# G1 AD Hygiene - EXECUTE **Command ID:** d49bb8dd-4916-4634-bf0c-c46bbcfcd81b **Exit:** 0 **Completed:** 2026-04-23T03:32:39.186512Z ## STDOUT ``` G1 AD Hygiene - 2026-04-22 20:32:32 -07:00 Host: CS-SERVER Mode: EXECUTE Backup dir: D:\Backups\g1-hygiene-2026-04-22-203232 ============================================================================ == 0. Pre-state backup (always runs) ============================================================================ [OK] Exported users-pre.csv [OK] Exported groups-pre.csv [OK] Exported ous-pre.csv [OK] Pre-state saved at D:\Backups\g1-hygiene-2026-04-22-203232 Rollback commands (if needed after execute): - proxyAddresses: Set-ADUser from users-pre.csv column ProxyAddresses - OU moves: Move-ADObject back to old DistinguishedName - Groups created today: Remove-ADGroup (safe since memberless) ============================================================================ == 1. OU=Excluded-From-Sync + move 4 role accounts ============================================================================ [DID] Created OU=Excluded-From-Sync [DID] Moved Culinary: OU=Culinary,OU=Departments,DC=cascades,DC=local -> OU=Excluded-From-Sync,DC=cascades,DC=local [DID] Moved Receptionist: CN=Users,DC=cascades,DC=local -> OU=Excluded-From-Sync,DC=cascades,DC=local [DID] Moved saleshare: OU=Marketing,OU=Departments,DC=cascades,DC=local -> OU=Excluded-From-Sync,DC=cascades,DC=local [DID] Moved directoryshare: CN=Users,DC=cascades,DC=local -> OU=Excluded-From-Sync,DC=cascades,DC=local ============================================================================ == 2. Populate proxyAddresses (34 users - live data from M365 Graph 2026-04-22) ============================================================================ [DID] Allison.Reibschied before: after: SMTP:Allison.Reibschied@cascadestucson.com mail=Allison.Reibschied@cascadestucson.com [DID] Alyssa.Brooks before: after: SMTP:alyssa.brooks@cascadestucson.com mail=alyssa.brooks@cascadestucson.com [DID] Ashley.Jensen before: after: SMTP:ashley.jensen@cascadestucson.com; smtp:ashley.jenson@cascadestucson.com mail=ashley.jensen@cascadestucson.com [DID] britney.thompson before: after: SMTP:Britney.Thompson@cascadestucson.com mail=Britney.Thompson@cascadestucson.com [DID] Cathy.Kingston before: after: SMTP:cathy.kingston@cascadestucson.com mail=cathy.kingston@cascadestucson.com [DID] Christina.DuPras before: after: SMTP:christina.dupras@cascadestucson.com mail=christina.dupras@cascadestucson.com [DID] Christine.Nyanzunda before: after: SMTP:christine.nyanzunda@cascadestucson.com mail=christine.nyanzunda@cascadestucson.com [DID] Christopher.Holick before: after: SMTP:christopher.holick@cascadestucson.com mail=christopher.holick@cascadestucson.com [DID] Crystal.Rodriguez before: after: SMTP:crystal.rodriguez@cascadestucson.com; smtp:crystal.suszek@cascadestucson.com mail=crystal.rodriguez@cascadestucson.com [DID] howard before: after: SMTP:dax.howard@cascadestucson.com; smtp:cara.lespron@cascadestucson.com mail=dax.howard@cascadestucson.com [DID] JD.Martin before: after: SMTP:jd.martin@cascadestucson.com mail=jd.martin@cascadestucson.com [DID] John.Trozzi before: after: SMTP:john.trozzi@cascadestucson.com mail=john.trozzi@cascadestucson.com [DID] Julian.Crim before: after: SMTP:julian.crim@cascadestucson.com mail=julian.crim@cascadestucson.com [DID] karen.rossini before: after: SMTP:karen.rossini@cascadestucson.com mail=karen.rossini@cascadestucson.com [DID] Kyla.QuickTiffany before: after: SMTP:kyla.quicktiffany@cascadestucson.com mail=kyla.quicktiffany@cascadestucson.com [DID] lauren.hasselman before: after: SMTP:lauren.hasselman@cascadestucson.com mail=lauren.hasselman@cascadestucson.com [DID] Lois.Lane before: after: SMTP:lois.lane@cascadestucson.com