Monitor and audit Active Directory user and group management

Thu, 12 Oct 2017 15:54:08 +0000

Traceability is key when collaborating in the Active Directory (AD). Multiple admins changing and updating permissions and policies makes it difficult being compliant with the company’s policies. It is important to monitor mutations in the directory. By default audit policies are disabled for Domain Controllers (DC) and must be enabled explicitly. Enabling auditing for the DCs is quite easy, querying the logs for a specific event is a bit more difficult.

In this guide you’ll learn how to enable auditing for a specific case and how to query the audit logs for a specific event.

Get unlinked GPOs with PowerShell

Fri, 06 Oct 2017 10:06:49 +0000

In terms of IT compliance having valid GPOs is essential. They must be update to date and the GPO directory should be free of any unlinked GPOs. Retrieving a list of unlinked GPOs in the management console is impossible. With PowerShell it is quite easy.

Group-Policy on Janik von Rotz

Monitor and audit Active Directory user and group management

Get unlinked GPOs with PowerShell