Browse Blog Posts by Tags

All Tags » PowerShell and Active Directory (RSS)

MVP WordPress Blogs

Browse Blog Posts by Tags

Showing related tags and posts for the Blogs application. See all tags in the site

Removing a user from a group

Adding and removing users from groups is a standard administrative task for AD ## remove users from groups $ou = "OU=BlogTests,DC=Manticore,DC=org" "`nMicrosoft" $name = "UserA" Get-ADUser -Identity $name -Properties * | Remove-ADPrincipalGroupMembership -MemberOf GroupGblSecA...

Posted to Richard Siddaway's Blog by RichardSiddaway on Sun, Mar 11 2012
Filed under: Filed under: PowerShell and Active Directory
Converting group scope - to domain local

The final version to convert to a domain local shouldn’t hold any surprises ## converts a security group to a Domain Local group function ConvertTo-DomainLocalSecurityGroup { [ CmdletBinding ( SupportsShouldProcess = $true ) ] param ( [string] $groupname , [ ValidateSet ( "M" , "P"...

Posted to Richard Siddaway's Blog by RichardSiddaway on Sat, Mar 10 2012
Filed under: Filed under: PowerShell and Active Directory
Converting Group scope–to Global

This similar to the conversion to Universal ## converts a security group to a Global group function ConvertTo-GlobalSecurityGroup { [ CmdletBinding ( SupportsShouldProcess = $true ) ] param ( [string] $groupname , [ ValidateSet ( "M" , "P" , "Q" , "S" ) ] [string...

Posted to Richard Siddaway's Blog by RichardSiddaway on Sat, Mar 10 2012
Filed under: Filed under: PowerShell and Active Directory
Converting group scope–to Universal

We’ve seen how to create the different group type – but we may create a group as a global group and need to change it to a another. This isn’t a free range change process: Universal and Domain Local can be converted to the other Universal and Global can be converted to the other There is no direct conversion...

Posted to Richard Siddaway's Blog by RichardSiddaway on Sat, Mar 10 2012
Filed under: Filed under: PowerShell and Active Directory
Get all groups

We have just about finished with users. While I’m thinking about what else we need to do with users we’ll start digging into groups a bit more starting with listing the groups in the domain ## lists the groups in a domain function getgrouptype { param ( $grouptype ) $gt = New-Object -TypeName PSObject...

Posted to Richard Siddaway's Blog by RichardSiddaway on Fri, Mar 9 2012
Filed under: Filed under: PowerShell and Active Directory
Reading the telephone tab

Searching for users with attributes set on the telephone tab is similar to other searches function get-TelephoneTab { [ CmdletBinding ( SupportsShouldProcess = $true ) ] param ( [ parameter ( ParameterSetName = "Home" ) ] [switch] $homephone , [ parameter ( ParameterSetName = "Pager"...

Posted to Richard Siddaway's Blog by RichardSiddaway on Thu, Mar 8 2012
Filed under: Filed under: PowerShell and Active Directory
Get Schema version

Just for a change I thought we’d have a look at something different. The schema is often treated as a big scary thing that we shouldn’t mess with. Many organisations don’t like upgrading the schema. Lets start by looking at the schema version. This can be easily read but understanding what the...

Posted to Richard Siddaway's Blog by RichardSiddaway on Wed, Mar 7 2012
Filed under: Filed under: PowerShell and Active Directory
User naming conventions

It is a very good idea to have a naming convention for user names in your AD. It is an even better idea to enforce that convention by automating user creation. There are many possible conventions: Firstname Lastname Lastname Firstname LASTNAME Firstname and so on. I tend to use LASTNAME Firstname...

Posted to Richard Siddaway's Blog by RichardSiddaway on Tue, Mar 6 2012
Filed under: Filed under: PowerShell and Active Directory
Removing part of the Notes field

There will be occasions when you need to remove part of the Notes field $ou = "OU=BlogTests,DC=Manticore,DC=org" $old = @" Just a bit more info "@ "`nMicrosoft" $name = "UserA" $p = Get-ADUser -Identity $name -Properties * $note = ( $p . info ) . Replace ( $old...

Posted to Richard Siddaway's Blog by RichardSiddaway on Mon, Mar 5 2012
Filed under: Filed under: PowerShell and Active Directory
Add to Notes field

You may need to add extra information to the notes field $ou = "OU=BlogTests,DC=Manticore,DC=org" $extra = @" Just a bit more info "@ "`nMicrosoft" $name = "UserA" $p = Get-ADUser -Identity $name -Properties * $note = $p . info + $extra Set-ADUser -Identity $name...

Posted to Richard Siddaway's Blog by RichardSiddaway on Mon, Mar 5 2012
Filed under: Filed under: PowerShell and Active Directory
Discover users that have Notes set

A field like the Notes field can be a dumping ground for all sorts of stuff. If you want to discover what Notes have been set then try this "`nMicrosoft" Get-ADUser -LDAPFilter "(&(objectclass=user)(objectcategory=user)(info=*))" -Properties * | Format-Table Name , DistinguishedName...

