Accessing Azure Active Directory information via PowerShell
DaleTwo ways to do it, via MSOnline module AzureAD module MSOnline First you start with a connection to Azure AD, via Connect-MsolService Then you can run a number of commands…
Saturday Link Roundup – Kerberos
Some Kerberos items I looked at lately Stopping Active Directory attacks and other post-exploitation behavior with AMSI and machine learning Detecting Kerberoasting Activity Hunting down DES in order to securely…
AGPM has a new End of Life date
And it’s 14th April 2026.In the meantime it will limp along in Extended Support.
Windows 10, Azure AD Join and Password Changes
So we are deploying Workspace One, and our devices are joined to Azure AD. We have found an issue when the user is prompted to change their password. Issue When…
The last time my computer was seen on the network …
was something I wrote about 8 years ago, in Detecting inactive computers in your AD domain. So it was time to update that*. Get-ADComputer -Filter * -Properties Name, LastLogonTimeStamp |…
Getting a list of users in a particular AD Group
Get-ADGroup "<GROUP NAME>" -Properties Member | Select-Object -ExpandProperty Member | Get-ADUSer -properties Displayname,Description,EmailAddress | Select Name,Displayname,Description,EmailAddresswill cause the following to displayName Displayname Description EmailAddress ---- ----------- ----------- ------------ fkjhsd Fred…
Group Policy and WMI Filters–Round 2
This is more of a link dump than anything else. I was asked what I thought of a WMI-related Group Policy change.I don’t much care for them.So I know that…
Assorted Active Directory things
Powershell Getting a list of users in a particular AD Group Getting a list of users in your AD domain via Powershell Getting a list of printers published in an…
So what does the Group Policy Preferences Drive Mapping log file contain?
Once you enable the logging via Group Policy, you’ll end up with a log file which contains: Environment variable dump Group Policy settings Drive mapping lists (but not the actual…
AppLocker and applications which install in the users profile directory.
(shout out to: Google Chrome, Mozilla Firefox and Microsoft's SharePoint Designer) Gee thanks guys. We implemented AppLocker to improve our IT security, and you chaps decided to be clever. The…