Admin Workflows — Practical PowerShell Guides for IT Teams
Step-by-step PowerShell workflow guides for everyday IT admin work: onboarding, identity hygiene, endpoint deployments, Exchange audits, and Microsoft 365 governance.
All PowerShell Admin Workflow Guides (110)
- Automate Employee Onboarding and Offboarding with PowerShell — Provision new users, assign licenses, create mailboxes, and streamline offboarding with a repeatable PowerShell workflow built in PSForge.
- How to Audit MFA, Guest Access, and Inactive Accounts in Entra ID with PowerShell — Use PowerShell workflows to audit MFA registration, identify inactive users, review guest access, and tighten Entra ID security in one repeatable flow.
- Build a Safe Phased SCCM Deployment Workflow with Pilot Collections and Auto-Remediation — Stage software rollouts the right way: pilot collections, sampled deployments, failure detection, and targeted re-deploys built as one PowerShell workflow.
- How to Audit Mailbox Permissions and Run Message Traces Faster with PowerShell — Stop rebuilding the same Exchange Online scripts. Audit mailbox delegation, run message traces, and review transport settings as one repeatable workflow.
- How to Audit Guest Access and External Sharing Across Microsoft 365 — Pull guest users, sharing links, and collaboration settings from across Entra ID, Teams, SharePoint, and OneDrive into one governance workflow.
- How to Build a Windows Server Health Check and Service Recovery Workflow with PowerShell — Inventory servers, validate critical services, review event logs, and trigger service restarts as one repeatable PowerShell health-check workflow.
- How to Audit SharePoint Online Storage, Permissions, and External Sharing with PowerShell — Inventory site collections, surface storage hot spots, review permissions, and rein in external sharing with one repeatable governance workflow.
- How to Verify Veeam Backups and Build a Recovery Readiness Workflow with PowerShell — A green job status is not enough. Build a Veeam workflow that validates integrity, reviews errors, and confirms recovery readiness on a schedule.
- How to Audit Power Apps, Flows, and DLP Policies with PowerShell — Inventory environments, surface stale flows, identify risky connectors, and review DLP coverage with a repeatable Power Platform governance workflow.
- How to Automate Hyper-V VM Provisioning and Storage Maintenance with PowerShell — Standardize VM provisioning, checkpoint management, memory configuration, and VHD maintenance into one reusable Hyper-V workflow.
- How to Clean Up Active Directory: Stale Accounts, Group Hygiene, and OU Audits with PowerShell — Surface stale users, abandoned computer accounts, empty groups, and noisy OUs in one repeatable PowerShell workflow.
- How to Tame Microsoft Teams Sprawl: Inactive Teams, Guest Access, and Channel Cleanup with PowerShell — Identify inactive teams, ownerless channels, and risky guest access — then act on them — with one repeatable governance workflow.
- How to Report on OneDrive for Business Storage, Sharing, and Departing Users with PowerShell — Track storage trends, audit sharing links, and handle OneDrive content for departing users in one repeatable workflow.
- How to Tame Azure Costs with PowerShell: Tagging, Idle Resources, and Cleanup — Apply consistent tags, surface idle VMs and unattached disks, and reclaim spend with one repeatable Azure cost workflow.
- How to Audit Windows DNS and DHCP with PowerShell: Records, Scopes, and Utilization — Inventory DNS zones and records, review DHCP scopes, and surface utilization issues in one repeatable networking workflow.
- How to Audit File Server NTFS Permissions and Shares with PowerShell — Map NTFS permissions, share access, and ownership across file servers — perfect for audits, migrations, or cleanup projects.
- How to Build a WSUS and Windows Update Patch Compliance Workflow with PowerShell — Get a live picture of patch compliance across servers and clients — approvals, missing updates, reboots — in one repeatable workflow.
- How to Inventory Certificates and Monitor Expirations with PowerShell — Catch expiring certificates before they catch you — across local stores, IIS bindings, and remote endpoints — in one repeatable workflow.
- How to Report on Intune Device Compliance, Configuration, and App Deployments with PowerShell — Get a single, repeatable view of Intune device compliance, configuration profile assignment, and app deployment success.
- How to Inventory VMware vSphere VMs and Clean Up Snapshots with PowerShell — Inventory vSphere VMs, surface old snapshots, and run safe, scheduled cleanup with one repeatable workflow.
- Automate SQL Server Backups and Maintenance with PowerShell — Replace handwritten T-SQL maintenance scripts with a reusable PowerShell workflow that handles backups, integrity checks, and index health.
