The final purpose of this thesis is to create a PowerShell script that will do some basic security checks on Windows Active Directory systems and produce a report. To achieve that we split the thesis into 3 parts. The first part contains the best tactics to make our AD system ISO compliant. The second part contains the most known AD vulnerabilities and the ways anyone can expose them. The third part contains a description of how the PowerShell script was developed. The script itself can be found in Annex A.