Archives

If you’re not sure which Active Directory attributes are actually in use, this post shows how to reverse-engineer your environment with PowerShell so you can build proper governance around object creation.

Trying to work out which Active Directory groups multiple users all share? This post shows you a simple PowerShell method to uncover those common group memberships, without overcomplicating it.

If clients are hitting the wrong domain controller and logons are dragging, this post shows how to uncover the likely root cause by pulling the evidence straight from netlogon logs with PowerShell.

Generative AI can crank out PowerShell fast, but it also invents patterns, bloats simple tasks, and slips in "looks right" mistakes - so here are the practical rules I use to keep the output clean, readable, and reliable.

A practical approach to identifying Group Policy Objects that are truly not used in your environment by checking for unlinked GPOs, missing Apply permissions, and disabled settings.