search

EvotecIT / ADEssentials

PowerShell Active Directory helper functions to manage healthy Active Directory
MIT License
429 stars 51 forks source link

Limit Domain Controller Scope #21

Closed mharding71 closed 2 years ago

mharding71 commented 2 years ago

Hi,

I love this tool and have been using this for months now. It has been a while since I checked all the changes, so please forgive me if this issue was already identified and remediated. I have hundreds of domain controllers. Is there any way to limit the scope of DCs to only a hand full to get the general forest/domain health checks? I would like to exclude the majority of the domain controllers like the type of checks I can run. Is there already something available to limit the scope of domain controllers that I missed somewhere, or, is this a new feature that would need to be added?

Thanks in advance, M

PrzemyslawKlys commented 2 years ago

Hi,

You can define 5 things.

  1. You can tell which domains to include or exclude
  2. Which DCs to include or exclude
  3. You can finally pick Sources you want - basically limiting tests to certain areas (only Forest tests) or only Domain tests.

image

For example

Invoke-Testimo -Sources DomainDuplicateObjects,DomainGroupPolicyOwner -ExcludeDomains 'ad.evotec.pl'
PrzemyslawKlys commented 2 years ago

Hrmms, now I see that you asked in ADEssentials, not in Testimo. But the same thing applies. Most commands have Forest/IncludeDomains/ExcludeDOmains/IncludeDCs and ExcludeDCs.

mharding71 commented 2 years ago

Ok, thanks for the quick update!