active-directory

Query and manage Active Directory users, groups, computers, OUs, and GPO status.

Updated Dec 21, 2025

Search Tags:#GPO #Get-ADUser #RSAT #active-directory #group-membership #AD

Ready to run

npx skills add https://github.com/djcyphers/network-copilot-cli --skill active-directory

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: active-directory
Source: https://github.com/djcyphers/network-copilot-cli/tree/main/skills/active-directory
Command: npx skills add https://github.com/djcyphers/network-copilot-cli --skill active-directory

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates querying and managing Active Directory objects (users, groups, computers, OUs, GPO status) from a central tool.

Core Features & Use Cases

Find Users/Computers: Filter by name, email, status, or OU.
Group & OU Insights: Inspect group memberships and OU structures.
GPO Status & Passwords: Check GPO application status and unlock accounts when needed.

Quick Start

Query a user by SamAccountName to check Enabled/Locked status, or list a user’s group memberships.

Frequently Asked Questions about active-directory

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I query Active Directory users by name or email?▼

Use Get-ADUser with filters to query Active Directory users by SamAccountName, email, or other attributes. The Skill identifies matching users across your domain and returns their enabled status, lockout state, and organizational unit location for rapid lookups.

Can I check group memberships and OU structures in Active Directory?▼

Yes. Query group memberships with Get-ADGroupMember and inspect organizational unit hierarchies to see how users, groups, and computers are organized. The Skill retrieves nested memberships and OU assignments to map your domain structure.

How do I unlock a locked Active Directory account?▼

Use Unlock-ADAccount to reset lockout flags on user accounts. The Skill manages account unlock operations directly, allowing administrators to restore access without manual directory edits or password resets.

What do I need to query Active Directory from PowerShell?▼

You need the ActiveDirectory module (included with RSAT—Remote Server Administration Tools) installed on Windows, or ADSI as a fallback. The Skill requires domain connectivity and sufficient permissions to read or modify AD objects.

How do I check GPO application status across my domain?▼

Run gpresult commands through the Skill to display Group Policy Object application status and policy assignments. This verifies which GPOs are active on computers and users, helping audit policy compliance and troubleshoot application failures.

Can I automate Active Directory queries across multiple organizational units?▼

Yes. Filter queries by OU path to search users, groups, and computers across multiple organizational units in bulk. The Skill scales queries to large domains and returns structured results for batch audits, migrations, or compliance checks.