This article walks through deploying a self-service password reset portal I developed a few years back. I recently took the opportunity to update it, partly as an excuse to experiment with Claude Code. Hopefully it's useful to someone, and any comments or bug reports are always welcome. Continue reading Self-Service Password Reset (SSPR) — ASP.NET Core 8
A PowerShell script that exports Local Administrator Password Solution (LAPS) passwords from Active Directory to KeePass-compatible XML for offline access. Continue reading How to Export LAPS Passwords to KeePass
Use DSInternals and fine-grained password policies to audit AD passwords against weak-password lists and force shorter expiry for accounts with weak passwords. Continue reading How to Create an Intelligent Password Policy for Active Directory
PowerShell scripts using DSInternals to synchronize passwords between Active Directory domains during migration, supporting both one-way and two-way sync via NT hash extraction. Continue reading How to Synchronize Passwords Between Active Directory Domains
A PowerShell-based approach to managing Windows Firewall rules as code, using conditions and Group Policy to dynamically apply firewall rules across servers and workstations. Continue reading Windows Firewall as Code
A method to securely set local account passwords across domain computers using AES-256 encrypted tokens deployed via Active Directory Group Policy. Continue reading Active Directory - Securely Set Local Account Passwords
A guide to creating an Active Directory service account with password reset and account unlock permissions, with a downloadable Visual Studio project. Continue reading Active Directory - Securely Set Local Account Passwords
An alternative to LAPS for centrally managing local account passwords using GPO, a file share, SQL Server encryption, and custom PasswordImporter/PasswordViewer tools. Continue reading How to manage local account passwords from Active Directory without LAPS
A strategy for centrally managing local Administrators group membership from Active Directory by creating per-computer AD groups and synchronizing members via a scheduled tool. Continue reading Strategy to centrally manage Local Administrators group from Active Directory
