ActiveDirectoryTools

Author(s)

• Michael Haken

Tags

AD ActiveDirectory Automation

Functions

Import-WmiFiltersFromJson Import-GPOPermissionsFromJson Export-GPOBackupsAndWmiFilters Export-GPOPermissions Import-FullGPOBackups Get-WmiFilter New-StandardGPOWmiFilters New-GPOWmiFilter Set-PDCEmulatorSrvRecords Start-SDProp Set-SDPropSchedule Grant-SPNWriteOnProtectedADObjects Set-ADObjectAcl Get-KerberosDelegationInformation Test-IsEnterpriseAdmin Test-IsEnterpriseOrDomainAdmin Test-IsDomainAdmin ConvertTo-ADObject Get-ADGroupMembershipChangeSummary Get-ADObjectPropertyChangeInfo Get-ADGroupMembershipAddInfo Get-ADPrincipalDetails Get-ADNestedGroupMembership Get-OldADUsers Get-ADUserAccountControl

Dependencies

This module has no dependencies.

Release Notes

*2.0.0.4
Fixed an issue when performing the ConvertTo-ADObject function. Removed the domain from the computer name when the principal was the SYSTEM account.

*2.0.0.3
Removed

*2.0.0.2
I changed the module logic to not Stop on error when trying to import ActiveDirectory and GroupPolicy since other modules that may use this as a dependency and those modules may perform tasks like installing AD, but cannot be imported because this module calls Import-Module ActiveDirectory on load. The specific use case was my ESAE module.

*2.0.0.1
Fixed a problem with the New-StandardGPOWmiFilters cmdlet where the new fitlers were getting added back to the array that was being iterated to create the new filters which resulted in an error.

**V2 Release**

A lot of the cmdlets have been updated to make better re-use of code. Additionally, a number of bugs have been fixed, and overall reliability and extensibility of the cmdlets has been improved. An optional Credential parameter has been added to almost every cmdlet. WMI access has been updated to CIM to support Nano server.

New functions include the ConvertTo-ADObject and Get-ADPrincipalDetails. These functions are used heavily by other cmdlets in this module.

Some functions have been removed, Get-Author, Write-Results, and New-NetworkServiceAccessRuleSet. These were essentially private functions used by other cmdlets and have now been integrated into their logic.

Several functions have been renamed to better represent what they actually do.

Set-AdminSDHolderPermissions -> Grant-SPNWriteOnProtectedADObjects

Get-UserObjectChangedLog -> Get-ADObjectPropertyChangeInfo

Get-WhenMemberAddedToGroup -> Get-ADGroupMembershipAddInfo (this retains an alias to the original)

Get-NestedGroupMembership -> Get-ADNestedGroupMembership

Get-OldUsers -> Get-OldADUsers

Get-GroupMembershipChanges -> Get-ADGroupMembershipChangeSummary

Set-Permissions -> Set-ADObjectAcl