Active_Directory_Scripts
Active_Directory_Scripts copied to clipboard
chadmcox
Making my local storage of useful AD Scripts available to everyone.
It seems FindandFixADObjectswithStaleAdminSDHolder.ps1 only identifies the default set of admin groups and ignores recursive groups that are nested within. As a result, the resulting output file for valid privileged members...
Every group in $default_admin_groups are queried via Get-ADGroup for every flagged object in the domain. As a result, with large numbers of admin groups and/or flagged objects, this can take...
As it says in the title, wouldn't it be good for the findandfix script to also re-enable inheritance?
There is a problem with FindandFixADObjectswithStaleAdminSDHolder.ps1 that results in ALL users...even those with current membership in protected groups...having adminCount=1 cleared. When I run FindandFixADObjectswithStaleAdminSDHolder.ps1 on Windows Server 2019 standard in...
What is the ADROOT account living in RootDSE? This powershell script was able to find it but when I browse RootDSE using ADSI Edit I can't see it but I...
