Clik here to view.
Group Policy and WMI Filters–Round 2
This is more of a link dump than anything else. I was asked what I thought of a WMI-related Group Policy change. I don’t much care for them. So I know that WMI Filter queries are a bad idea, but...
View ArticleGetting a list of users in a particular AD Group
Get-ADGroup "<GROUP NAME>" -Properties Member | Select-Object -ExpandProperty Member | Get-ADUSer -properties Displayname,Description,EmailAddress | Select...
View ArticleClik here to view.
The last time my computer was seen on the network …
was something I wrote about 8 years ago, in Detecting inactive computers in your AD domain. So it was time to update that*. Get-ADComputer -Filter * -Properties Name, LastLogonTimeStamp | Select-Object...
View ArticleClik here to view.
Windows 10, Azure AD Join and Password Changes
So we are deploying Workspace One, and our devices are joined to Azure AD. We have found an issue when the user is prompted to change their password. IssueWhen the user is prompted to change their...
View ArticleClik here to view.
AGPM has a new End of Life date
And it’s 14th April 2026. In the meantime it will limp along in Extended Support. Related posts: “Index was outside the bounds of the array” error with AGPM Consolidated list of AGPM resources So...
View ArticleSaturday Link Roundup – Kerberos
Some Kerberos items I looked at lately Stopping Active Directory attacks and other post-exploitation behavior with AMSI and machine learning Detecting Kerberoasting Activity Hunting down DES in order...
View ArticleAccessing Azure Active Directory information via PowerShell
Two ways to do it, via MSOnline module AzureAD module MSOnline First you start with a connection to Azure AD, via Connect-MsolService Then you can run a number of commands against Azure AD. Here is a...
View Article“Delete User Profiles Older Than Certain Number of Days” is broken for us in...
We have a number of “shared” workstations. Which are now running out of drive space, because, even though we have enabled the “Delete user profiles older than a specified number days on system...
View Article