 |
| Domain | AD Recycle Bin | Infrastructure Master | RID Master | PDC Emulator | Domain Naming Master | Schema Master |
|---|---|---|---|---|---|---|
| TheLazyAdministrator.com | Enabled | bwdc01.TheLazyAdministrator.com | bwdc01.TheLazyAdministrator.com | bwdc01.TheLazyAdministrator.com | bwdc01.TheLazyAdministrator.com | bwdc01.TheLazyAdministrator.com |
| Name | Enabled | Type |
|---|---|---|
| Bradley Wyatt | True | user |
| Brad Wyatt | True | user |
| Frank Anderson | True | user |
| Name | Enabled | Type |
|---|---|---|
| Ron Hamstring | True | user |
| Bradley Wyatt | True | user |
| Name | Enabled | Operating System | Modified Date | Password Last Set | Protect from Deletion |
|---|---|---|---|---|---|
| Test-PC | True | Windows Server 2012 R2 | 12/4/2018 3:19:32 AM | 12/3/2018 7:27:51 PM | False |
| test-pc2 | False | Windows 10 Pro | 12/4/2018 3:20:05 AM | 12/3/2018 7:28:51 PM | False |
| test-pc3 | True | Windows Server 2012 | 12/4/2018 3:17:04 AM | 12/3/2018 7:28:53 PM | False |
| test-pc4 | True | Windows 7 Ultimate | 12/4/2018 3:20:15 AM | 12/3/2018 7:28:55 PM | False |
| test-pc5 | True | Windows 10 Pro | 12/4/2018 3:22:15 AM | 12/3/2018 7:28:57 PM | False |
| test-pc6 | True | Windows 8 Ultimate | 12/4/2018 3:20:23 AM | 12/3/2018 7:28:59 PM | False |
| test-pc7 | True | Windows 10 Pro | 12/4/2018 3:20:39 AM | 12/3/2018 7:29:00 PM | False |
| test-pc8 | True | Windows 10 Pro | 12/4/2018 3:20:43 AM | 12/3/2018 7:29:02 PM | False |
| test-pc9 | True | Windows 10 Pro | 12/4/2018 3:20:47 AM | 12/3/2018 7:29:04 PM | False |
| test-pc10 | True | Windows 10 | 12/4/2018 3:10:48 AM | 12/3/2018 7:29:06 PM | False |
| test-pc111 | False | Windows 10 Pro | 12/4/2018 3:19:45 AM | 12/3/2018 7:29:09 PM | False |
| test-pc11 | True | Windows Server 2012 R2 | 12/4/2018 3:18:26 AM | 12/3/2018 7:29:11 PM | False |
| test-pc12 | True | Windows 10 Pro | 12/4/2018 3:19:49 AM | 12/3/2018 7:29:13 PM | False |
| test-pc13 | False | Windows 7 Pro | 12/4/2018 3:10:57 AM | 12/3/2018 7:29:14 PM | False |
| test-pc14 | False | Windows 7 Ultimate | 12/4/2018 3:11:09 AM | 12/3/2018 7:29:18 PM | False |
| test-pc154 | False | Windows 10 Pro | 12/4/2018 3:20:00 AM | 12/3/2018 7:29:20 PM | False |
| test-pc15 | False | Windows 10 Pro | 12/4/2018 3:19:53 AM | 12/3/2018 7:29:22 PM | False |
| win10pc | True | Windows 10 Pro | 12/4/2018 2:59:06 AM | 12/4/2018 2:59:05 AM | False |
| Name | UserPrincipalName | Enabled | Protected from Deletion | Last Logon | Email Address |
|---|---|---|---|---|---|
| Wedding | [email protected] | True | False | Never | [email protected] |
| Ron Hamstring | [email protected] | True | False | Never | [email protected] |
| Bradley Wyatt | [email protected] | True | False | 12/4/2018 2:59:05 AM | |
| Guest | False | False | Never | ||
| DefaultAccount | False | False | Never | ||
| krbtgt | False | False | Never |
| Name | Object Type | When Changed |
|---|---|---|
| Default Domain Policy | groupPolicyContainer | 12/2/2018 1:00:55 AM |
| Bradley Wyatt | user | 12/2/2018 1:45:38 AM |
| Enterprise Admins | group | 12/2/2018 2:07:35 AM |
| Domain Admins | group | 12/2/2018 12:48:41 AM |
| thelazyadministrator | organizationalUnit | 12/2/2018 11:46:32 PM |
| Ron Hamstring | user | 12/3/2018 3:15:41 AM |
| Brad Wyatt | user | 12/2/2018 1:06:16 AM |
| a distro | group | 12/1/2018 6:04:59 PM |
| distro group 2 | group | 12/2/2018 11:46:32 PM |
| no users | group | 12/2/2018 11:46:40 PM |
| Frank Anderson | user | 12/2/2018 11:57:32 PM |
| Patrick Star | user | 12/2/2018 11:46:06 PM |
| Gin Ntonic | user | 12/3/2018 6:36:17 PM |
| Joe Schmo | user | 12/3/2018 6:36:40 PM |
| Test-PC | computer | 12/4/2018 3:19:32 AM |
