Tuesday, December 13, 2016

Powershell: User Accounts With Kerberos Pre-Authentication Disabled

Use the following Powershell command:

Get-ADUser -Filter 'useraccountcontrol -band 4194304' -Properties useraccountcontrol | Out-GridView

Get a list of ALL the GP names and GUIDS

Just change: DC=yourdomin,DC=com to your domain name.

Dsquery * "CN=Policies,CN=System,DC=yourdomin,DC=com" -filter (objectClass=groupPolicyContainer) -attr Name DisplayName

Friday, December 2, 2016

Powershell Get Windows 2003 or earlier Computer Objects Found in Active Directory

Use the following Powershell syntax to determine the affected computers in your domain:
Get-ADComputer -Filter * -Property Name,OperatingSystem,OperatingSystemServicePack| Where-Object{($_.operatingsystem -like "*XP*") -or ($_.operatingsystem -like "*2000*") -or ($_.operatingsystem -like "*2003*") -or ($_.operatingsystemversion -like "*4.0*")}| Out-GridView

The output will be shown in a grid view.