30
Russell Smith IT consultant, author, and trainer. Most Useful PowerShell Cmdlets for Managing and Securing AD Jeff Melnick Systems Engineer Netwrix Corporation

Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

  • Upload
    others

  • View
    14

  • Download
    1

Embed Size (px)

Citation preview

Page 1: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Russell Smith

IT consultant, author, and trainer.

Most Useful PowerShell Cmdlets for Managing and

Securing AD

Jeff Melnick

Systems EngineerNetwrix Corporation

Page 2: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Managing Active Directory

Page 3: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Active Directory GUI tools

• Active Directory Users and Computers (ADUC)

• Active Directory Administrative Center

• Active Directory Sites and Services

• Group Policy Management Console

Page 4: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Directory Service Command-Line Tools

• dsadd

• dsrm

• dsmod

• dsquery

Page 5: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Active Directory module for Windows PowerShell

• Remote Server Administration Tools (RSAT)

• Active Directory Module for Windows PowerShell

Page 6: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Managing Active Directory

Never use domain controllers for everyday management tasks

Never use privileged domain accounts

Delegate privileges to manage AD

Page 7: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

AD Module for Windows PowerShell

Page 8: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative
Page 9: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative
Page 10: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Users, Groups, and OUs

Page 11: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Create a New User

Page 12: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Create a New User

Page 13: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Create a New Group

Page 14: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Add Users to a Group

Page 15: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Create a New OU

Page 16: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Move Object

Page 17: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Remove Objects

Page 18: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Import Users

Page 19: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Import Users

Page 20: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Search and Track

Page 21: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Search for Locked Out Users

Page 22: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

User Login History

Page 23: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Search for Changes

Page 24: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Demonstration

Netwrix Auditor

Page 25: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Group Membership list, Domain Administrators

Page 26: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Account Lockouts

Historical

Current

Page 27: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

User Logons

Page 28: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

Changes to AD

Page 30: Most Useful PowerShell Cmdlets for Managing and Securing AD · Cmdlets for Managing and Securing AD Jeff Melnick ... Directory Users and Computers (ADUC) •Active Directory Administrative

www. .com

Russell Smith

IT consultant, author, and trainer.

Jeff Melnick

Systems EngineerNetwrix Corporation

Thank You!