Cleanup your Group Policies with Powershell

You will find in this post two little scripts to help you on cleaning your unused Group Policies (GPO). The first script will help you to identify the GPO linked to an OU but with a disabled link. The second…

Citrix Receiver version live status

This script or rather these two command lines will output interesting information. In the current situation, the table will have two columns : one for the version number of the Citrix Receiver and another for the version count number. Like…

List installed certificate properties on remote computers

I have written this script to list the installed certificates on remote computers. The script lists first the computer accounts that match a specific OS type. Currently, the computer account in the Active Directory domain that have a “Server” operating…

Automatic HTTPS WinRM Listener creation

In this post I will show you how to create a HTTPS WinRM listener that is using a certificate issued by your own MS PKI. The requirements are the following: – An Active Directory domain – An Enterprise MS PKI…

Create a self-signed certificate on Windows server

If you don’t have your own PKI and just want to perform some tests on a specific application or OS feature, you will probably need to generate a self-signed certificate. You can easily achieve this on Windows server without any…

Active Directory Functional Domain level check

This script will help you to check the Active Directory domain functional level. First the script asks for the domain name (fqdn). Then, the domain controllers names of this domain are queried to get the value of the AD attribute…

Get the Active Directory functional levels/FSMO roles forest wide

Description With the following script, it is possible in the same array to get useful Active Directory informations such as: domain names (DNS fqdn) domain functional level forest functional level fsmo roles The powershell cmdlets used for this script are…

List duplicated valid certificates on a MS PKI version 3

Description One more version of the script provided some weeks ago. This is a minor update but it can be helpful. In that version, the duplicated valid certificates are listed and two options are shown : keep or revoke. It…

List duplicated valid certificates on a MS PKI version 2

Description I have written another version of the script provided some weeks ago. This new version is looking for duplicated valid certificates based on both CommonName and Certificate template. The first version checked only the CommonName. All of this cmdlets…

Microsoft PKI: revoke expired certificates

Microsoft PKI: revoke expired certificates Description I have written the script below to cleanup the CA database by revoking the expired certificates. First, the script performs three checks and then revoke the expired certificates: a valid certificate for the same…