How-to Guides

Our step-by-step guides explain how to find information about configuration settings, changes and access events.
All Guides
Active Directory
Microsoft Entra ID
File Servers
Windows Server
Exchange
SharePoint
SQL Server
Oracle Database
VMware
MS Teams
Most Popular
Active Directory
How to Find Last Password Change Date

While troubleshooting an account lockout or investigating an attack, you need to find out when a user last changed their password. Learn how to find the last password change date.

Active Directory
How to List AD Group Members

Learn how you can get a list of AD group members in couple of clicks so you can streamline attestation of privileged groups to ensure that only authorized users have administrative rights.

Active Directory
How to Monitor User Logоns in a Domain

Auditing of both failed and successful logon attempts is extremely important because it helps IT pros detect malicious activity before a data breach occurs. test

Changes
These assets explain how to get information about changes to system configurations and data.
Active Directory
How to View AD logs in Event Viewer

Learn how to read AD logs to keep track of changes to your baselines for critical systems of your infrastructure.

Active Directory
How to Monitor Active Directory Group Membership Changes

Learn how you can monitor AD group membership changes with native auditing capabilities in Windows Server and with Netwrix Auditor.

Active Directory
How to Detect Who Deleted a Group Policy Object

Improper deletion of a GPO can greatly damage the security of your environment. Monitor GPO deletions to facilitate quick recovery and reduce risk of data exposure.

Active Directory
How to Detect Who Enabled a User Account in Active Directory

Constant monitoring of recently enabled accounts enables you to determine who is trying to get unauthorized access to your systems and quickly remediate the issue.

Active Directory
How to Audit Group Policy Changes using Security Log Events

Learn how to audit Group Policy changes with Netwrix Auditor. Monitoring Group Policy logging information helps you prevent security incidents.

Active Directory
How to Find Out Who Unlocked a User Account

Constantly reviewing which accounts were unlocked and by whom enables IT admins to spot suspicious account lockouts and respond quickly to protect systems and data.

Active Directory
How to Detect Who Modified Permissions to an Organizational Unit

Continuous monitoring of changes to security permissions to an OU enables IT admins to minimize the risk of unauthorized access to IT systems.

Active Directory
How to Detect Who Deleted a User Account in Active Directory

Carefully monitoring all user account deletions enables IT pros to minimize the risk of business disruption and system unavailability.

Active Directory
How to Detect Who Deleted a Computer Account in Active Directory

Ongoing tracking of deleted computer accounts by IT administrators is important to avoid authentication errors and lost productivity.

Active Directory
How to Detect Who Added a User to Domain Admins Group

To prevent a data breach, it’s critical to ensure that only authorized users are added to the Domain Admins group and thereby get access to critical data.

Active Directory
How to Detect Changes to Organizational Units and Groups in Active Directory

Ongoing tracking of changes to Active Directory organizational units and groups can help you avoid system downtime, business disruption and loss of productivity.

Active Directory
How to Detect Password Changes in Active Directory

Timely detection of password change and password reset in Active Directory enables IT pros to investigate suspicious activity and avoid data leaks and system downtime.

Active Directory
How to Detect Who Disabled a User Account in Active Directory

The ability to quickly detect a disabled user in Active Directory and identify who disabled the account enables IT Pros to investigate the root cause of suspicious activity.

Active Directory
How to Detect Who Created a User Account in Active Directory

To thwart attackers, IT pros must be able to continuously audit changes in the environment and quickly determine who created AD user accounts.

Active Directory
How to Detect AD User Account Changes

Detecting AD user account changes using native auditing is time-consuming. Netwrix Auditor for Active Directory monitors these changes helping you quickly detect intruders.

Access
These assets explain how to find out who is accessing what in your environment.
Active Directory
How to Find Account Lockout Source

See how you can find account lockout source and the underlying reason using a PowerShell script or Netwrix Auditor.

Active Directory
How to Get User Login History

Get a report about Active Directory user login history with a PowerShell script or Netwrix Auditor. Review both remote and local logons with time and system details.

Active Directory
How to Detect Every User's Last Logon Date in Active Directory

Ongoing audit of each user’s last logon date in Active Directory helps IT pros detect inactive accounts that can be used as back doors by attackers.