| test-pc2 | computer | 12/4/2018 3:20:05 AM |
| test-pc3 | computer | 12/4/2018 3:17:04 AM |
| test-pc4 | computer | 12/4/2018 3:20:15 AM |
| test-pc5 | computer | 12/4/2018 3:22:15 AM |
| test-pc6 | computer | 12/4/2018 3:20:23 AM |
| test-pc7 | computer | 12/4/2018 3:20:39 AM |
| test-pc8 | computer | 12/4/2018 3:20:43 AM |
| test-pc9 | computer | 12/4/2018 3:20:47 AM |
| test-pc10 | computer | 12/4/2018 3:10:48 AM |
| test-pc111 | computer | 12/4/2018 3:19:45 AM |
| test-pc11 | computer | 12/4/2018 3:18:26 AM |
| test-pc12 | computer | 12/4/2018 3:19:49 AM |
| test-pc13 | computer | 12/4/2018 3:10:57 AM |
| test-pc14 | computer | 12/4/2018 3:11:09 AM |
| test-pc154 | computer | 12/4/2018 3:20:00 AM |
| test-pc15 | computer | 12/4/2018 3:19:53 AM |
| win10pc | computer | 12/4/2018 2:59:06 AM |
| Name | Object Type | When Changed |
| Name | Days Until Password Expires |
|---|---|
| Brad Wyatt | 4 |
| Gin Ntonic | 6 |
| Name | UserPrincipalName | Expiration Date | Enabled |
|---|---|---|---|
| Patrick Star | [email protected] | 12/5/2018 12:00:00 AM | True |
| Name | UserPrincipalName | Enabled | Protected from Deletion | Last Logon | Password Never Expires | Days Until Password Expires |
|---|---|---|---|---|---|---|
| Bradley Wyatt | [email protected] | True | False | 12/4/2018 2:59:05 AM | True | N/A |
| Brad Wyatt | [email protected] | True | False | 12/2/2018 12:48:58 AM | False | 4 |
| Name | Enabled | Creation Date |
|---|---|---|
| Frank Anderson | True | 11/30/2018 5:00:22 PM |
| Patrick Star | True | 12/2/2018 10:51:13 PM |
| Gin Ntonic | True | 12/3/2018 6:36:17 PM |
| Joe Schmo | True | 12/3/2018 6:36:40 PM |
| Time | Type | Message |
|---|---|---|
| 12/4/2018 3:36:09 AM | SuccessAudit | An account was logged off. Subject: Security ID: S-1-5-18 Account Name: bwdc01$ Account Domain: THELAZYADMIN Logon ID: 0xe848e5 Logon Type: 3 This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 12/4/2018 3:36:09 AM | SuccessAudit | An account was successfully logged on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Information: Logon Type: 3 Restricted Admin Mode: - Virtual Account: %%1843 Elevated Token: %%1842 Impersonation Level: %%1833 New Logon: Security ID: S-1-5-18 Account Name: bwdc01$ Account Domain: THELAZYADMINISTRATOR.COM Logon ID: 0xe848e5 Linked Logon ID: 0x0 Network Account Name: - Network Account Domain: - Logon GUID: {ADFC8078-32D3-B8A2-CE40-71E7013D02E7} Process Information: Process ID: 0x0 Process Name: - Network Information: Workstation Name: - Source Network Address: ::1 Source Port: 64397 Detailed Authentication Information: Logon Process: Kerberos Authentication Package: Kerberos Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon session is created. It is generated on the computer that was accessed. The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe. The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network). The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on. The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases. The impersonation level field indicates the extent to which a process in the logon session can impersonate. The authentication information fields provide detailed information about this specific logon request. - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event. - Transited services indicate which intermediate services have participated in this logon request. - Package name indicates which sub-protocol was used among the NTLM protocols. - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12/4/2018 3:36:03 AM | SuccessAudit | An account was logged off. Subject: Security ID: S-1-5-18 Account Name: bwdc01$ Account Domain: THELAZYADMIN Logon ID: 0xe75ac9 Logon Type: 3 This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| UPN Suffixes | Valid |
