Upgrade Domain Controllers to a Newer Windows Server
Run adprep /forestprep and adprep /domainprep /gpprep before an in-place domain controller upgrade, with the supported paths from Server 2008 to 2022.
AAD Connect / Cloud Sync with Existing Cloud Users
Avoid duplicate users when linking an existing Office 365 tenant to AD Connect: scripts to match users, sync proxyAddresses and set ImmutableIDs.
Manage Local Admins with Group Policy on Workstations
Strip local admins with Group Policy and give admin rights only to the workstation's Managed By user, via item-level targeting and two LDAP queries.