Auditing NTFS folder permissions is critical to data security. In an Active Directory and Windows Server environment, you can run a simple PowerShell script to get an NTFS permissions report… Read More »How to Get an NTFS Permissions Report
An Access Control List (ACL) is a list of permissions assigned to objects in a Microsoft environment. It defines which users have access to folders and files located on file… Read More »How to Get ACL share permissions for Folder
Unauthorized SQL database changes, such as deletions and creations, are always adverse events. Deletions can frustrate users and make them unable to find the information they need. Creations may also… Read More »How to Track SQL Database Changes
Get a SharePoint Permissions Report to Make Sure Each Account Has Appropriate Access to Your Sensitive Data Regular audit of SharePoint permissions is critical for security. Misconfigured or maliciously given… Read More »How to Get a SharePoint Permissions Report
Using a password expiration policy is a best practice that makes it harder for attackers to crack user credentials. Most organizations enforce a password expiration period (for example, 90 days)… Read More »How to Get a List of Users with Password Never Expires
Why It Is Important Improper deletion of a user account can cause serious problems for an organization. Users whose computer accounts have been deleted won’t be able to log into… Read More »How to Detect Who Deleted a Computer Account in Active Directory
Why It Is Important Anyone who has been granted full access permissions to another user’s mailbox can delete or forward emails, change mailbox content and more. These actions can easily… Read More »How to Track Who Gave Full Access Permissions to Exchange Mailbox
Use AD Security Groups in SharePoint Groups, but sometimes adding AD User accounts into SharePoint groups has its advantages. The problem with adding AD user accounts into SharePoint Groups is… Read More »Cleaning up deleted AD accounts from SharePoint groups
Here is a quick PowerShell script to help you query the last logon time for all of your users across all of your domain controllers. It will also save the… Read More »Get Last Logon for All Users Across All Domain Controllers with PowerShell
One of the things that I find time, and time again, when I join an organisation, is that there is a HUGE multitude of old computer accounts left littering Active… Read More »Cleanup old computer accounts in Active Directory