- Backup, Audit, and Clean Up Group Policy with PowerShell — Stop letting Group Policy turn into a black box. Generate a workflow that backs up, reports on, and audits every GPO in your domain.
- Optimize Microsoft 365 Licenses with PowerShell — Stop paying for licenses nobody uses. Build a monthly PowerShell workflow that reports on, reclaims, and reassigns Microsoft 365 licenses.
- Audit Conditional Access Policies with PowerShell — Build a workflow that documents and audits every Conditional Access policy in your tenant — and flags the gaps before an attacker does.
- Review Entra ID PIM Privileged Roles with PowerShell — Find standing global admins, untouched eligible roles, and PIM gaps with a workflow that runs every month — not just before an audit.
- Automate Windows Defender Status and Triage with PowerShell — Get a daily, fleet-wide picture of Windows Defender health — status, signatures, exclusions, and recent threats — without logging into a single endpoint.
- Back Up Cisco and Meraki Network Devices with PowerShell — Stop relying on screenshots and ad-hoc TFTP copies. Build a PowerShell workflow that backs up Cisco and Meraki devices on a schedule.
- Automate Purview Retention and eDiscovery with PowerShell — Stop running compliance steps by hand in the Purview portal. Generate a PowerShell workflow that handles retention, litigation hold, archives, and eDiscovery.
- Automate Azure VM Lifecycle Tasks with PowerShell — Schedule Azure VM start/stop, right-size workloads, and keep tagging consistent with a PowerShell lifecycle workflow built in PSForge.
- Manage Citrix Delivery Groups and Sessions with PowerShell — Run Citrix like a managed platform: delivery groups, published apps, sessions, licenses, and configuration backups — all driven by a PowerShell workflow.
- Audit AWS EC2 and S3 with a PowerShell Workflow — Inventory EC2, audit S3 bucket policies, rotate IAM keys, and surface idle AWS resources with a single repeatable PowerShell workflow.
- Manage Okta User Lifecycle and App Assignments with PowerShell — Provision Okta users, assign SSO apps, audit group memberships, and clean up inactive accounts with a single PowerShell workflow.
- Manage Azure Virtual Desktop Host Pools and Sessions with PowerShell — Scale session hosts, drain users for maintenance, and report on AVD usage from a single PowerShell workflow you can schedule.
- Triage Microsoft Sentinel Incidents with a PowerShell Workflow — Pull Sentinel incidents, enrich them with related entities, export analytics rules, and feed your SOC a clean morning report.
- Rotate Azure Storage Keys and Apply Lifecycle Policies with PowerShell — Rotate storage account keys, audit stored access policies, apply blob lifecycle rules, and lock down public access from one PowerShell workflow.
- Check Domain Controller Health and Replication with PowerShell — Replace ad-hoc dcdiag and repadmin runs with a single PowerShell workflow that reports on every domain controller's health.
- Manage Microsoft Teams Phone Call Queues and Auto Attendants with PowerShell — Provision Teams Phone numbers, manage call queues and auto attendants, and audit call routing from one PowerShell workflow.
- Govern Power BI Workspaces and Dataset Refreshes with PowerShell — Audit Power BI workspaces, watch refresh failures, and report on capacity usage with one PowerShell workflow you can schedule.
- Audit App Registrations and Service Principal Secrets with PowerShell — Find expiring secrets, dangerous API permissions, and unused service principals before they become an incident.
- Report on NetApp ONTAP Volumes, Snapshots, and Quotas with PowerShell — Inventory ONTAP volumes, audit snapshot policies, watch quotas, and report on aggregate capacity from one PowerShell workflow.
- Pull Microsoft Defender for Cloud Posture with PowerShell — Get secure score, active recommendations, and regulatory compliance status across every subscription from one PowerShell workflow.
- Audit GitHub Enterprise Repos and Branch Protection with PowerShell — Inventory repos, audit branch protection, surface stale teams and tokens, and report on GitHub Enterprise governance from one PowerShell workflow.
- Audit Azure DevOps Pipelines, Agents, and Permissions with PowerShell — Inventory pipelines, agents, service connections, and project permissions across every Azure DevOps project from one PowerShell workflow.
- Report on Cisco Meraki Networks and Clients with PowerShell — Inventory every Meraki network, device, and client and report on uptime and license posture from one PowerShell workflow.
- Audit Palo Alto Firewall Rules and Back Up Config with PowerShell — Audit every rule, find any-any policies, back up running config, and report on rule hit counts from one PowerShell workflow.
