See all products »
Curah! curation service
Microsoft Tech Companion App
Microsoft Technical Communities
Microsoft Virtual Academy
Server and Tools Blogs
TechNet Flash Newsletter
Cloud and Datacenter
Windows Server 2012 R2
System Center 2012 R2
Microsoft SQL Server 2012 SP1
Windows 8.1 Enterprise
See all trials »
Microsoft Download Center
TechNet Evaluation Center
Microsoft Virtual Academy
Free Windows Server 2012 courses
Free Windows 8 courses
SQL Server training
MCSA: Windows 8
Windows Server Certification (MCSE)
Private Cloud Certification (MCSE)
SQL Server Certification (MCSE)
Second shot for certification
Born To Learn blog
Find technical communities in your area
For small and midsize businesses
For IT professionals
For technical support
For home users
Microsoft Premier Online
Microsoft Fix It Center
Security Bulletins & Advisories
International support solutions
Log a support ticket
Not an IT pro?
Microsoft Customer Support
Microsoft Community Forums
Blog of Microsoft Premier Field Engineer Ashley McGlone featuring PowerShell scripts for Active Directory.
Central Ohio PowerShell Users Group
Desired State Configuration
Microsoft Virtual Academy
powershell web access
Six Million Dollar Man
Windows Server 2012
Year in Review
Browse by Tags
Deploy Active Directory with PowerShell DSC (a.k.a. “DSC-PROMO”)
Active Directory and PowerShell DSC Today’s post is the first in a series on using PowerShell DSC with Active Directory . I don’t know how many blog posts there will be. I haven’t written them yet. What I can tell you, is that I have a load of fun scripts to share. Today we will...
20 Mar 2015
Forensics: Audit Group Policy Links and Changes with PowerShell
Honorary Scripting Guy I would like to thank Ed and Teresa Wilson, the Microsoft Scripting Guy and the Scripting Wife, for bestowing upon me the title of Honorary Scripting Guy . This was a humbling surprise. It has been a joy to share my scripting passion with the community, and I will continue to...
26 Jan 2015
Forensics: Monitor Active Directory Privileged Groups with PowerShell
Someone just now added Jimmy to the Domain Admins group! How do I know? Because I used PowerShell to check. Let me show you how. Some of the best customers that I visit get email pages when high value group memberships change. Obviously this is strongly encouraged for IT shops of any size. Of course...
17 Dec 2014
Active Directory Week on the Hey Scripting Guy Blog and Free AD PowerShell Videos at Microsoft Virtual Academy
Hello, everyone. Today I have a short post with some helpful links to share. If you are in the US, I hope you have a good Thanksgiving holiday week and not too much after-hours support. Spending time with family is refreshing for me at the holidays. Hey Scripting Guy Blog - Active Directory Week ...
26 Nov 2014
Microsoft Virtual Academy: Using PowerShell for Active Directory
Welcome! Today’s post includes demo scripts and links from the Microsoft Virtual Academy series: Using PowerShell for Active Directory . Go watch the videos here . We had a great time creating this for you, and I hope you will share it with anyone needing to ramp up their AD PowerShell skills....
29 Oct 2014
See GoateePFE Live or On-Demand Talking about Active Directory PowerShell
Whew. This has been a busy season for speaking, blogging, and recording. I’ve spent more time on airplanes than in my office at home for the last few months. It’s all good, and I want to share it with you. Here are some places you can find me online, on stage, and on camera… ...
16 Oct 2014
PowerShell Module for Active Directory SID History Now Faster
It has been a while since I’ve released any updates to the Active Directory SID History PowerShell Module . Today’s release leverages improvements in PowerShell v3.0 for faster and better results. “We can rebuild him. We have the technology.” Before Stone Cold Steve Austin...
5 Sep 2014
DNS Server and Zone Reporting with PowerShell
Who-Is On First? While working on DNS automation for a customer recently I needed some quick scripts to inventory Active Directory-integrated DNS server and zone configurations . All too often the way we think things are configured does not match reality. Are the forwarders consistent and correct...
1 Aug 2014
DNS Zone Copy and Merge with PowerShell
Have you ever wanted to roll up all of your reverse zones into a "big 10" super zone? Do you need to copy DNS zones between environments and preserve the record aging? Today's post is for you. Author’s note: While flying home on a Friday night this blog post was mostly composed...
31 Jul 2014
The GoateePFE Active Directory PowerShell Link Fest
Summer Time! Hi folks. It’s vacation time, so I’m going to keep it short today. This summer I am taking my family to Seattle on vacation. I’ve been there more times that I can count, but this time the family will get to see all of the sights for themselves rather than looking at...
18 Jun 2014
Oh Snap! Active Directory Attribute Recovery With PowerShell
The Problem Have you ever had to repopulate a batch of corrupted attributes for a large set of Active Directory objects ? (Think Exchange or Lync, for example.) The Active Directory Recycle Bin is great for recovering deleted objects, but it will not help with corrupted objects. Authoritative restore...
