In this guide, you will learn how to disable Active Directory user accounts.  First I will show you how to disable single and multiple user accounts using Active Directory users and computers console. Then I will show you how to disable user accounts by using PowerShell for a single account and multiple accounts from a…

In this guide, I’ll show you how to find nested groups and get nested group membership. First I’ll show you how to get nested group membership using PowerShell. Then I’ll show you the Group Membership report tool that can search all groups, a single group, all groups in an OU, or all users in an…

In this guide, I’ll show you how to remove users from the local administrator group using group policy.  I’ll also show you how to add users or groups into the local administrator group.  By using group policy you can gain control over admin rights and ensure no unwanted account is added into the local administrator…

This page provides a mapping of common Active Directory fields to its LDAP attribute name.  When using Active Directory users and computers you will see the Microsoft provided friendly names. Under the hood of Active Directory these fields are actually using an ldap attribute. You can see the ldap attribute name in the attribute editor. …

In this post you will learn how to find the source of account lockouts in Active Directory. I’ll show you two methods, the first one uses PowerShell and the second is a GUI tool I created that makes it super easy to unlock user accounts and find the lockout source. Users locking their accounts is…

In this guide, I’ll show you how to disable PowerShell with group policy. In addition, I’ll show you how to enabled it for specific users such as administrations while leaving it disabled for all other users. Why Disable PowerShell? PowerShell is often used by malicious actors to spread malware throughout the network. PowerShell is enabled…