Skype for Business
See all products »
Microsoft Tech Companion App
Microsoft Technical Communities
Microsoft Virtual Academy
Server and Tools Blogs
TechNet Flash Newsletter
Cloud and Datacenter
Windows Server 2012 R2
System Center 2012 R2
Microsoft SQL Server 2012 SP1
Windows 8.1 Enterprise
See all trials »
Microsoft Download Center
TechNet Evaluation Center
Microsoft Virtual Academy
Free Windows Server 2012 courses
Free Windows 8 courses
SQL Server training
MCSA: Windows 8
Windows Server Certification (MCSE)
Private Cloud Certification (MCSE)
SQL Server Certification (MCSE)
Second shot for certification
Born To Learn blog
Find technical communities in your area
For small and midsize businesses
For IT professionals
For technical support
For home users
Microsoft Premier Online
Microsoft Fix It Center
Security Bulletins & Advisories
International support solutions
Log a support ticket
Not an IT pro?
Microsoft Customer Support
Microsoft Community Forums
Blog of Microsoft Premier Field Engineer Ashley McGlone featuring PowerShell scripts for Active Directory.
Central Ohio PowerShell Users Group
Desired State Configuration
Microsoft Virtual Academy
PowerShell User Group
powershell web access
Six Million Dollar Man
Windows Server 2012
Browse by Tags
Forensics: Automating Active Directory Account Lockout Search with PowerShell (an example of deep XML filtering of event logs across multiple servers in parallel)
Overview Today we learn how to efficiently filter event log queries, going beyond simple event ID filtering into the specific values of the XML message data. Then we will run this filter against multiple servers in parallel for faster data collection. This posts meets the following objectives:...
1 Sep 2015
Let's meet up in North Carolina Monday evening (8/10)
This is a quick announcement that I'll be in Raleigh/Durham, North Carolina this coming Monday night, August 10th. I'll be speaking on one of my favorite topics (Active Directory PowerShell) at the Research Triangle PowerShell User Group . Find out more information here . Hope to see you there...
4 Aug 2015
Configuring Active Directory with PowerShell DSC and the New xADRecycleBin Resource
Active Directory and PowerShell DSC Today’s post is the second in a series on using PowerShell DSC with Active Directory . We will demonstrate configuring the AD Recycle Bin and domain trusts with PowerShell Desired State Configuration. As a bonus we will throw in a registry key for some special...
15 Jul 2015
UPDATED: Copy and Merge Group Policies (GPOs) with PowerShell
GPO Consolidation Redux Do you have Group Policies gone wild? Did you realize too late that it might not be such a good idea to delegate GPO creation to half the IT department? Have you wanted to combine multiple policies into one for simplicity? This blog post is for you. One of my most popular...
11 Jun 2015
Deploy Active Directory with PowerShell DSC (a.k.a. “DSC-PROMO”)
Active Directory and PowerShell DSC Today’s post is the first in a series on using PowerShell DSC with Active Directory . I don’t know how many blog posts there will be. I haven’t written them yet. What I can tell you, is that I have a load of fun scripts to share. Today we will...
20 Mar 2015
Forensics: Audit Group Policy Links and Changes with PowerShell
Honorary Scripting Guy I would like to thank Ed and Teresa Wilson, the Microsoft Scripting Guy and the Scripting Wife, for bestowing upon me the title of Honorary Scripting Guy . This was a humbling surprise. It has been a joy to share my scripting passion with the community, and I will continue to...
26 Jan 2015
Forensics: Monitor Active Directory Privileged Groups with PowerShell
Someone just now added Jimmy to the Domain Admins group! How do I know? Because I used PowerShell to check. Let me show you how. Some of the best customers that I visit get email pages when high value group memberships change. Obviously this is strongly encouraged for IT shops of any size. Of course...
17 Dec 2014
Active Directory Week on the Hey Scripting Guy Blog and Free AD PowerShell Videos at Microsoft Virtual Academy
Hello, everyone. Today I have a short post with some helpful links to share. If you are in the US, I hope you have a good Thanksgiving holiday week and not too much after-hours support. Spending time with family is refreshing for me at the holidays. Hey Scripting Guy Blog - Active Directory Week ...
26 Nov 2014
Microsoft Virtual Academy: Using PowerShell for Active Directory
Welcome! Today’s post includes demo scripts and links from the Microsoft Virtual Academy series: Using PowerShell for Active Directory . Go watch the videos here . We had a great time creating this for you, and I hope you will share it with anyone needing to ramp up their AD PowerShell skills....
29 Oct 2014
See GoateePFE Live or On-Demand Talking about Active Directory PowerShell
Whew. This has been a busy season for speaking, blogging, and recording. I’ve spent more time on airplanes than in my office at home for the last few months. It’s all good, and I want to share it with you. Here are some places you can find me online, on stage, and on camera… ...
