Tagged

security

5 posts · all topics

• Reconciling group membership without lockouts

  Sep 8, 2026·7 min read

  Safe Active Directory reconciliation separates adds from removals, protects critical groups, previews every change, and requires exact approval before changes.

  • powershell
  • active-directory
  • security
  • automation
  • identity

• Designing an access matrix PowerShell can enforce

  Sep 1, 2026·7 min read

  A useful PowerShell access matrix needs 8 required fields, stable role IDs, synthetic test fixtures, and preflight validation before directory changes.

  • powershell
  • active-directory
  • security
  • automation
  • onboarding

• Role-based access without an IGA platform

  Aug 25, 2026·7 min read

  A 7-stage request, approval, mapping, enforcement, and reconciliation loop gave my small IT shop consistent role access without claiming full IGA coverage.

  • powershell
  • active-directory
  • security
  • automation
  • identity

• Revoke access everywhere: the offboarding ghost hunt

  Jul 14, 2026·8 min read

  Disabling the account is step one. Here are the 7 places a user's access hides, the inventory that finds them, and the stale-login report that catches misses.

  • powershell
  • active-directory
  • offboarding
  • security
  • microsoft-365

• Automating offboarding in a one-person IT shop

  Jul 1, 2026·9 min read

  Onboarding gets the attention. The account you forget to disable is the real risk. Here's my one-person-shop offboarding flow, and the 3 steps I keep manual.

  • powershell
  • active-directory
  • offboarding
  • security
  • microsoft-365