9. Miscellaneous Scripts and Resources for Further Learning | Active Directory with PowerShell

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Active Directory with PowerShell

By : Pamarthi Venkata Sitaram, YELLAPRAGADA U PADMAVATHI

4 (9)

Active Directory with PowerShell

4 (9)

By: Pamarthi Venkata Sitaram, YELLAPRAGADA U PADMAVATHI

Overview of this book

If you are looking to automate repetitive tasks in Active Directory management using the PowerShell module, then this book is for you. Any experience in PowerShell would be an added advantage.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Let's Get Started

1. Let's Get Started

Ways to automate Active Directory operations

Summary

2. Managing User and Computer Objects

2. Managing User and Computer Objects

Managing user accounts

Modifying user properties

Deleting user accounts

Managing computer accounts

Deleting computer accounts

Summary

3. Working with Active Directory Groups and Memberships

3. Working with Active Directory Groups and Memberships

Creating different types of security groups

Searching and modifying group object information

Adding members to a group

Listing members of a security group in Active Directory

Removing members from an AD group

Deleting a security group

Summary

4. Configuring Group Policies

4. Configuring Group Policies

Installing the Group Policy module

Querying Group Policies

Creating and linking Group Policies

Working with links, enforcements, and order of GPOs

Working with Group Policy permissions

Updating Group Policy and generating Resultant Set of Policy

Removing Group Policy links and objects

Summary

5. Managing Domains, Organizational Units, Sites, and Subnets

5. Managing Domains, Organizational Units, Sites, and Subnets

Managing domains

Managing Organizational Units

Managing sites and subnets

Summary

6. Advanced AD Operations Using PowerShell

6. Advanced AD Operations Using PowerShell

Installing a new domain

Adding additional domain controllers

Obtaining an Active Directory replication status

Managing Fine-Grained Password Policies

Transferring FSMO roles

Restoring deleted objects

Demoting domain controllers and removing domains

Summary

7. Managing DFS-N and DFS-R Using PowerShell

7. Managing DFS-N and DFS-R Using PowerShell

Installing DFS roles

Managing DFS-N

Managing DFS-R

Summary

8. Managing Active Directory DNS Using PowerShell

8. Managing Active Directory DNS Using PowerShell

Installing and configuring a DNS server

Working with root hints and forwarders

Managing DNS zones

Creating, modifying, and deleting DNS records

Managing DNS Clients

Summary

9. Miscellaneous Scripts and Resources for Further Learning

9. Miscellaneous Scripts and Resources for Further Learning

Checking whether a user, group, computer, or an OU exists

Getting membership of a user, computer, and group

Resetting the password for multiple user accounts

Bulk creation of user accounts

Getting the password expiry date of user accounts

Finding all the disabled user accounts

Getting all domain controllers and their site names in the forest

Moving objects from one OU to another

Finding inactive computers in Active Directory

Creating groups in bulk

Exporting an AD group member's details to CSV

Finding empty groups in Active Directory

Verifying whether a user is a member of the given group or not

Comparing AD groups' membership

Resources for further learning

Index

Index

Finding all the disabled user accounts

Finding disabled user accounts in Active Directory is very simple. Each user object returned by the Get-ADuser cmdlet will have an Enabled property, which holds the value False when the user account is in the disabled state. Examining this value for all the user accounts in the domain will tell us how many accounts are currently in the disabled state.

The following script will query the current domain for disabled users and the exports to the CSV filename disabled-users.csv in the C:\temp folder. Make sure that the c:\temp folder exists, or you change the $OutputFilePath variable's value in the code to a folder path where you want the output to be placed:

Function Find-DisabledUsers {
[CmdletBinding()]
param(
)
$OutputFilePath = "c:\temp\Disabled-Users.csv"
Add-Content -Path $OutputFilePath -Value "UserName, DisplayName,  DistinguishedName"
$DisabledUsers = Get-ADUser -Filter { Enabled -eq $false } - Properties DisplayName
foreach($User in $disabledUsers...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Active Directory with PowerShell

Search

Your notes and bookmarks