With this script, you will be able to create a GUID hashtable for the schema classes, attributes and extended rights. It can be very useful in case of troubleshooting. You probably already see this kind of event in the security

With this script, you will be able to monitor the user object status in the Active Directory. The script performs these steps set the domain controller list : one dc per domain you want to retrieve the informations create an

You can use this script if you want to count the object types in the Active Directory forest. The script performs these steps: list the domain name in the current Active Directory forest get the Active Directory forest level mode

This script set the correct security rights on an organizational unit to delegate the Reset password permission for a specific group. In this script I will use the following informations : – Authorize the group “Helpdesk_grp” to reset passwords –

This script set the correct security rights on an organizational unit to delegate the Unlock user account permission for a specific group. In this script I will use the following informations : – Authorize the group “Helpdesk_grp” to unlock the

The following little scripts will allow you to play and take your first steps with the Active Directory object SID Resolve object SID to username $objSID = New-Object System.Security.Principal.SecurityIdentifier(“S-1-5-21-123456789-1234567890-123456789-12345”) $objUser = $objSID.Translate( [System.Security.Principal.NTAccount]) $objUser.Value Get the SID of a username

The purpose of this script is to enumerate all users that not belong to group names containing a specific pattern. The output shows samAccountName and email address. The test of the attribute “$user.memberof” has been added because when this attribute

With this script, you will be able to get a list of inactive user accounts in Active Directory. There are two examples : one of them use the Microsoft Active Directory cmdlets and the other uses the Quest one. Script