François-Xavier Cat

Add the possibility to filter out the Computer(s) to search

Performance - Using PropertiesToLoad

2

Look at implementing PropertiesToLoad on classes such as: - System.DirectoryServices.AccountManagement.GroupPrincipal - System.DirectoryServices.AccountManagement.UserPrincipal - System.DirectoryServices.AccountManagement.ComputerPrincipal The default set of properties retrieve from AD for each object is around 25 properties. Might...

See example: https://github.com/lazywinadmin/AdsiPS/blob/master/src/public/Get-ADSIFineGrainedPasswordPolicy.ps1#L72-L74

Review LDAP lookup using SID, GUID, DN

2

Interesting tweet from Mathias: https://twitter.com/IISResetMe/status/1116344879624392704 > Your periodic reminder that the ADSI LDAP provider supports any distinguished name value (not just the actual DN) in its path when binding to...

New Feature - Compare Accounts (group memberships mostly, possibly other types...)

9

It would be nice to be able to compare accounts to detect missing group membership for examples

Create any type of object

Modify any object inside Active Directory

We should look at implementing this into the module. `Get-ADDomainController` provides a property called `isReadOnly`. See (Thanks @MickyBalladelli ): * https://stackoverflow.com/questions/977075/detect-read-only-domain-controller-with-net * https://docs.microsoft.com/en-us/windows/device-security/auditing/event-4741 This info is also available using `nltest...

Set-ADSIUser and Credential

1

Seems the Credential parameter is not used properly, the context seems off. Look for other function using `System.DirectoryServices.DirectorySearcher` to correct it I'll fix this soon unless someone has time to...