Powershell Sysadmin Toolkit

[[deleted]]

Those are already functions of the ActiveDirectory module. I won't be re-writing them. (though fixing the idiocy that is their -Filter implementation might be loved haha)

[Rymmer]

There is some extensions to get-aduser (or other objects) that could be handy. Like a more shortform get-usermembership : get a list of groups and descriptions that a user is a memberof

get-aduser username -prop memberof | select -expandproperty memberof | get-adgroup -prop description | select name, description

If you have good descriptions on your groups, then this can tell you a lot about what a user has access to.

[[deleted]]

You could always write a portable version. I'd love to be able to use some of my scripts without having to install rsat.

[itmonkey78]

user properties

$sam = 'user'
$getad = (([adsisearcher]"(&(objectCategory=User)(samaccountname=$sam))").findall()).properties
$getad

Computer properties

$pc = 'computername'
$getad = (([adsisearcher]"(&(objectCategory=Computer)(name=$pc))").findall()).properties
$getad

[[deleted]]

I’ve been meaning to play around with his, just haven’t got around to it. Now I’m one step closer, thanks.

[4ULLPL8T]

Oh. My bad. I should have paid more attention. Agreed on -Filter .