24 Apr 2014
PowerShell to Find Where Your Active Directory Groups Are Used On File Shares
Happy St. Patrick’s Day! Enjoy some PowerShell limericks here . Download today’s script from the TechNet Script Gallery . Where are my AD groups used? Today's post gives you a script to crawl your file shares and document the AD users and groups referenced in NTFS permissions. I’m...
17 Mar 2014
Using PowerShell to Find Stale and Duplicate Active Directory Groups
PowerShell… “My mop!” One of the undisputed greatest movies of all time was UHF in 1989. Stanley Spadowski and his mop were an amazing force for good. He gave us all an important life lesson… “Life is like a mop. Sometimes it gets dirty, and you have to clean it out...
14 Mar 2014
Use PowerShell to Find Windows XP Computers Still Alive in Your Active Directory Domain
PS PSA – PowerShell Public Service Announcement Usually I like to offer deep technical content on the blog, but today I’m going to keep it simple. Everyone should be keenly aware that Windows XP support officially ends on April 8, 2014 . Many companies are migrating from Windows XP...
30 Jan 2014
Back To The Future: Working with date data types in Active Directory PowerShell
Crazy Dates Set your watch for January 1, 1601, Marty. Today we’re working with crazy dates in Active Directory PowerShell. If you have ever tried to script out Active Directory reports that included date fields, then you have likely run into this challenge. There are “real” dates...
20 Dec 2013
PowerShell Tip: Active Directory Account Unlock Shortcut for Help Desk
Today I posted over on the Hey Scripting Guy blog with a quick tip to unlock Active Directory user accounts . Check it out: Active Directory Account Unlock Shortcut for Help Desk
5 May 2012
Active Directory PowerShell Notes From The Field
PowerShell Saturday 002 Today I have the privilege of speaking at the second-ever PowerShell Saturday event. As a Microsoft Premier Field Engineer I get to meet many customers and help them with their Active Directory and PowerShell needs. I’ve taken some of that experience and wrapped it into...
15 Sep 2012
PowerShell: SID Walker, Texas Ranger (Part 3): Exporting Domain SIDs and Trusts
This post is part three in a series on documenting and remediating SID history in your AD forest. Go back and read part 1 and part 2 if you haven't had a chance yet. In today's episode we will document the domain SIDs so we know from where this latent access originates. Rosetta Stone Many AD admins...
12 Oct 2011
Free Download: CMD to PowerShell Guide for AD
New Years Resolution Hi folks. It's your friendly, neighborhood PFE again. In order to avoid the long lines to buy a treadmill the first week of January I thought I would save you some time and give you an easier New Years Resolution… Learn PowerShell. It's time to part with "blankie". ...
2 Jan 2013
PowerShell Module for Working with AD SID History Updated
TechReady At Microsoft we have an internal event called TechReady that happens twice each year. It is similar to our public TechEd event. Approximately 5,000 Microsoft technical field people from all over the world gather to learn the details of the latest product releases and dialog with the product...
15 Jun 2012
Dude, where’s my GPO? Using PowerShell to find all of your Group Policy links.
Stratego I only played Stratego once as a kid when I was over at a friend’s house. Strategy, challenge and mystery made the game captivating. A few years ago I bought a vintage 1961 edition on eBay so I could teach my sons to play. As it turns out this game has been around for centuries among...
29 May 2013
Everything you need to get started with Group Policy
My last post on getting started with Active Directory was so popular that I thought I would do one for getting started with Group Policy . Once again this link list will satisfy everyone from beginner to advanced. I know there are many other third party resources and books, but I want to surface Microsoft...
9 Jan 2012
Five free ways to script Active Directory in PowerShell: Part 2
The PowerShell Tool Belt For Active Directory This is huge. Today's post includes demo scripts for all five free ways to script Active Directory in PowerShell . I presented these last weekend at the first ever PowerShell Saturday event in Columbus, Ohio . You will also find attached a one hour audio...
14 Mar 2012
How To Remove SID History With PowerShell
Update: To see all articles in this series click here . In the United States we celebrate Thanksgiving tomorrow. No matter where you are in the world let us all give thanks for PowerShell. If Windows were the pumpkin pie, then PowerShell would be the whipped cream on top. If Active Directory were...
23 Nov 2011
TIP: 2 Ways userAccountControl Is Easier In AD PowerShell
Background Anyone who wants to write scripts for Active Directory will eventually run into the famous userAccountControl attribute. Usually this comes up when you are searching for disabled accounts. Actually this attribute is a bit flag for 22 different account settings! You can find them clearly...
13 Dec 2012
© 2015 Microsoft Corporation.
Privacy & Cookies