AD Health & Security Audit

Description

Most Active Directory environments accumulate the same problems over time — accounts nobody remembered to disable, admin group membership nobody’s reviewed in years, password policy settings nobody’s revisited since they were first set. AD Health & Security Audit is a PowerShell tool that scans your domain and turns those problems into a single, clear, interactive HTML report.

What it checks: stale user and computer accounts, privileged group membership (with full member drill-down, not just a headline count), default and fine-grained password policy, password-never-expires hygiene, and orphaned Group Policy Objects.

What you get: a 0-100 health score, a filterable and sortable findings table, and expandable group-membership panels — all built into one self-contained HTML file with no internet connection or install needed to view it.

Requirements: a Windows machine with the Active Directory PowerShell module (RSAT) and PowerShell 5.1+. Doesn’t need to run on a domain controller. Read-only — it never changes anything in your directory.

Fully customisable — set your own or your client’s branding, stale-account threshold, and output location, all via command-line parameters. Full instructions included in the download.

Licence: for use by the purchasing individual or organisation, including running it for your own MSP clients. Not to be resold or redistributed as a standalone download. See the included LICENSE.txt for full terms.