See all products »
Curah! curation service
Microsoft Tech Companion App
Microsoft Technical Communities
Microsoft Virtual Academy
Server and Tools Blogs
TechNet Flash Newsletter
Cloud and Datacenter
Windows Server 2012 R2
System Center 2012 R2
Microsoft SQL Server 2012 SP1
Windows 8.1 Enterprise
See all trials »
Microsoft Download Center
TechNet Evaluation Center
Microsoft Virtual Academy
Free Windows Server 2012 courses
Free Windows 8 courses
SQL Server training
MCSA: Windows 8
Windows Server Certification (MCSE)
Private Cloud Certification (MCSE)
SQL Server Certification (MCSE)
Second shot for certification
Born To Learn blog
Find technical communities in your area
For small and midsize businesses
For IT professionals
For technical support
For home users
Microsoft Premier Online
Microsoft Fix It Center
Security Bulletins & Advisories
International support solutions
Log a support ticket
Not an IT pro?
Microsoft Customer Support
Microsoft Community Forums
Blog of Microsoft Premier Field Engineer Ashley McGlone featuring PowerShell scripts for Active Directory.
Central Ohio PowerShell Users Group
Heroes To Mentors
powershell web access
Windows Server 2012
Year in Review
Browse by Tags
DNS Zone Copy and Merge with PowerShell
Have you ever wanted to roll up all of your reverse zones into a "big 10" super zone? Do you need to copy DNS zones between environments and preserve the record aging? Today's post is for you. Author’s note: While flying home on a Friday night this blog post was mostly composed...
31 Jul 2014
Oh Snap! Active Directory Attribute Recovery With PowerShell
I will be presenting this content as a session at two conferences this year: PowerShell Summit North America and TechMentor Redmond . I highly recommend both of these events to anyone wanting to grow their IT skills and network with experts in our field. I hope to see you there. The Problem ...
24 Apr 2014
PowerShell to Find Where Your Active Directory Groups Are Used On File Shares
Happy St. Patrick’s Day! Enjoy some PowerShell limericks here . Download today’s script from the TechNet Script Gallery . Where are my AD groups used? Today's post gives you a script to crawl your file shares and document the AD users and groups referenced in NTFS permissions. I’m...
17 Mar 2014
Using PowerShell to Find Stale and Duplicate Active Directory Groups
PowerShell… “My mop!” One of the undisputed greatest movies of all time was UHF in 1989. Stanley Spadowski and his mop were an amazing force for good. He gave us all an important life lesson… “Life is like a mop. Sometimes it gets dirty, and you have to clean it out...
14 Mar 2014
Use PowerShell to Find Windows XP Computers Still Alive in Your Active Directory Domain
PS PSA – PowerShell Public Service Announcement Usually I like to offer deep technical content on the blog, but today I’m going to keep it simple. Everyone should be keenly aware that Windows XP support officially ends on April 8, 2014 . Many companies are migrating from Windows XP...
30 Jan 2014
PowerShell: SID Walker, Texas Ranger (Part 1)
SID Walker First things first: If Chuck Norris wrote a PowerShell script it would be a one-liner, because Chuck Norris can do anything in one strike. Chuck Norris does not have SID history, because there is only one Chuck Norris. Chuck Norris' ACL only has one ACE: Chuck Norris –...
30 Aug 2011
PowerShell Tip: Active Directory Account Unlock Shortcut for Help Desk
Today I posted over on the Hey Scripting Guy blog with a quick tip to unlock Active Directory user accounts . Check it out: Active Directory Account Unlock Shortcut for Help Desk
5 May 2012
Active Directory PowerShell Notes From The Field
PowerShell Saturday 002 Today I have the privilege of speaking at the second-ever PowerShell Saturday event. As a Microsoft Premier Field Engineer I get to meet many customers and help them with their Active Directory and PowerShell needs. I’ve taken some of that experience and wrapped it into...
15 Sep 2012
PowerShell: SID Walker, Texas Ranger (Part 3): Exporting Domain SIDs and Trusts
This post is part three in a series on documenting and remediating SID history in your AD forest. Go back and read part 1 and part 2 if you haven't had a chance yet. In today's episode we will document the domain SIDs so we know from where this latent access originates. Rosetta Stone Many AD admins...
12 Oct 2011
Consolidate All AD Empty Sites Into A Single SiteLink Using PowerShell
Do you have a large Active Directory site topology with many empty sites? If so, this post is for you. Empty sites are AD sites without a domain controller. These sites are used to support AD site-aware applications like SCCM and DFS where clients get local site referrals. Recently I encountered...
11 Feb 2011
AD PowerShell Password Reset Shortcut for Helpdesk
Introduction Back in May I released a post on the Hey Scripting Guy blog showing how to create a shortcut to unlock a user account with a PowerShell desktop shortcut . That post was very popular, and the comments evolved into another shortcut to reset passwords. Due to the popularity and utility of...
