PowerShell as an AD user management tool

User management can be quite a challenge for Active Directory (AD) administrators day in and day out. Many administrators use Microsoft's PowerShell technology to perform basic AD user management tasks. Below are some key PowerShell scripts and commands for working with AD users.

Creating AD user

Import-CSV test.csv | foreach {New-ADUser -SamAccountName $_.SamAccountName -Name $_.Name -Surname $_.Surname -GivenName $_.GivenName -Path "OU=Finance,OU=UserAccounts,DC=FABRIKAM,DC=COM" -AccountPassword (ConvertTo-SecureString -AsPlainText $_.password -Force) -Enabled $true}

Modifying an AD user

Import-CSV test.csv | foreach {Set-ADUser -Identity $_.sAMAccountName -Description "testing description"}

Adding Group Membership (Adding user to a group)

Import-CSV test.csv | foreach {Add-ADGroupMember -Identity "Domain guests" -Members $_.sAMAccountName}

Enable/disable AD user

Enable-ADAccount -identity testUser
Disable-ADAccount -identity testUser

Moving an AD user

Move-ADObject -Identity "CN=testuser1,DC=Domain,DC=com" -TargetPath "OU=testOU,DC=Domain,DC=Com"

Changing password

Set-ADAccountPassword -Identity testuser -NewPassword new123 -OldPassword old123

Unlocking AD account

Unlock-ADAccount -Identity testuser

Removing an AD user

Remove-ADUser -Identity testuser

Creating an Office 365 user

New-Msoluser -DisplayName testuser -userprincipalname testuser@test.onmicrosoft.com -usagelocation US -licenseAssignment test:ENTERPRISEPACK