adaudit

adaudit copied to clipboard

Would it be possible to include a list of all empty groups and the last time they were potentially modified?

ltwarner

Result File

1

Hello Thank you for the work done with this script, would it be possible to have a single result file in HTML format for example Thank you

jboissat

please include a check for GenericAll active directory rights given to all domain users.

sarathkumar21

Hi, There are 2 checks with the Administrator name hardcoded (check if the account has been renamed/replaced) This name depends on your OS language so we can't use the SID...

Cool34000

Get-Acl : The object name has bad syntax

4

I was getting a "Get-Acl : The object name has bad syntax" when the Get-OUPerms function was running. According to [this](https://www.reddit.com/r/PowerShell/comments/ce4f2x/getacl_on_ad_object_bug_in_1809/) reddit post, it's a known issue. I simply changed...

licorsec

Account created dates

3

Hi, thanks for sharing. I was wondering whether you could add something to identify newly created accounts to the effects of: $DateCutOff = (Get-Date).AddDays(-30) Get-ADUser -Filter * -Properties whenCreated |...

flukes86

https://github.com/Dionach/ntdsaudit

phillips321

Hi, I would like to run a AD Audit against a headless (non graphical) Azure AD in my tenancy. I have access to powershell as DA remotely, but was unsure...

Derek000

Useful to list the "Administrators" group for the domain as well These lines have been added throughout the script, although not fully tested yet $script:Administrators = New-Object System.Security.Principal.SecurityIdentifier "S-1-5-32-544" Write-Both...

ltwarner