FAQ

Where do I install the module?

Kind of up to you. Any windows device on the domain will do, though I always recommend not installing anything on Domain Controllers. These should be T0 resources, with a considerably reduced attack surface. Therefor, I suggest installing on an app/automation server, though your own windows device should be fine too, as long as the script is run as a user with the ability to edit and disable Active Directory objects.