|---|---|
| lbhsoftware.com | True |
| o365admin.center | True |
| britandbrad.com | True |
| askbone.com | True |
| bwya77.com | True |
| thelazyadministrator.com | True |
| Total Groups | Mail-Enabled Security Groups | Security Groups | Distribution Groups |
|---|---|---|---|
| 60 | 1 | 53 | 6 |
| Name | Type | Members | Managed By | E-mail Address | Protected from Deletion | Default AD Group |
|---|---|---|---|---|---|---|
| Administrators | Security Group | Domain Admins, Enterprise Admins, Bradley Wyatt | False | True | ||
| Users | Security Group | Domain Users, Authenticated Users, INTERACTIVE | False | True | ||
| Guests | Security Group | Domain Guests, Guest | False | True | ||
| Print Operators | Security Group | False | True | |||
| Backup Operators | Security Group | False | True | |||
| Replicator | Security Group | False | True | |||
| Remote Desktop Users | Security Group | False | True | |||
| Network Configuration Operators | Security Group | False | True | |||
| Performance Monitor Users | Security Group | False | True | |||
| Performance Log Users | Security Group | False | True | |||
| Distributed COM Users | Security Group | False | True | |||
| IIS_IUSRS | Security Group | IUSR | False | True | ||
| Cryptographic Operators | Security Group | False | True | |||
| Event Log Readers | Security Group | False | True | |||
| Certificate Service DCOM Access | Security Group | False | True | |||
| RDS Remote Access Servers | Security Group | False | True | |||
| RDS Endpoint Servers | Security Group | False | True | |||
| RDS Management Servers | Security Group | False | True | |||
| Hyper-V Administrators | Security Group | False | True | |||
| Access Control Assistance Operators | Security Group | False | True | |||
| Remote Management Users | Security Group | False | True | |||
| System Managed Accounts Group | Security Group | DefaultAccount | False | True | ||
| Storage Replica Administrators | Security Group | False | True | |||
| Domain Computers | Security Group | Test-PC, test-pc154, test-pc14, test-pc13, test-pc12, test-pc11, test-pc111, test-pc10, test-pc9, test-pc8, test-pc7, test-pc6, test-pc5, test-pc4, test-pc3, test-pc2, test-pc15, win10pc | False | True | ||
| Domain Controllers | Security Group | bwdc01 | False | True | ||
| Schema Admins | Security Group | Bradley Wyatt | False | True | ||
| Enterprise Admins | Security Group | Ron Hamstring, Bradley Wyatt | False | True | ||
| Cert Publishers | Security Group | False | True | |||
| Domain Admins | Security Group | Bradley Wyatt, Brad Wyatt, Frank Anderson | False | True | ||
| Domain Users | Security Group | Skipped Domain Users Membership | False | True | ||
| Domain Guests | Security Group | Guest | False | True | ||
| Group Policy Creator Owners | Security Group | Bradley Wyatt | False | True | ||
| RAS and IAS Servers | Security Group | False | True | |||
| Server Operators | Security Group | False | True | |||
| Account Operators | Security Group | False | True | |||
| Pre-Windows 2000 Compatible Access | Security Group | Authenticated Users | False | False | ||
| Incoming Forest Trust Builders | Security Group | False | True | |||
| Windows Authorization Access Group | Security Group | ENTERPRISE DOMAIN CONTROLLERS | False | True | ||
| Terminal Server License Servers | Security Group | False | True | |||
| Allowed RODC Password Replication Group | Security Group | False | True | |||
| Denied RODC Password Replication Group | Security Group | Read-only Domain Controllers, Group Policy Creator Owners, Domain Admins, Cert Publishers, Enterprise Admins, Schema Admins, Domain Controllers, krbtgt | False | True | ||