- Triage CrowdStrike Falcon Detections with a PowerShell Workflow — Inventory Falcon-protected hosts, pull recent detections, contain compromised endpoints, and surface sensor gaps from one PowerShell workflow.
- Manage Universal Print Printers and Shares with PowerShell — Inventory printers, manage shares, audit who has access, and watch connector health from one PowerShell workflow.
- Audit AD CS Certificate Templates and Issuance with PowerShell — Audit certificate templates, template permissions, recently issued certs, and CA health from one PowerShell workflow.
- Run Azure Kubernetes Service Operations with PowerShell — Inventory clusters, scale node pools, watch upgrade availability, and report on AKS cost from one PowerShell workflow.
- Report on Azure Policy Compliance with PowerShell — Pull policy assignments, compliance state, non-compliant resources, and exemption usage from one PowerShell workflow.
- Manage an Apple Fleet in Jamf Pro: Inventory, Smart Groups, and Policy Reporting with PowerShell — Keep a macOS and iOS fleet under control: pull inventory, build smart and static groups, and review policy scope as one repeatable Jamf workflow.
- Automate Zoom User Lifecycle and License Management with PowerShell — Provision and deprovision Zoom accounts, reclaim licenses, and keep groups tidy with one repeatable user-lifecycle workflow.
- Slack Workspace Administration and Channel Governance with PowerShell — Tame Slack sprawl: govern channels, manage users, automate notifications, and archive dead channels with one repeatable admin workflow.
- Container Deployment Operations for Docker and Kubernetes with PowerShell — Standardize container rollouts: deploy images and Compose stacks, apply Kubernetes manifests, manage secrets and volumes, and watch node health.
- Automate ServiceNow Incident and Change Management with PowerShell — Bridge monitoring and ITSM: open and update incidents, raise change requests, and report on tickets with one repeatable ServiceNow workflow.
- Streamline Duo Security MFA Enrollment and Device Hygiene with PowerShell — Keep MFA coverage tight: bulk enroll users, sync from AD, manage devices, and report on enrollment status as one repeatable Duo workflow.
- Endpoint Threat Response in Sophos Central with PowerShell — Respond to threats consistently: isolate endpoints, pull alerts, trigger scans, and report on coverage as one repeatable Sophos workflow.
- Automate Splunk Searches, Saved Reports, and Dashboards with PowerShell — Operationalize Splunk: run searches, save and schedule reports, and manage dashboards as one repeatable reporting workflow.
- Automate ConnectWise PSA Tickets and Patch Deployment with PowerShell — Run MSP operations smoothly: open and route service tickets, deploy patches in bulk, and report on ticket volume as one repeatable workflow.
- Salesforce User Administration and Permission Set Management with PowerShell — Manage Salesforce access cleanly: provision and deactivate users, assign permission sets, reset passwords, and export data as one repeatable workflow.
- Automate Shared Mailbox and Distribution Group Lifecycle in Exchange Online with PowerShell — Stand up shared and resource mailboxes, manage distribution groups, set quotas, and audit delegation as one repeatable Exchange Online workflow.
- Automate Azure AD User Provisioning, Licensing, and Group Membership with PowerShell — Provision users at scale: bulk create accounts, assign licenses, manage group membership, and export inventory as one repeatable Azure AD workflow.
- Run a Recurring Active Directory Health and Security Audit with PowerShell — Keep AD healthy and secure: audit privileged groups, track lockouts, clean up stale objects, and back up GPOs as one recurring workflow.
- Manage Intune Device Compliance, Configuration, and App Deployment with PowerShell — Drive endpoint posture from one flow: create compliance policies and config profiles, deploy apps, and report on non-compliant devices.
- Automate MECM Application Deployment and Client Health with PowerShell — Ship software reliably: build collections and apps, deploy, redeploy to failures, and keep clients healthy as one repeatable MECM workflow.
- Automate Microsoft Teams Provisioning, Governance, and Policy with PowerShell — Provision and govern Teams cleanly: create teams and channels, apply policies, archive stale teams, and audit guest access as one workflow.
- Optimize and Reclaim Microsoft 365 Licenses with PowerShell — Stop overspending on licenses: inventory assignments, find unlicensed and idle users, reclaim seats, and reconcile as one repeatable O365 workflow.
- Report on Windows 365 Cloud PC Inventory and Provisioning with PowerShell — Get visibility into your Cloud PC estate: export inventory, provisioning policies, user settings, images, and connection quality in one workflow.
- Automate SQL Server Backups, Integrity Checks, and Index Maintenance with PowerShell — Keep databases healthy and recoverable: full and log backups, integrity checks, index rebuilds, and statistics updates as one repeatable workflow.
