COMMAND EVERYTHING.
Practical commands. Clear explanations. Authoritative sources.
2557 published commands · 2545 documentation-verified · 12 awaiting review · Ask Cmdlet AI
List configured authentication policies before reviewing sign-in restrictions.
Get-ADAuthenticationPolicy [-AuthType <ADAuthType>] [-Credential <PSCredential>]
-Filter <String> [-Properties <String[]>] [-ResultPageSize <Int32>]
[-ResultSetSize <Int32>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryInventory authentication policy silos during a privileged identity configuration review.
Get-ADAuthenticationPolicySilo [-AuthType <ADAuthType>] [-Credential <PSCredential>]
-Filter <String> [-Properties <String[]>] [-ResultPageSize <Int32>]
[-ResultSetSize <Int32>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryRetrieves central access policies from Active Directory.
Get-ADCentralAccessPolicy [-AuthType <ADAuthType>] [-Credential <PSCredential>]
-Filter <String> [-Properties <String[]>] [-ResultPageSize <Int32>]
[-ResultSetSize <Int32>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryRetrieves central access rules from Active Directory.
Get-ADCentralAccessRule [-AuthType <ADAuthType>] [-Credential <PSCredential>]
-Filter <String> [-Properties <String[]>] [-ResultPageSize <Int32>]
[-ResultSetSize <Int32>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryReturns one or more Active Directory claim transform objects based on a specified filter.
Get-ADClaimTransformPolicy [-AuthType <ADAuthType>] [-Credential <PSCredential>]
-Filter <String> [-Properties <String[]>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryReturns a claim type from Active Directory.
Get-ADClaimType [-AuthType <ADAuthType>] [-Credential <PSCredential>] -Filter <String> [-Properties <String[]>]
[-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryFind enabled computer accounts before reviewing the systems that can authenticate to a domain.
Get-ADComputer [-AuthType <ADAuthType>] [-Credential <PSCredential>]
-Filter <String> [-Properties <String[]>] [-ResultPageSize <Int32>]
[-ResultSetSize <Int32>] [-SearchBase <String>] [-SearchScope <ADSearchScope>]
[-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryGets the service accounts hosted by a computer.
Get-ADComputerServiceAccount [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Identity] <ADComputer>
[-Partition <String>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryGets a list of installed programs and services present on this domain controller that are not in the default or user defined inclusion list.
Get-ADDCCloningExcludedApplicationList [<CommonParameters>]Copied 0 timesActive DirectoryReview the default domain password policy during a security configuration audit.
Get-ADDefaultDomainPasswordPolicy [-AuthType <ADAuthType>] [-Credential <PSCredential>]
[[-Current] <ADCurrentDomainType>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryInspect the current domain configuration before planning directory maintenance.
Get-ADDomain [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Current <ADCurrentDomainType>]
[-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryList domain controllers when reviewing directory service placement.
Get-ADDomainController [-AuthType <ADAuthType>] [-Credential <PSCredential>] [[-Identity] <ADDomainController>]
[-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryInventory fine-grained password policies before comparing account requirements.
Get-ADFineGrainedPasswordPolicy [-AuthType <ADAuthType>] [-Credential <PSCredential>] -Filter <String>
[-Properties <String[]>] [-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-SearchBase <String>]
[-SearchScope <ADSearchScope>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryInspect forest-level metadata to understand the directory boundary.
Get-ADForest [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Current <ADCurrentForestType>]
[-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryLocate security groups when reviewing directory-based authorization.
Get-ADGroup [-AuthType <ADAuthType>] [-Credential <PSCredential>] -Filter <String> [-Properties <String[]>]
[-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-SearchBase <String>] [-SearchScope <ADSearchScope>]
[-Server <String>] [-ShowMemberTimeToLive] [<CommonParameters>]Copied 0 timesActive DirectoryInspect the direct membership of a named directory group.
Get-ADGroupMember [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Identity] <ADGroup>
[-Partition <String>] [-Recursive] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryInspect optional directory features before planning a feature enablement change.
Get-ADOptionalFeature [-AuthType <ADAuthType>] [-Credential <PSCredential>] -Filter <String>
[-Properties <String[]>] [-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-SearchBase <String>]
[-SearchScope <ADSearchScope>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryInventory organizational units before selecting a search base for an administrative report.
Get-ADOrganizationalUnit [-AuthType <ADAuthType>] [-Credential <PSCredential>] -Filter <String>
[-Properties <String[]>] [-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-SearchBase <String>]
[-SearchScope <ADSearchScope>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryReview group memberships for a directory principal during an access investigation.
Get-ADPrincipalGroupMembership [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Identity] <ADPrincipal>
[-Partition <String>] [-ResourceContextPartition <String>] [-ResourceContextServer <String>]
[-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryGets the replication metadata for one or more Active Directory replication partners.
Get-ADReplicationAttributeMetadata [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Filter <String>]
[-IncludeDeletedObjects] [-Object] <ADObject> [[-Properties] <String[]>] [-Server] <String>
[-ShowAllLinkedValues] [<CommonParameters>]Copied 0 timesActive DirectoryInspect directory replication connection objects during topology analysis.
Get-ADReplicationConnection [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Filter <String>]
[-Properties <String[]>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryInspect recorded replication failures for one domain controller.
Get-ADReplicationFailure [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-EnumeratingServer <String>]
[-Filter <String>] [-Target] <Object[]> [<CommonParameters>]Copied 0 timesActive DirectoryInspect replication partner metadata for a selected domain controller.
Get-ADReplicationPartnerMetadata [-AuthType <ADAuthType>] [-Credential <PSCredential>]
[-EnumerationServer <String>] [-Filter <String>] [[-Partition] <String[]>] [[-PartnerType] <ADPartnerType>]
[-Target] <Object[]> [<CommonParameters>]Copied 0 timesActive DirectoryInspect queued directory replication operations on a selected controller.
Get-ADReplicationQueueOperation [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Server] <String>
[-Filter <String>] [[-Partition] <String[]>] [<CommonParameters>]Copied 0 times