| Read-only Domain Controllers | Security Group | False | True | |||
| Enterprise Read-only Domain Controllers | Security Group | False | True | |||
| Cloneable Domain Controllers | Security Group | False | True | |||
| Protected Users | Security Group | False | True | |||
| Key Admins | Security Group | False | True | |||
| Enterprise Key Admins | Security Group | False | True | |||
| DnsAdmins | Security Group | False | True | |||
| DnsUpdateProxy | Security Group | False | True | |||
| testbaddomain | Distribution Group | Brad Wyatt | [email protected] | False | False | |
| Itune - Personal Devices | Security Group | False | False | |||
| Intune - Company Devices | Security Group | False | False | |||
| Security | Security Group | False | False | |||
| Security Group test | Security Group | Wedding | False | False | ||
| a distro | Distribution Group | Bradley Wyatt, Brad Wyatt, The Lazy Administrator | Brad Wyatt | [email protected] | False | False |
| distro group 1 | Distribution Group | a distro | Brad Wyatt | [email protected] | False | False |
| distro group 2 | Distribution Group | Brad Wyatt | [email protected] | True | False | |
| lots users | Distribution Group | a distro | Brad Wyatt | [email protected] | False | False |
| no users | Distribution Group | Brad Wyatt | [email protected] | True | False | |
| ME Group | Mail-Enabled Security Group | [email protected] | False | False |
| Name | Enabled | Type |
|---|---|---|
| Bradley Wyatt | True | user |
| Brad Wyatt | True | user |
| Frank Anderson | True | user |
| Name | Enabled | Type |
|---|---|---|
| Ron Hamstring | True | user |
| Bradley Wyatt | True | user |
| Name | Linked GPOs | Modified Date | Protected from Deletion |
|---|---|---|---|
| Domain Controllers | Default Domain Controllers Policy | 11/16/2018 3:13:02 PM | False |
| drop | None | 11/16/2018 3:39:51 PM | True |
| bwya77 | None | 11/16/2018 4:15:20 PM | True |
| thelazyadministrator | Super Strict GPO, test policy | 12/2/2018 11:46:32 PM | True |
| gmail | None | 11/16/2018 5:08:22 PM | True |
| Total Users | Users with Passwords Expiring in less than 7 days | Expiring Accounts | Users Haven't Logged on in 1 Days |
|---|---|---|---|
| 14 | 2 | 1 | 2 |
| Name | UserPrincipalName | Enabled | Protected from Deletion | Last Logon | Email Address | Account Expiration | Change Password Next Logon | Password Last Set | Password Never Expires | Days Until Password Expires |
|---|---|---|---|---|---|---|---|---|---|---|
| Bradley Wyatt | [email protected] | True | False | 12/4/2018 2:59:05 AM | False | 11/15/2018 5:27:53 PM | True | N/A | ||
| Guest | False | False | Never | False | True | N/A | ||||
| DefaultAccount | False | False | Never | False | True | N/A | ||||
| krbtgt | False | False | Never | True | 11/16/2018 3:14:59 PM | False | N/A | |||
| Wedding | [email protected] | True | False | Never | [email protected] | True | False | User has never logged on | ||
| Ron Hamstring | [email protected] | True | False | Never | [email protected] | True | False | User has never logged on | ||
| test user | [email protected] | True | False | Never | [email protected] | True | False | User has never logged on | ||
| Brad Wyatt | [email protected] | True | False | 12/2/2018 12:48:58 AM | [email protected] | False | 12/2/2018 12:47:49 AM | False | 4 | |
| testshared | [email protected] | True | False | Never | [email protected] | 12/4/2018 12:00:00 AM | True | False | User has never logged on | |
| The Lazy Administrator | [email protected] | True | False | Never | [email protected] | True | False | User has never logged on | ||
