active-directory

Use Get-ADUser with filters to query Active Directory users by SamAccountName, email, or other attributes. The Skill identifies matching users across your domain and returns their enabled status, lockout state, and organizational unit location for rapid lookups.

Yes. Query group memberships with Get-ADGroupMember and inspect organizational unit hierarchies to see how users, groups, and computers are organized. The Skill retrieves nested memberships and OU assignments to map your domain structure.

Use Unlock-ADAccount to reset lockout flags on user accounts. The Skill manages account unlock operations directly, allowing administrators to restore access without manual directory edits or password resets.

You need the ActiveDirectory module (included with RSAT—Remote Server Administration Tools) installed on Windows, or ADSI as a fallback. The Skill requires domain connectivity and sufficient permissions to read or modify AD objects.

Run gpresult commands through the Skill to display Group Policy Object application status and policy assignments. This verifies which GPOs are active on computers and users, helping audit policy compliance and troubleshoot application failures.

Yes. Filter queries by OU path to search users, groups, and computers across multiple organizational units in bulk. The Skill scales queries to large domains and returns structured results for batch audits, migrations, or compliance checks.