26 Nov 2012
DogfoodCon 2012 - Columbus, Ohio
Today I have the privilege of speaking at DogfoodCon 2012 in Columbus, Ohio. My topic is “Active Directory PowerShell Step-By-Step” . This post includes a download of the slide deck and demo scripts for the session. Here are the resource links that I shared today: RSAT Download for...
9 Nov 2012
A Dickens of a DNS Puzzle: How to clean up those stale AD site DNS records (with PowerShell of course)
Typically DNS scavenging takes care of old DNS records, and that is the recommended path of resolution. For those who choose not to use scavenging, this post may be of some assistance. Frequently when I visit customers I find a graveyard down in the DNS tree where stale AD sites live like the ghost...
23 Dec 2010
Everything you need to get started with Group Policy
My last post on getting started with Active Directory was so popular that I thought I would do one for getting started with Group Policy . Once again this link list will satisfy everyone from beginner to advanced. I know there are many other third party resources and books, but I want to surface Microsoft...
9 Jan 2012
Five free ways to script Active Directory in PowerShell: Part 2
The PowerShell Tool Belt For Active Directory This is huge. Today's post includes demo scripts for all five free ways to script Active Directory in PowerShell . I presented these last weekend at the first ever PowerShell Saturday event in Columbus, Ohio . You will also find attached a one hour audio...
14 Mar 2012
How To Remove SID History With PowerShell
Update: To see all articles in this series click here . In the United States we celebrate Thanksgiving tomorrow. No matter where you are in the world let us all give thanks for PowerShell. If Windows were the pumpkin pie, then PowerShell would be the whipped cream on top. If Active Directory were...
23 Nov 2011
Do Over: SID History One-Liner
Wouldn’t you know it. The very same day I posted the SID history script I found a shorter way to do it. I'm calling a "do over". I love the PowerShell.com email tip-of-the-day. On that particular day the tip was how to use the ExpandProperty switch on the Select-Object cmdlet. This was new for...
26 May 2011
TIP: 2 Ways userAccountControl Is Easier In AD PowerShell
Background Anyone who wants to write scripts for Active Directory will eventually run into the famous userAccountControl attribute. Usually this comes up when you are searching for disabled accounts. Actually this attribute is a bit flag for 22 different account settings! You can find them clearly...
13 Dec 2012
Touch-Free PowerShell DCPROMO in Windows Server 2012
DCPROMO Keeping You Up At Night? Do you schedule DCPROMO activities for the weekend? After hours? Middle of the night? I remember those days. Often it was hard to get in the right frame of mind to think through all of the exact procedural steps during those late night change controls. It was always...
18 Apr 2013
PowerShell Saturday 005 Atlanta: It's Time To Part With Blankie: Moving from command line tools to PowerShell for Active Directory
Atlanta-bound I am drafting this post from the airplane as I make my way to Atlanta, Georgia USA for PowerShell Saturday 005 . I am looking forward to spending the weekend with folks who share my passion for PowerShell. I’ll get to reconnect with some Microsoft PFE buddies, and I’ll finally...
26 Oct 2013
Using PowerShell to resolve Token Size issues caused by SID history
Update: To see all articles in this series click here . No matter how bad he wants to an elephant simply cannot drive a Volkswagen. He just won’t fit in that space. People can drive VWs, because that is who the VW was designed to accommodate. There is nothing worse than frustrated elephants...
19 May 2011
PowerShell Active Directory Schema Report
Last year I published a script on the Hey Scripting Guy blog to review the AD schema. This comes in handy when you want a report on the history of schema changes in your forest and the related OIDs. The script lives on the TechNet Script Gallery, and I keep it updated with new product schema versions...
20 Sep 2013
Finally! Copy and merge GPOs! PowerShell saves the day!
The Problem I wish I had this script five years ago. At the time I was searching for a way to combine or merge GPOs, but there simply wasn’t a way to do it. And today there still isn’t a way to do it… until POWERSHELL! Almost every environment I see (including my own former environment...
19 Jan 2011
Free Download: CMD to PowerShell Guide for AD
New Years Resolution Hi folks. It's your friendly, neighborhood PFE again. In order to avoid the long lines to buy a treadmill the first week of January I thought I would save you some time and give you an easier New Years Resolution… Learn PowerShell. It's time to part with "blankie". ...
2 Jan 2013
PowerShell Module for Working with AD SID History Updated
TechReady At Microsoft we have an internal event called TechReady that happens twice each year. It is similar to our public TechEd event. Approximately 5,000 Microsoft technical field people from all over the world gather to learn the details of the latest product releases and dialog with the product...
15 Jun 2012
© 2014 Microsoft Corporation.
Privacy & Cookies