Posted to Richard Siddaway's Blog by RichardSiddaway on Mon, Mar 5 2012
Filed under: Filed under: PowerShell and Active Directory
Clear Note on Telephone tab

Clearing the Notes section is very like setting the initial value except we pass a simple blank string $ou = "OU=BlogTests,DC=Manticore,DC=org" $note = " " "`nMicrosoft" $name = "UserA" Get-ADUser -Identity $name | Set-ADUser -Replace @{ info = $note } "`nAD...

Posted to Richard Siddaway's Blog by RichardSiddaway on Mon, Mar 5 2012
Filed under: Filed under: PowerShell and Active Directory
Set Note on Telephone tab

The telephone tab in AD Users and Computers has a Notes section. This can be manipulated in a similar manner to the street address field on the Address tab. The Notes field on the GUI stores its data in the info attribute. $ou = "OU=BlogTests,DC=Manticore,DC=org" $note = @" Once upon a...

Posted to Richard Siddaway's Blog by RichardSiddaway on Sun, Mar 4 2012
Filed under: Filed under: PowerShell and Active Directory
Set Users Telephone tab

On the user properties dialog there is a tab called Telephones. This enables us to set phones numbers – primary & others for: Home Pager Mobile Fax IPphone There is also a Notes box which we’ll look at separately Instead of doing a single script for each type of phone I decided to use some of the...

Posted to Richard Siddaway's Blog by RichardSiddaway on Sun, Mar 4 2012
Filed under: Filed under: PowerShell and Active Directory
Delete a computer object

I’m cleaning out a few virtual machines – deleting the Windows 8 developer previews now I’ve got the beta VMs created. Also means I need to clean up AD so its a good opportunity to look at deleting computer objects $dom = [System.DirectoryServices.ActiveDirectory.Domain] :: GetCurrentDomain ( ...

Posted to Richard Siddaway's Blog by RichardSiddaway on Sat, Mar 3 2012
Filed under: Filed under: PowerShell and Active Directory
Home folders using local path

On the profile tab there are two options for setting the home folder. We have already seen the "Connect" option where we supply a drive letter and UNC path. http://msmvps.com/blogs/richardsiddaway/archive/2012/02/29/setting-a-users-home-directory.aspx The alternative is to use the Local...

Posted to Richard Siddaway's Blog by RichardSiddaway on Fri, Mar 2 2012
Filed under: Filed under: PowerShell and Active Directory
Get profile paths

What profile paths are your users accessing? This could be important for troubleshooting "`nMicrosoft" Get-ADUser -LDAPFilter "(&(objectclass=user)(objectcategory=user)(profilepath=*))" -Properties * | Format-Table Name , DistinguishedName , ProfilePath -AutoSize "...

Posted to Richard Siddaway's Blog by RichardSiddaway on Thu, Mar 1 2012
Filed under: Filed under: PowerShell and Active Directory
Set user profile path

If you store profiles on the network then the user needs to know how to find their profile when they login. Setting the user profile path is similar to the other attributes on the profile tab $ou = "OU=BlogTests,DC=Manticore,DC=org" "`nMicrosoft" $name = "UserA" Get-ADUser...

Posted to Richard Siddaway's Blog by RichardSiddaway on Thu, Mar 1 2012
Filed under: Filed under: PowerShell and Active Directory
Finding the logon scripts

What logon scripts are in your environment "`nMicrosoft" Get-ADUser -LDAPFilter "(&(objectclass=user)(objectcategory=user)(scriptpath=*))" -Properties * | Format-Table Name , DistinguishedName , ScriptPath -AutoSize "`nAD provider" Get-ChildItem -Filter "(&...

Posted to Richard Siddaway's Blog by RichardSiddaway on Wed, Feb 29 2012
Filed under: Filed under: PowerShell and Active Directory
Set user’s logon script

Staying on the profile tab we can also set a logon script $ou = "OU=BlogTests,DC=Manticore,DC=org" "`nMicrosoft" $name = "UserA" Get-ADUser -Identity $name | Set-ADUser -ScriptPath "ls1.cmd" "`nAD provider" $name = "UserB" $dn = "cn=$name...

Posted to Richard Siddaway's Blog by RichardSiddaway on Wed, Feb 29 2012
Filed under: Filed under: PowerShell and Active Directory

Page 3 of 11 (213 items) < Previous 1 2 3 4 5 Next > ... Last »

Questions? Contact Susan at Susan-at-msmvps.com. Each post's copyright held by the original author. All rights reserved. Blog site is an independent site not sponsored by Microsoft.
Our servers would like to thank www.ownwebnow.com and www.exchangedefender.com. We wouldn't be here without the generosity of Vlad Mazek and his companies.

Powered by Community Server (Commercial Edition), by Telligent Systems

Theme based on the Paperclip Blog Theme included in Community Server.
Enhanced to a Site-Wide Theme by Interscape Technologies.