Active Directory Audit Report | PowerShell Script | AD Audit as HTML Report | Read-Only | Windows Server, German

A PowerShell script that checks an Active Directory for 21 typical vulnerabilities and generates a clear HTML report in German – with explanation, recommendation and the affected accounts for each finding.

THIS IS INCLUDED
• PowerShell script AD-Pruefbericht.ps1 (source code open and commented)
• Instructions as PDF
• Sample report of a fictitious sample GmbH (HTML)

THE SCRIPT ONLY WORKS IN READING TIME
It makes no changes to Active Directory, creates no entries, deletes no entries, and transfers no data. A standard domain account is sufficient; administrator rights are not required.

THE 21 CHECKPOINTS
• Password policy: Weak domain password policy settings (length, complexity, history, account lockout)
• Administrators: Too many privileged accounts (including those in nested groups); Disabled accounts in administrator groups; Nested groups within administrator groups; Admin accounts with passwords that never expire; Service accounts in administrator groups
• User accounts: Password never expires; Password not required; Reversible encryption; Kerberos pre-authentication disabled; User accounts with SPN (Kerberoasting); Possible password in description field; Active accounts not logged in for X days; Disabled accounts with group memberships; Very old passwords; Guest account enabled; Old password of account krbtgt
• Groups, computers, domains: Groups without members; Unsupported operating systems; Computer accounts not logged in for X days; AD recycle bin not enabled

REQUIREMENTS
• Windows PowerShell 5.1
• PowerShell module ActiveDirectory (present on domain controllers, otherwise RSAT)
• Tested with Windows Server 2022 and 2025: in a test domain and in two established domains with approximately 200 accounts

FOR WHOM
Administrators and IT service providers who want to take over, clean up or regularly audit an Active Directory – without expensive audit software.

GOOD TO KNOW
• Digital download (ZIP and PDF) – no physical product will be shipped
• Language of script output, report and instructions: German
• The report identifies anomalies based on fixed rules; it does not replace a security audit.
• Use within your own company or for your own customers; no resale
• Use at your own risk

Note: Content and structure originate from the seller; AI tools were used to assist in its development. All content has been professionally reviewed by the seller.