Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Active Directory with PowerShell

By : Pamarthi Venkata Sitaram, YELLAPRAGADA U PADMAVATHI

4 (9)

Active Directory with PowerShell

4 (9)

By: Pamarthi Venkata Sitaram, YELLAPRAGADA U PADMAVATHI

Overview of this book

If you are looking to automate repetitive tasks in Active Directory management using the PowerShell module, then this book is for you. Any experience in PowerShell would be an added advantage.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Let's Get Started

1. Let's Get Started

Ways to automate Active Directory operations

Summary

2. Managing User and Computer Objects

2. Managing User and Computer Objects

Managing user accounts

Modifying user properties

Deleting user accounts

Managing computer accounts

Deleting computer accounts

Summary

3. Working with Active Directory Groups and Memberships

3. Working with Active Directory Groups and Memberships

Creating different types of security groups

Searching and modifying group object information

Adding members to a group

Listing members of a security group in Active Directory

Removing members from an AD group

Deleting a security group

Summary

4. Configuring Group Policies

4. Configuring Group Policies

Installing the Group Policy module

Querying Group Policies

Creating and linking Group Policies

Working with links, enforcements, and order of GPOs

Working with Group Policy permissions

Updating Group Policy and generating Resultant Set of Policy

Removing Group Policy links and objects

Summary

5. Managing Domains, Organizational Units, Sites, and Subnets

5. Managing Domains, Organizational Units, Sites, and Subnets

Managing domains

Managing Organizational Units

Managing sites and subnets

Summary

6. Advanced AD Operations Using PowerShell

6. Advanced AD Operations Using PowerShell

Installing a new domain

Adding additional domain controllers

Obtaining an Active Directory replication status

Managing Fine-Grained Password Policies

Transferring FSMO roles

Restoring deleted objects

Demoting domain controllers and removing domains

Summary

7. Managing DFS-N and DFS-R Using PowerShell

7. Managing DFS-N and DFS-R Using PowerShell

Installing DFS roles

Managing DFS-N

Managing DFS-R

Summary

8. Managing Active Directory DNS Using PowerShell

8. Managing Active Directory DNS Using PowerShell

Installing and configuring a DNS server

Working with root hints and forwarders

Managing DNS zones

Creating, modifying, and deleting DNS records

Managing DNS Clients

Summary

9. Miscellaneous Scripts and Resources for Further Learning

9. Miscellaneous Scripts and Resources for Further Learning

Checking whether a user, group, computer, or an OU exists

Getting membership of a user, computer, and group

Resetting the password for multiple user accounts

Bulk creation of user accounts

Getting the password expiry date of user accounts

Finding all the disabled user accounts

Getting all domain controllers and their site names in the forest

Moving objects from one OU to another

Finding inactive computers in Active Directory

Creating groups in bulk

Exporting an AD group member's details to CSV

Finding empty groups in Active Directory

Verifying whether a user is a member of the given group or not

Comparing AD groups' membership

Resources for further learning

Index

Index

Searching and modifying group object information

Searching Active Directory for the presence of a group is similar to searching users and groups. A cmdlet called Get-ADGroup from the Active Directory module can be used to get group object information.

For example, we can use the following command to get display names of all groups in Active Directory:

Get-ADGroup -Filter * | select Name

By specifying asterisk (*) as an argument to the -Filter parameter, we are querying all groups in Active Directory and then displaying the value of the Name property using the select statement.

To search for a specific group by name, we can pass the name of the group to the -Filter parameter, as shown in the following command:

Get-ADGroup -Filter "Name -eq 'Test Group1'"

This command searches Active Directory for groups with the name that exactly matches Test Group1 and returns the group object if present; otherwise, no output is seen.

There is another parameter that helps in performing the...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Active Directory with PowerShell

Search

Your notes and bookmarks