Locking out an account after several failed authentication attempts is a common policy in a Microsoft Windows environment. Lockouts happen for a variety of reasons: a user enters the wrong… Read More »Track Down an Account Lockout Source and the Reason with PowerShell

Auditing NTFS folder permissions is critical to data security. In an Active Directory and Windows Server environment, you can run a simple PowerShell script to get an NTFS permissions report… Read More »How to Get an NTFS Permissions Report

An Access Control List (ACL) is a list of permissions assigned to objects in a Microsoft environment. It defines which users have access to folders and files located on file… Read More »How to Get ACL share permissions for Folder

Unauthorized SQL database changes, such as deletions and creations, are always adverse events. Deletions can frustrate users and make them unable to find the information they need. Creations may also… Read More »How to Track SQL Database Changes

Get a SharePoint Permissions Report to Make Sure Each Account Has Appropriate Access to Your Sensitive Data Regular audit of SharePoint permissions is critical for security. Misconfigured or maliciously given… Read More »How to Get a SharePoint Permissions Report

Using a password expiration policy is a best practice that makes it harder for attackers to crack user credentials. Most organizations enforce a password expiration period (for example, 90 days)… Read More »How to Get a List of Users with Password Never Expires

Why It Is Important Improper deletion of a user account can cause serious problems for an organization. Users whose computer accounts have been deleted won’t be able to log into… Read More »How to Detect Who Deleted a Computer Account in Active Directory

Why It Is Important Anyone who has been granted full access permissions to another user’s mailbox can delete or forward emails, change mailbox content and more. These actions can easily… Read More »How to Track Who Gave Full Access Permissions to Exchange Mailbox

Use AD Security Groups in SharePoint Groups, but sometimes adding AD User accounts into SharePoint groups has its advantages. The problem with adding AD user accounts into SharePoint Groups is… Read More »Cleaning up deleted AD accounts from SharePoint groups

Here is a quick PowerShell script to help you query the last logon time for all of your users across all of your domain controllers. It will also save the… Read More »Get Last Logon for All Users Across All Domain Controllers with PowerShell