A production-ready PowerShell automation suite designed for Enterprise system administrators managing hybrid identities and mail infrastructure. This toolkit provides modular, highly optimized utilities to streamline Active Directory account auditing, Exchange Online mailbox maintenance, recursive DNS triage, and synchronized group policy enforcement.
The toolkit is organized into specialized modules to make navigation and deployment straightforward:
- DNS/ — Network triage and infrastructure resolution utilities.
Resolve-BulkDnsLookups.ps1— Fast, native PowerShell Resolve-DnsName utility to parse domain lists.Resolve-BatchDnsDetails.ps1— Comprehensive legacy nslookup parser that tracks targeting servers with built-in request delays.
- DistributionLists/ — On-premises and cloud distribution group auditing.
Get-NestedDLMembers.ps1— Recursively expands and extracts deeply nested distribution list memberships.Get-BulkMailboxInfo.ps1— Aggregates and filters bulk mailbox configuration metrics across the tenant.Get-OrphanedDLMembers.ps1— Identifies distribution group members that no longer exist in Active Directory.Import-BulkDLGroupMembers.ps1— Automates bulk CSV uploads to provision or expand enterprise distribution lists.Import-BulkDLMembers.ps1— Streamlines mass-add membership operations for targeted distribution groups.
- LegalHold/ — Corporate compliance and mailbox preservation management.
Manage-LegalHoldMailboxCleanup.ps1— Toggles single-item recovery and delay hold states to run safe, iterative dumpster purging on targeted accounts.
- MailboxOptimization/ — Automated mailbox maintenance and storage quota governance.
Optimize-MailboxArchiveExpansion.ps1— Automates Auto-Expanding Archive provisioning and triggers FullCrawl folder optimization scripts for mailboxes exceeding 90GB.
- RoomMailbox/ — Resource and calendar booking policy configurations.
Add-RoomMailboxUsers.ps1— Reusable function to restrict room mailbox parameters and safely append authorized booking users.
- SharedMailbox/ — Access management across hybrid mail architectures.
Compare-HybridGroupMembers.ps1— Cross-checks group memberships dynamically between on-premises Active Directory and Exchange Online.
- Root Utilities — Core identity and directory management tools.
Get-ADUserStatus.ps1— Audits account flags, lockouts, and sync states across on-premises Active Directory.Manage-ADMailContacts.ps1— Controls provisioning and attribute syncing for external mail-enabled contacts.Set-ADServiceAccountPassword.ps1— Safely rotates passwords for managed service accounts following enterprise security protocols.
Get-ADUserStatus.ps1— Active Directory query tool to quickly audit account state, email addresses, and employee details via pipeline inputs.Manage-ADMailContacts.ps1— Streamlines localized target infrastructure contacts.Set-ADServiceAccountPassword.ps1— Secure rotation management for domain directory service accounts.
Before executing these tools, ensure your management machine meets the following environment baselines:
- Windows PowerShell 5.1 or PowerShell 7+
- ActiveDirectory PowerShell Module
- Exchange Online Management Module
Ensure your execution policy allows running downloaded scripts locally:
Set-ExecutionPolicy RemoteSigned -Scope CurrentUser