Active Directory
How to Monitor User Logоns in a Domain

Auditing of both failed and successful logon attempts is extremely important because it helps IT pros detect malicious activity before a data breach occurs. test

Configurations
These assets explain how to get information about effective permissions and configuration settings.
Active Directory
How to Get AD User Group Membership with or without PowerShell

Overcome the limitation of PowerShell scripts to get AD user group membership. Create a list of groups a specific user belongs to and export it to CSV.

Active Directory
How to Check AD Group Membership with Command Line

Checking AD group membership with command line is the way to review permissions, but not the only way. Learn different ways to get the required info.

Active Directory
How to Restore Deleted AD Objects

This how-to article explains how the Active Directory Recycle Bin’s object restore works, what limitations it has, and how Netwrix can help you overcome those limitations

Active Directory
How to Find Inactive Users in Active Directory using PowerShell

Learn how to find inactive users in Active Directory using PowerShell or Netwrix Auditor to simplify your AD housekeeping and reduce security risks.

Active Directory
How to Check If AD User Is Disabled

Learn how to check if AD user account is disabled with PowerShell or Netwrix Auditor.

Active Directory
How to Check AD Group Membership with Command Line

Checking AD group membership with is one method to review and refine access rights, but not the only way. Learn different ways to get the required information.

Active Directory
How to Get AD Groups for Users

Learn how to get a comprehensive report on users’ group membership.

Active Directory
How to Get Computer Group Membership

Enterprise growth can cause your AD group structure to get quite complex, which can lead to GPO and WSUS policy conflicts. To investigate them, you need to list all Active Directory groups that certain computer account belongs to.

Active Directory
How to Find Last Password Change Date

While troubleshooting an account lockout or investigating an attack, you need to find out when a user last changed their password. Learn how to find the last password change date.

Active Directory
How to List AD Group Members

Learn how you can get a list of AD group members in couple of clicks so you can streamline attestation of privileged groups to ensure that only authorized users have administrative rights.

Active Directory
How to Find Locked Accounts in Active Directory

Conduct regular reviews of locked-out user accounts in your Active Directory to maintain good IT hygiene.

Active Directory
How to Find Expired Accounts in Active Directory

Discover how to get a list of expired user accounts in your Active Directory to reduce your attack surface area and maximize the security of your IT environment.

Active Directory
How to Find Inactive Computers in Active Directory with or without PowerShell

Keep track of inactive computer accounts in your Active Directory to reduce the attack surface area and strengthen the security of your IT environment.

Active Directory
How to Find Disabled Users in AD

Knowing about every disabled user account is crucial if you want to harden the security of your IT systems. Learn how to get a list of disabled users in your Active Directory and export it to a CSV file.

Active Directory
How to Get a List of All Users from a Specific OU

Struggling to get a list of AD OU members? Learn how you can produce a list of all AD users in an OU, with and without PowerShell scripting.

Active Directory
How to List All Computers in an OU

Learn how you can use PowerShell to list all computers in an OU

Active Directory
How to Get a List of Users with Password Never Expires

Learn how to use PowerShell’s Get-ADUser to find users with Password Never Expires

Active Directory
How to Export a Computer List from Active Directory

Learn how you can export a list of computers from AD into various formats, including csv and Excel.

Active Directory
How to Get an Active Directory OU Permissions Report

Spot unnecessary excessive rights and prevent privilege abuse by regularly viewing Active Directory OU Permissions report.

Active Directory
How to Get an Active Directory User Permissions Report

To mitigate the risk of privilege abuse and pass audits, you need to know how to check user permissions in Active Directory and get a detailed report.

Active Directory
How to Export Group Policy Settings into an Actionable Report

Group Policy settings export with native tools can be a real challenge. But the right software can simplify exporting of Group Policy settings into an easy-to-read report

Active Directory
How to Restore Active Directory Users

Restore Active Directory objects to ensure system availability. Plus, quickly recover deleted AD user accounts and other objects to a previous state without any downtime.

Active Directory
How to Remind Users to Change Their Passwords before They Expire

By sending automatic notifications to users to change their passwords, IT administrators can ensure IT security and reduce helpdesk workload.

Active Directory
How to Export Active Directory Objects to CSV

Because IT admins are often asked to export Active Directory to CSV files, having a solution that can quickly export Active Directory objects can save them time.

Active Directory
How to Export Active Directory Users to CSV

Exporting users from Active Directory with native tools requires time and effort. The right solution enables you to quickly export AD users to CSV

Active Directory
How to Export Members of a Particular AD Group

An Active Directory group membership report shows the members of a particular group. To have this data at hand in a readable format, simply export AD group members to CSV.