🔐 Cuentas/credenciales: en Vaultwarden/Bitwarden. Usa Run as cuando sea necesario.
# Estado AD básico
dcdiag /q
repadmin /replsummary
repadmin /showrepl *
# Usuarios privilegiados
Get-ADGroupMember 'Domain Admins' | Select Name,SamAccountName
# DNS zonas
Get-DnsServerZone | Select ZoneName, ZoneType, IsDsIntegrated
# DHCP scopes
Get-DhcpServerv4Scope | Select ScopeId, Name, State, StartRange, EndRange
# GPOs aplicadas a un equipo
gpresult /h C:\Temp\gp.html
# Lista de GPOs
Get-GPO -All | Select DisplayName,CreationTime,ModificationTime
# Servicios no en Running
Get-Service | ? Status -ne Running | Sort Status,Name | ft -Auto
# Tareas programadas
Get-ScheduledTask | Select TaskName, State, LastRunTime, NextRunTime | Sort TaskName
# Errores 24h en Application
Get-WinEvent -FilterHashtable @{LogName='Application';Level=2;StartTime=(Get-Date).AddDays(-1)} |
Select TimeCreated, Id, ProviderName, Message -First 50
# Resumen SO y último boot
Get-ComputerInfo | Select CsName, WindowsProductName, WindowsVersion, OsBuildNumber
(Get-CimInstance win32_operatingsystem).LastBootUpTime
# Red básica
Test-NetConnection -ComputerName <DESTINO> -Port <PUERTO>; Resolve-DnsName <FQDN>
# Disco
Get-PSDrive -PSProvider FileSystem | Select Name,@{n='GB_Free';e={[math]::Round($_.Free/1GB,1)}}
Runbook
dcdiag, repadmin).