| Frank Anderson | [email protected] | True | False | Never | True | False | User has never logged on | |||
| Patrick Star | [email protected] | True | True | Never | 12/5/2018 12:00:00 AM | True | False | User has never logged on | ||
| Gin Ntonic | [email protected] | True | False | Never | False | 12/3/2018 6:36:17 PM | False | 6 | ||
| Joe Schmo | [email protected] | True | False | Never | True | False | User has never logged on |
| Name | Days Until Password Expires |
|---|---|
| Brad Wyatt | 4 |
| Gin Ntonic | 6 |
| Name | UserPrincipalName | Expiration Date | Enabled |
|---|---|---|---|
| Patrick Star | [email protected] | 12/5/2018 12:00:00 AM | True |
| Name | UserPrincipalName | Enabled | Protected from Deletion | Last Logon | Password Never Expires | Days Until Password Expires |
|---|---|---|---|---|---|---|
| Bradley Wyatt | [email protected] | True | False | 12/4/2018 2:59:05 AM | True | N/A |
| Brad Wyatt | [email protected] | True | False | 12/2/2018 12:48:58 AM | False | 4 |
| Name | Enabled | Creation Date |
|---|---|---|
| Frank Anderson | True | 11/30/2018 5:00:22 PM |
| Patrick Star | True | 12/2/2018 10:51:13 PM |
| Gin Ntonic | True | 12/3/2018 6:36:17 PM |
| Joe Schmo | True | 12/3/2018 6:36:40 PM |
| Name | Status | Modified Date | User Version | Computer Version |
|---|---|---|---|---|
| Default Domain Policy | AllSettingsEnabled | 12/2/2018 1:00:54 AM | 0 | 7 |
| test policy | AllSettingsEnabled | 12/1/2018 2:18:50 AM | 4 | 0 |
| Default Domain Controllers Policy | AllSettingsEnabled | 11/16/2018 3:13:02 PM | 0 | 1 |
| Super Strict GPO | AllSettingsEnabled | 12/1/2018 2:58:10 AM | 0 | 0 |
| Total Computers | Server 2016 | Server 2012 R2 | Server 2012 | Server 2008 R2 | Windows 10 | Windows 8 | Windows 7 |
|---|---|---|---|---|---|---|---|
| 19 | 1 | 2 | 1 | 0 | 11 | 1 | 3 |
| Name | Enabled | Operating System | Modified Date | Password Last Set | Protect from Deletion |
|---|---|---|---|---|---|
| bwdc01 | True | Windows Server 2016 Datacenter | 11/29/2018 9:34:27 PM | 11/16/2018 3:15:15 PM | False |
| Test-PC | True | Windows Server 2012 R2 | 12/4/2018 3:19:32 AM | 12/3/2018 7:27:51 PM | False |
| test-pc2 | False | Windows 10 Pro | 12/4/2018 3:20:05 AM | 12/3/2018 7:28:51 PM | False |
| test-pc3 | True | Windows Server 2012 | 12/4/2018 3:17:04 AM | 12/3/2018 7:28:53 PM | False |
| test-pc4 | True | Windows 7 Ultimate | 12/4/2018 3:20:15 AM | 12/3/2018 7:28:55 PM | False |
| test-pc5 | True | Windows 10 Pro | 12/4/2018 3:22:15 AM | 12/3/2018 7:28:57 PM | False |
| test-pc6 | True | Windows 8 Ultimate | 12/4/2018 3:20:23 AM | 12/3/2018 7:28:59 PM | False |
| test-pc7 | True | Windows 10 Pro | 12/4/2018 3:20:39 AM | 12/3/2018 7:29:00 PM | False |
| test-pc8 | True | Windows 10 Pro | 12/4/2018 3:20:43 AM | 12/3/2018 7:29:02 PM | False |
| test-pc9 | True | Windows 10 Pro | 12/4/2018 3:20:47 AM | 12/3/2018 7:29:04 PM | False |
| test-pc10 | True | Windows 10 | 12/4/2018 3:10:48 AM | 12/3/2018 7:29:06 PM | False |
| test-pc111 | False | Windows 10 Pro | 12/4/2018 3:19:45 AM | 12/3/2018 7:29:09 PM | False |
| test-pc11 | True | Windows Server 2012 R2 | 12/4/2018 3:18:26 AM | 12/3/2018 7:29:11 PM | False |
| test-pc12 | True | Windows 10 Pro | 12/4/2018 3:19:49 AM | 12/3/2018 7:29:13 PM | False |
| test-pc13 | False | Windows 7 Pro | 12/4/2018 3:10:57 AM | 12/3/2018 7:29:14 PM | False |
| test-pc14 | False | Windows 7 Ultimate | 12/4/2018 3:11:09 AM | 12/3/2018 7:29:18 PM | False |
| test-pc154 | False | Windows 10 Pro | 12/4/2018 3:20:00 AM | 12/3/2018 7:29:20 PM | False |
| test-pc15 | False | Windows 10 Pro | 12/4/2018 3:19:53 AM | 12/3/2018 7:29:22 PM | False |
| win10pc | True | Windows 10 Pro | 12/4/2018 2:59:06 AM | 12/4/2018 2:59:05 AM | False |