Byte-Size AD Admin Toolkit: 9 PowerShell Scripts for Active Directory

Stop rewriting the same Active Directory one-liners every week. This toolkit gives you 9 tidy, documented PowerShell scripts that handle the chores help desk and sysadmin teams do every week.

What's inside

• Get-StaleADAccounts: find users and computers with no logon in N days, export them to CSV, and optionally disable them
• Get-PasswordExpiryReport: see who's about to get locked out by an expiring password (honors fine-grained policies)
• Get-LockedOutUsers: list locked accounts and see which computer caused the lockout (event 4740 on the PDC), with optional unlock
• Get-PrivilegedGroupAudit: audit Domain/Enterprise/Schema Admins and other built-in admin groups for disabled members, old passwords, never-expiring passwords and stale logons, with an HTML report
• Export-ADUserInventory: a spreadsheet-ready user list with title, department, manager, last logon and OU
• Export-ADGroupMembership: group members (recursive) or a user's groups, ready for access reviews
• New-BulkADUsers: create users from a CSV with validation, duplicate checks, groups and random temporary passwords
• Invoke-UserOffboarding: back up the user's groups, then disable the account, strip the groups, reset the password and move it to a Disabled OU, all in one logged step
• Get-DiskSpaceReport: free-space report across many servers, with low-drive flags and HTML output

Built safe

• Every script that changes something supports -WhatIf and -Confirm
• No accounts or computers are ever deleted; offboarding removes group memberships only after backing them up.
• Comment-based help in every file (Get-Help .\Script.ps1 -Full)
• Parses cleanly and passes PSScriptAnalyzer with zero findings
• Works with Windows PowerShell 5.1 and PowerShell 7+ (needs the RSAT ActiveDirectory module)

Honest note: the scripts were built and linted on a machine without a live domain. Always dry-run with -WhatIf in a test OU first.

License: This toolkit is free. Each admin who uses it should download their own copy. Teams: contact us for a team license. Don't resell or redistribute it.

Not affiliated with or endorsed by Microsoft. Active Directory, PowerShell and Windows are trademarks of Microsoft Corporation.

More from Byte-Size Deals:

Bug Smash

Home Tech Cheat Sheet

Bitstream Blitz

Buffer Burst

Scripts written with AI assistance, then reviewed and linted. Test with -WhatIf first.