Managing a new app means documenting who has access. Let’s start with Active Directory groups, assuming the previous SysAdmin(s) consistently named AD groups for applications.
Get-ADGroup -filter {name -like "*foo*"}This PowerShell command will return all the details for any AD group containing the string “foo”. Replace foo with your app name.