- Automate Hyper-V VM Provisioning, Checkpoints, and Maintenance with PowerShell — Build and maintain VMs consistently: create VMs and switches, manage checkpoints, optimize VHDs, and export inventory as one repeatable workflow.
- Harden Exchange Online Mail Flow with DKIM, DMARC, and Anti-Spam in PowerShell — Enable DKIM, enforce DMARC, tune anti-spam, audit transport rules and connectors, and shut down external auto-forwarding with one repeatable Exchange Online workflow.
- Monitor Exchange Server DAG and Database Health with PowerShell — Check DAG replication, verify backups, manage database copies, drain servers for patching, and report database size with a repeatable on-prem Exchange workflow.
- Standardize SharePoint Online Site Provisioning and Hub Governance with PowerShell — Create site collections from templates, associate hubs, apply sensitivity labels and retention, enforce versioning and quotas, and inventory everything with one repeatable workflow.
- Automate Intune Autopilot and Windows Enrollment with PowerShell — Import Autopilot devices, build deployment profiles, configure update rings, Windows Hello, and BitLocker, then report on enrollment with one repeatable workflow.
- Audit Active Directory Privileged Access and Attack Surface with PowerShell — Audit privileged groups, find Kerberoastable accounts, review BitLocker recovery keys, and clean up stale computer objects with one repeatable AD security workflow.
- Audit SQL Server Security, Logins, and Permissions with PowerShell — Review server logins, audit database permissions, track failed logins, find orphaned users, check TDE, and enable SQL audit with one repeatable security workflow.
- Audit Azure RBAC and Enforce Resource Governance with PowerShell — Audit RBAC assignments, tag resources for governance, apply resource locks, assign policy, and enable diagnostic settings with one repeatable Azure governance workflow.
- Build an Azure Monitor Alerting and Diagnostics Baseline with PowerShell — Enable diagnostic settings, configure Azure Monitor alerts and action groups, capture VM metrics, and tie in cost monitoring with one repeatable observability workflow.
- Govern Power Platform Environment Lifecycle and ALM with PowerShell — Provision environments, back them up, export solutions for ALM, set security roles, reassign orphaned flows, and find orphaned resources with one repeatable governance workflow.
- Govern Entra ID Enterprise App SSO and Consent with PowerShell — Review enterprise app SSO, audit API permissions, manage consent policies, remove unused app registrations, and schedule access reviews with one repeatable identity workflow.
- Investigate Windows Security Incidents with Event Log Analysis in PowerShell — Analyze failed logons by source IP, investigate account lockouts, detect privilege escalation and log tampering, and forward security logs with one repeatable investigation workflow.
- Reclaim Windows Server Storage with a Capacity and Cleanup Workflow in PowerShell — Report volume usage, find large files, analyze storage growth, clean temp and update caches, remove stale profiles, and set quotas with one repeatable storage workflow.
- Manage Windows Registry Baselines and Audits with PowerShell — Back up registry hives, audit key permissions, export and compare security baselines, configure audit policy, and monitor changes with one repeatable configuration workflow.
- Harden Windows Endpoints and Audit Local Admin Access with PowerShell — Audit local administrators, disable the guest account, enforce password and lockout policy, check BitLocker, and review user rights and open ports with one repeatable hardening workflow.
- Keep SharePoint Server Farms Healthy with PowerShell — Check farm health, run health analyzer rules, verify backups and content databases, and manage search crawls and timer jobs with one repeatable on-prem SharePoint workflow.
- Operate SQL Server Always On Availability Groups with PowerShell — Check Always On health, add databases to availability groups, perform manual failover, verify log shipping, and run integrity checks with one repeatable HA workflow.
- Govern Azure Virtual Networks and Network Security Groups with PowerShell — Manage virtual networks and peering, create and audit NSGs, deploy Bastion and VPN gateways, and enable diagnostics with resource locks in one repeatable networking workflow.
- Build Azure Backup and Site Recovery Readiness with PowerShell — Configure backup policies, protect storage accounts, set up Site Recovery, manage blob lifecycle, and lock down recovery resources with diagnostics in one repeatable resilience workflow.
- Manage Exchange Online Litigation Hold, Retention, and eDiscovery with PowerShell — Apply litigation holds, build retention policies and tags, enable archives, open eDiscovery cases, and export mailbox audit logs with one repeatable compliance workflow.
- Audit Windows Firewall and Diagnose Network Connectivity with PowerShell — Report firewall rules, enable logging, list listening ports, and test connectivity, ports, and DNS resolution with one repeatable network audit and troubleshooting workflow.
