/2018

List all users in the domain and email addresses

By Steve in Microsoft, Microsoft Server 2016, Microsoft Windows 10, Powershell Tag Active Directory, export-csv, Get-ADUser, List Email Addresses, List Users, PowerShell

import-module activedirectory #List all users in the domain # Display Name and Email Address get-aduser -Filter * -SearchBase "dc=Test,dc=com" -Properties Displayname,emailaddress | select displayname ,emailaddress | Export-Csv C:\temp\users_and_email.csv