Active Directory – Page 5

List user member of similar group name

This script enumerate the members of similar group names using wildcards. In this example, the script enumerate members of the group names that contains “Dept”. The search process only a specific OU in Active Directory Script (with Microsoft Active Directory

Active Directory Dashboard

The purpose of this project is to show how to use WMI and Grafana to build an Active Directory dashboard. The Python script uses the linux wmic client you can find here The software requirements are the following : a

Change user CN to match the SamAccountName

These scripts change the CN of the users located in the OU “OU=Users,DC=domain,DC=local” with the SamAccountname value. The first script uses the Microsoft Powershell cmdlets and the second one uses the Quest cmdlets. get-aduser -SearchRoot “OU=Users,DC=domain,DC=local” | % { Rename-ADObject

List user objects and count them

There are several ways to list specific Active Directory objects. I will show you two ways : using the instance of the System.DirectoryServices.DirectoryEntry class or using the powershell cmdlet Get-ADObject $ldapQuery = “(&(objectCategory=user)(objectClass=user))” $de = new-object system.directoryservices.directoryentry $ads = new-object

Active Directory security interesting links

Active Directory security interesting links This is 3 very interesting links/articles about Active Directory and authentication : CredCrack : this is a python script that uses the powershell script Invoke-Mimikatz.ps1. CredCrack is a fast and stealthy credential harvester. It exfiltrates

Change user Active Directory attributes stored in a CSV file

This script change phone number and mobile phone number attributes for users based on a CSV file with the following template : Lastname;Firstname;Username;MobilePhone;Phone Smith;John;jsmith;+33xxxxxxxxx;+33xxxxxxxxx Doe;John;jdoe;+33xxxxxxxxx;+33xxxxxxxxx If you want to use the second script below (with the Quest cmdlets), just remove

Wmic tool to check Active Directory replications

I have written a bash script based on the wmic tool (available here / procedure here) to check the status of the Active Directory replication between my domain controllers. The script performs these steps : list the domain controllers hostname+ip

Set PDC Emulator AnnounceFlag

With this script, you will be able to set the registry AnnounceFlag to “0x5” on each PDC emulator on your forest The script performs these steps : List all PDC emulator on all domains in the current forest Read the

Remove the SIDHistory information

With this script, you will be able to remove the SID History on all user account in a specific Active Directory organizational unit. The script performs the following steps : list the user account in a specific OU retrieve the

Create contacts from CSV

Create contacts from CSV This script create contacts listed in a csv file with this layout : firstname;lastname;email The legacyExchangeDN attribute can be found using the adsiedit tool or going to attribute editor in ADUC (Active Directory Users and Computers)