Auditing Privileged Group Members Across All Domains
A PowerShell script that pulls members of all privileged groups across every domain in your forest.
Posts by Tag
PowerShell
Delegating Domain Join Permissions with Least Privilege
Stop using Domain Admins to join machines. Delegate the exact permissions needed — nothing more.
Who Has Access to Your Servers
Audit local group memberships across your server fleet — because you need to know who has admin and RDP access.
Delegating Permissions in Active Directory
Stop using built-in operator groups. Delegate permissions properly with least privilege.
Fixing Rogue Object Ownership in Active Directory
Object ownership in AD grants implicit WriteDacl — a direct path to privilege escalation. Here’s how to detect and fix it.
Active Directory
Auditing Privileged Group Members Across All Domains
A PowerShell script that pulls members of all privileged groups across every domain in your forest.
Delegating Domain Join Permissions with Least Privilege
Stop using Domain Admins to join machines. Delegate the exact permissions needed — nothing more.
Tracking Changes in Active Directory with KQL
Who changed what, and when? KQL queries for the most common AD change events.
Fixing Rogue Object Ownership in Active Directory
Object ownership in AD grants implicit WriteDacl — a direct path to privilege escalation. Here’s how to detect and fix it.
Security
Auditing Privileged Group Members Across All Domains
A PowerShell script that pulls members of all privileged groups across every domain in your forest.
Tracking Changes in Active Directory with KQL
Who changed what, and when? KQL queries for the most common AD change events.
Who Has Access to Your Servers
Audit local group memberships across your server fleet — because you need to know who has admin and RDP access.
Delegating Permissions in Active Directory
Stop using built-in operator groups. Delegate permissions properly with least privilege.
Least Privilege
Delegating Domain Join Permissions with Least Privilege
Stop using Domain Admins to join machines. Delegate the exact permissions needed — nothing more.
Delegating Permissions in Active Directory
Stop using built-in operator groups. Delegate permissions properly with least privilege.
Fixing Rogue Object Ownership in Active Directory
Object ownership in AD grants implicit WriteDacl — a direct path to privilege escalation. Here’s how to detect and fix it.
KQL
Tracking Changes in Active Directory with KQL
Who changed what, and when? KQL queries for the most common AD change events.