- Govern Google Cloud Resources, IAM, and Storage with PowerShell — Audit IAM permissions, manage roles, configure firewall rules and bucket lifecycle, take disk snapshots, and enable logging and monitoring with one repeatable GCP governance workflow.
- Audit FortiGate Firewall Policies and Back Up Configuration with PowerShell — Create and reorder policies, back up configuration on a schedule, check HA sync, review traffic logs, and manage security profiles with one repeatable FortiGate workflow.
- Operate Nutanix AHV Virtual Machines and Clusters with PowerShell — Create and clone VMs, live-migrate workloads, take bulk snapshots, enter and exit host maintenance mode, and generate cluster health reports with one repeatable Nutanix workflow.
- Automate Jira Projects, Sprints, and Issues with PowerShell — Create projects, bulk-create and transition issues, run JQL searches, manage sprints, and export SLA and issue reports with one repeatable Jira administration workflow.
- Deploy Software and Report Inventory with PDQ and PowerShell — Build deployment packages, target dynamic collections, schedule deployments, run inventory scans, and report missing software with one repeatable PDQ workflow.
- Manage Chocolatey Packages and Patch Compliance with PowerShell — Bulk-install packages, report outdated software, schedule updates, audit versions, and run security vulnerability scans with one repeatable Chocolatey workflow.
- Audit AWS IAM Identity and Access Security with PowerShell — Manage IAM users, roles, and policies, rotate access keys, enable CloudTrail and Config, manage Secrets Manager, and alert on risky activity with one repeatable AWS security workflow.
- Monitor Windows Processes and Troubleshoot Performance with PowerShell — Find top CPU and memory consumers, detect leaks and spikes, identify the process using a port, and kill hung processes safely with one repeatable troubleshooting workflow.
- Manage and Recover Windows Services with PowerShell — Report service status, find stopped auto-start services, configure recovery options, audit service accounts, and restart services across servers with one repeatable service workflow.
- Export Microsoft 365 Tenant Reports and Audit Logs with PowerShell — Export the unified audit log, sign-in logs, MFA status, risky users, inactive users, license inventory, and service health with one repeatable Microsoft 365 reporting workflow.
- Run vSphere HA, DRS, and ESXi Host Operations with PowerShell — Configure HA and DRS, manage vMotion, cycle hosts through maintenance mode, check ESXi health, and deploy from templates with one repeatable vSphere cluster workflow.
- Manage Veeam Replication and Disaster Recovery Failover with PowerShell — Create and configure replication jobs, test replica failover, perform planned failover and failback, run instant VM recovery, and check SLA compliance with one repeatable Veeam DR workflow.
- Manage NetApp SnapMirror Replication and Recovery with PowerShell — Manage SnapMirror and SnapVault relationships, execute failover and resync, restore volumes from snapshots, apply snapshot policies, and monitor cluster health with one repeatable ONTAP workflow.
- Clean Up File Server Data and Reclaim Storage with PowerShell — Find large and duplicate files, delete old data by age, analyze storage growth, report folder sizes and file types, and sync data with Robocopy in one repeatable cleanup workflow.
- Manage Windows Network Configuration and SMB Shares with PowerShell — Report network configuration, set static IPs and DNS servers in bulk, manage SMB shares and sessions, and reset adapters and the network stack with one repeatable networking workflow.
- Contain Threats with CrowdStrike Real-Time Response and IOC Management — Isolate hosts in bulk, execute RTR commands and scripts, import and manage IOC lists, handle quarantined files, and export detection timelines with one repeatable containment workflow.
- Govern Kubernetes RBAC, Network Policies, and Autoscaling with PowerShell — Configure RBAC and network policies, manage namespaces and secrets, set up autoscaling and persistent volume claims, and monitor node health with one repeatable Kubernetes governance workflow.
- Manage Exchange Server Mailbox Databases and Transport Queues with PowerShell — Create mailbox databases, move mailboxes, mount and dismount databases, set quotas, monitor transport queues, and test mail flow with one repeatable Exchange Server workflow.
- Manage Cisco IOS VLANs, Trunks, and Port Security with PowerShell — Configure VLANs and trunk ports, enforce port security and 802.1X, tune spanning tree, build EtherChannels, and report interface statistics with one repeatable Cisco switching workflow.
- Audit Salesforce Org Security and Configuration with PowerShell — Export the setup audit trail, login history, failed logins, MFA status, profile permissions, sharing rules, and field-level security, and find inactive users with one repeatable Salesforce audit workflow.