n0hup@relay:~$ ./Invoke-RelayADHealth.ps1 -Mode Demo

RELAY / RLY-01 · COMMUNITY EDITION · v0.1.0

AD Health Toolkit

Read the directory. Make the evidence visible.

A free PowerShell toolkit for read-only observations of on-premises Active Directory. Collect ten diagnostic areas and review the results in local HTML and CSV reports.

[ DOWNLOAD v0.1.0 ZIP ]View synthetic demo →Source & README →

Community Edition — tested in real conditions. Validated in live Windows Server / Active Directory environments; offline tests also pass on macOS / PowerShell 7.6.9. This is not a production certification or a complete AD security audit.

01 / WHAT IT COLLECTS

Errors, skipped checks and incomplete results stay visible. There is no overall “healthy” score: a successful check confirms only its named observation. SYSVOL access does not prove DFSR consistency; time status needs manual interpretation; direct group membership is not a complete privilege graph.

Read the full coverage and limitations →

02 / START WITH THE OFFLINE DEMO

Download and extract the ZIP, open PowerShell in the extracted toolkit folder, then run:

./Invoke-RelayADHealth.ps1 -Mode Demo

The demo reads bundled fictional observations only. It makes no directory queries and requires no RSAT or secrets. PowerShell 7 can run the demo on Windows, macOS or Linux. Open the report path printed at the end.

Expected demo exit code: 2. The sample deliberately includes a simulated DNS collection error and warnings to show how incomplete evidence is reported.

[ OPEN SYNTHETIC REPORT ]Quick start guide →

The browser report contains synthetic data only. Opening it does not run the toolkit or inspect your environment.

03 / LIVE REQUIREMENTS & DATA HANDLING

Runtime
Windows PowerShell 5.1, 64-bit. PowerShell 7 live mode is intentionally blocked in v0.1.
Prerequisites
Installed RSAT ActiveDirectory and GroupPolicy tools, approved domain connectivity and an existing Windows identity with the necessary read access.
Scope
One configured domain, plus forest role ownership and forest-root privileged groups. Explicit configuration, bounded collection and error reporting.
Data
Live reports can expose internal names, memberships and operational details. Store them privately; do not upload them to public repositories or send them through the initial enquiry form.

No remediation, dependency installation, telemetry or automatic report upload. Review the source and complete lab acceptance before use in an approved environment.

Requirements · Validation evidence & lab checks · Security notes

04 / RELEASE & SOURCE

The package includes PowerShell source, JSON configuration, README, requirements, offline tests, test evidence, synthetic samples and an MIT licence. The implementation is AI-assisted and published for subsequent manual maintainer review.

[ RELEASE v0.1.0 ]
[ PACKAGED ZIP ]
[ ZIP SHA-256 ]
[ BROWSE SOURCE ON CODEBERG ]

Use the packaged ZIP with its matching SHA-256 file for an exact download check. Automatically generated source archives may use different line endings.

05 / NEED CHECKS FOR YOUR ENVIRONMENT?

Community Edition is free to use under MIT. Tailored work can add agreed checks, reporting, integrations and evidence interpretation, with scope and support defined before work begins.

[ REQUEST TAILORED CHECKS ]Explore engineering services →

Start with a short, non-confidential brief. Do not include credentials or a live directory report.