16 Oct 2014
PowerShell Module for Active Directory SID History Now Faster
It has been a while since I’ve released any updates to the Active Directory SID History PowerShell Module . Today’s release leverages improvements in PowerShell v3.0 for faster and better results. “We can rebuild him. We have the technology.” Before Stone Cold Steve Austin...
5 Sep 2014
DNS Server and Zone Reporting with PowerShell
Who-Is On First? While working on DNS automation for a customer recently I needed some quick scripts to inventory Active Directory-integrated DNS server and zone configurations . All too often the way we think things are configured does not match reality. Are the forwarders consistent and correct...
1 Aug 2014
DNS Zone Copy and Merge with PowerShell
Have you ever wanted to roll up all of your reverse zones into a "big 10" super zone? Do you need to copy DNS zones between environments and preserve the record aging? Today's post is for you. Author’s note: While flying home on a Friday night this blog post was mostly composed...
31 Jul 2014
The GoateePFE Active Directory PowerShell Link Fest
Summer Time! Hi folks. It’s vacation time, so I’m going to keep it short today. This summer I am taking my family to Seattle on vacation. I’ve been there more times that I can count, but this time the family will get to see all of the sights for themselves rather than looking at...
18 Jun 2014
Oh Snap! Active Directory Attribute Recovery With PowerShell
The Problem Have you ever had to repopulate a batch of corrupted attributes for a large set of Active Directory objects ? (Think Exchange or Lync, for example.) The Active Directory Recycle Bin is great for recovering deleted objects, but it will not help with corrupted objects. Authoritative restore...
24 Apr 2014
PowerShell to Find Where Your Active Directory Groups Are Used On File Shares
Happy St. Patrick’s Day! Enjoy some PowerShell limericks here . Download today’s script from the TechNet Script Gallery . Where are my AD groups used? Today's post gives you a script to crawl your file shares and document the AD users and groups referenced in NTFS permissions. I’m...
17 Mar 2014
Using PowerShell to Find Stale and Duplicate Active Directory Groups
PowerShell… “My mop!” One of the undisputed greatest movies of all time was UHF in 1989. Stanley Spadowski and his mop were an amazing force for good. He gave us all an important life lesson… “Life is like a mop. Sometimes it gets dirty, and you have to clean it out...
14 Mar 2014
Use PowerShell to Find Windows XP Computers Still Alive in Your Active Directory Domain
PS PSA – PowerShell Public Service Announcement Usually I like to offer deep technical content on the blog, but today I’m going to keep it simple. Everyone should be keenly aware that Windows XP support officially ends on April 8, 2014 . Many companies are migrating from Windows XP...
30 Jan 2014
Back To The Future: Working with date data types in Active Directory PowerShell
Crazy Dates Set your watch for January 1, 1601, Marty. Today we’re working with crazy dates in Active Directory PowerShell. If you have ever tried to script out Active Directory reports that included date fields, then you have likely run into this challenge. There are “real” dates...
20 Dec 2013
PowerShell Tip: Active Directory Account Unlock Shortcut for Help Desk
Today I posted over on the Hey Scripting Guy blog with a quick tip to unlock Active Directory user accounts . Check it out: Active Directory Account Unlock Shortcut for Help Desk
5 May 2012
Active Directory PowerShell Notes From The Field
PowerShell Saturday 002 Today I have the privilege of speaking at the second-ever PowerShell Saturday event. As a Microsoft Premier Field Engineer I get to meet many customers and help them with their Active Directory and PowerShell needs. I’ve taken some of that experience and wrapped it into...
15 Sep 2012
PowerShell: SID Walker, Texas Ranger (Part 3): Exporting Domain SIDs and Trusts
This post is part three in a series on documenting and remediating SID history in your AD forest. Go back and read part 1 and part 2 if you haven't had a chance yet. In today's episode we will document the domain SIDs so we know from where this latent access originates. Rosetta Stone Many AD admins...
12 Oct 2011
PowerShell: SID Walker, Texas Ranger (Part 1)
SID Walker First things first: If Chuck Norris wrote a PowerShell script it would be a one-liner, because Chuck Norris can do anything in one strike. Chuck Norris does not have SID history, because there is only one Chuck Norris. Chuck Norris' ACL only has one ACE: Chuck Norris –...
30 Aug 2011
AD PowerShell Password Reset Shortcut for Helpdesk
Introduction Back in May I released a post on the Hey Scripting Guy blog showing how to create a shortcut to unlock a user account with a PowerShell desktop shortcut . That post was very popular, and the comments evolved into another shortcut to reset passwords. Due to the popularity and utility of...
26 Nov 2012
DogfoodCon 2012 - Columbus, Ohio
Today I have the privilege of speaking at DogfoodCon 2012 in Columbus, Ohio. My topic is “Active Directory PowerShell Step-By-Step” . This post includes a download of the slide deck and demo scripts for the session. Here are the resource links that I shared today: RSAT Download for...
9 Nov 2012
© 2015 Microsoft Corporation.
Privacy & Cookies