mail=lois.lane@cascadestucson.com [DID] Lupe.Sanchez before: after: SMTP:lupe.sanchez@cascadestucson.com mail=lupe.sanchez@cascadestucson.com [DID] Matt.Brooks before: after: SMTP:matthew.brooks@cascadestucson.com mail=matthew.brooks@cascadestucson.com [DID] Megan.Hiatt before: after: SMTP:megan.hiatt@cascadestucson.com mail=megan.hiatt@cascadestucson.com [DID] Meredith.Kuhn before: after: SMTP:meredith.kuhn@cascadestucson.com mail=meredith.kuhn@cascadestucson.com [DID] Michelle.Shestko before: after: SMTP:michelle.shestko@cascadestucson.com mail=michelle.shestko@cascadestucson.com [DID] Ramon.Castaneda before: after: SMTP:ramon.castaneda@cascadestucson.com; smtp:ramon.castanada@cascadestucson.com; smtp:ramon.casteneda@cascadestucson.com mail=ramon.castaneda@cascadestucson.com [DID] Ray.Rai before: after: SMTP:ray.rai@cascadestucson.com mail=ray.rai@cascadestucson.com [DID] Richard.Adams before: after: SMTP:richard.adams@cascadestucson.com mail=richard.adams@cascadestucson.com [DID] Sebastian.Leon before: after: SMTP:sebastian.leon@cascadestucson.com mail=sebastian.leon@cascadestucson.com [DID] Sharon.Edwards before: after: SMTP:sharon.edwards@cascadestucson.com mail=sharon.edwards@cascadestucson.com [DID] Shelby.Trozzi before: after: SMTP:Shelby.Trozzi@cascadestucson.com mail=Shelby.Trozzi@cascadestucson.com [DID] Sheldon.Gardfrey before: after: SMTP:sheldon.gardfrey@cascadestucson.com mail=sheldon.gardfrey@cascadestucson.com [DID] Shontiel.Nunn before: after: SMTP:shontiel.nunn@cascadestucson.com mail=shontiel.nunn@cascadestucson.com [DID] Susan.Hicks before: after: SMTP:susan.hicks@cascadestucson.com mail=susan.hicks@cascadestucson.com [DID] sysadmin before: after: SMTP:sysadmin@cascadestucson.com mail=sysadmin@cascadestucson.com [DID] Tamra.Matthews before: after: SMTP:tamra.matthews@cascadestucson.com; smtp:tamra.johnson@cascadestucson.com mail=tamra.matthews@cascadestucson.com [DID] Veronica.Feller before: after: SMTP:veronica.feller@cascadestucson.com mail=veronica.feller@cascadestucson.com ============================================================================ == 3. Create 16 SG-* security groups (CA / file-share / break-glass) ============================================================================ [DID] Created SG-External-Signin-Allowed [DID] Created SG-Caregivers [DID] Created SG-FrontDesk [DID] Created SG-CourtesyPatrol [DID] Created SG-Drivers [DID] Created SG-Management-RW [DID] Created SG-Sales-RW [DID] Created SG-Culinary-RW [DID] Created SG-IT-RW [DID] Created SG-Receptionist-RW [DID] Created SG-Directory-RW [DID] Created SG-Server-RW [DID] Created SG-Chat-RW [DID] Created SG-Office-PHI-External [DID] Created SG-Office-PHI-Internal [DID] Created SG-CA-BreakGlass ============================================================================ == 4. DisplayName cosmetic fixes (3 users) ============================================================================ [DID] Crystal.Rodriguez DisplayName: 'Crystal Rodriguez' -> 'Crystal Rodriguez' [DID] howard DisplayName: 'howard' -> 'Howard Dax' [DID] Cathy.Kingston DisplayName: 'Cathy.Kingston' -> 'Cathy Kingston' ============================================================================ == 5. Summary ============================================================================ Mode: EXECUTE Created: 17 Moved: 4 Updated: 37 Skipped: 0 Errors: 0 Backup dir: D:\Backups\g1-hygiene-2026-04-22-203232 EXECUTE complete. Recommended next steps: 1. Re-run in DRY-RUN to confirm 0 [WOULD] entries (idempotency check) 2. Export users-post.csv for the audit trail (in D:\Backups\g1-hygiene-2026-04-22-203232) 3. Proceed to Gate G2 (M365 role-account shared-mailbox conversion) Completed at 2026-04-22 20:32:38 -07:00 ``` stderr: ``` ```