0% found this document useful (0 votes)
44 views3 pages

Bulk User Management in Active Directory

This document provides PowerShell commands for performing various tasks in Active Directory like setting passwords for bulk users, getting user details for a single or multiple users, exporting user lists to CSV files, changing display names, finding group memberships, disabling and restoring accounts, and more. It includes commands for getting, adding, removing, and modifying user and group properties.

Uploaded by

Abhijeet Kumar
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
44 views3 pages

Bulk User Management in Active Directory

This document provides PowerShell commands for performing various tasks in Active Directory like setting passwords for bulk users, getting user details for a single or multiple users, exporting user lists to CSV files, changing display names, finding group memberships, disabling and restoring accounts, and more. It includes commands for getting, adding, removing, and modifying user and group properties.

Uploaded by

Abhijeet Kumar
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

To set password for bulk user

$DGs = Get-Content D:\Deny\[Link]


Foreach ($DG in $DGs) { Get-ADUser -Identity �$DG� | Set-ADAccountPassword -Reset
-NewPassword (ConvertTo-SecureString -AsPlainText 'pass1234$' -Force) }

For single user

Get-ADUser -Identity �[Link]� -Properties �LastLogonDate�

To Get user list


get-aduser -filter * -Properties * | select
cn,sn,displayname,Manager,title,Department,EmailAddress,PasswordLastSet,Enabled,cre
ated,UserPrincipalName,samaccountname,mail,lastlogondate | export-csv
d:\ad\[Link] -NoTypeInformation

To get Computer List


get-adcomputer -filter * -Properties * | select
CN,LastLogonDate,OperatingSystem,OperatingSystemServicePack | export-csv
C:\Users\[Link]\Desktop\[Link] -NoTypeInformation

to change display name


import-csv [Link] | % {set-aduser -Identity $_.sam -DisplayName $_.displayname}

To find which group memberof


$DGs = Get-Content�C:\Users\ibm-win\Desktop\[Link]�
get-aduser $DGs -Properties memberof | select -expand memberof | Export-csv
C:\Users\ptadmin\Desktop\[Link]

To get user details


Get-ADUser -identity [Link] -properties *

Disabling AD account
Import-Csv C:\Deny\[Link] | ForEach { Set-ADuser -Identity $_.sam -Enabled
$false}

Moving to Disable OU
Import-Csv C:\Deny\[Link] | ForEach {get-aduser -Identity $_.sam | Move-
ADObject -TargetPath "OU=Disbled Accounts,DC=abnl,DC=com"}

Getting Group Policy details:


get-adgroupmember "Internet_PFRL_Design" | Sort -Property DisplayName | Select
DisplayName,Samaccountname | Export-CSV D:\output\Internet_Access_Design_Policy.csv
-NoTypeInformation

Creating IDs in bulk


Import-Csv "C:\Users\[Link]-v\Desktop\Bulk_Domain_creation.csv" | foreach-
object { New-ADUser -SamAccountName $_.SamAccountName -UserPrincipalName
$_.userprincipalname -Name $_.Name -DisplayName $_.Name -GivenName $_.cn -Surname
$_.sn -sn $_.sn -Memberof -Path �OU=POS,OU=Rajajinagar
OU=Users,OU=F21,DC=abfrl,DC=com� -AccountPassword (ConvertTo-SecureString
�Ibm@madura� -AsPlainText -force) -Enabled $True -PassThru }

Setting AD attribute value to null

For single user


set-ADUser -Identity "[Link]-v" -Clear "extensionAttribute4"
For Multiple Users
$DGs = Get-Content C:\Deny\[Link]
Foreach ($DG in $DGs) { set-ADUser -Identity "$DG" -Clear "extensionAttribute4" }

Setting AD attribute value to some text


$DGs = Get-Content C:\Deny\[Link]
Foreach ($DG in $DGs) { set-ADUser -Identity "$DG" -Add
@{extensionAttribute4="Internet_Access_ECommerce Team"} }

Additing Extensionattribute for MFL/PFRL


$DGs = Get-Aduser -properties * -filter * -SearchBase "DC=abnl,DC=Com"
foreach($dg in $dgs) {set-ADuser -Identity $[Link] -ADD
@{extensionAttribute5="MFL"}}

To Restore Deleted single Id


Get-ADObject -Filter 'Mail -eq "[Link]@[Link]"
-IncludeDeletedObjects | Restore-ADObject

To Restore Deleted Multiple Id


import-Csv C:\Deny\[Link] | ForEach { Get-ADObject -Filter -identity $.sam
-IncludeDeletedObjects | Restore-ADObject

To Display deleted AD accounts using date


[datetime]$StartTime = "9/3/2016" | [datetime]$EndTime = "9/8/2016" | Get-ADObject
-Filter {(isdeleted -eq $true) -and (name -ne "Deleted Objects")}
-includeDeletedObjects -property whenChanged | Where-Object {$_.whenChanged -ge
$StartTime -and $_.whenChanged -le $EndTime} | Export-Csv c:\deny\[Link] |

To get Disabled AD account users


Search-ADAccount �AccountDisabled -UsersOnly | Select -Property
Name,SamAccountName,UserPrincipalName,Mail,DistinguishedName | Export-CSV
"C:Deny\[Link]" -NoTypeInformation

To get group IDs


Get-ADGroup -filter * -properties * -searchbase "OU=Groups,DC=pantaloon,DC=Com"|
select SAMAccountName, DisplayName|Export-Csv
"C:\Users\[Link]\Desktop\[Link]"

To enable Password Never expiry option


$DGs = Get-Content D:\Deny\[Link]
Foreach ($DG in $DGs) { Set-ADUser -Identity "$DG" -PasswordNeverExpires $true }

To add Ad users to particular group


Get-ADUser -SearchBase �DC=pantaloon,DC=com� -Filter * | ForEach-object {Add-
ADGroupMember -Identity �DMS_Emp_Process� -Members $_ }

***********************************************************************************
****

PS C:\Windows\system32> get-aduser -identity "[Link]-v" -properties *

***********************************************************************************
****

Get-DistributionGroup | Export-Csv
C:\Users\bhargav.g\Desktop\distribution_group.csv
Set-DistributionGroup "##[Link]" -EmailAddresses
SMTP:[Link]@[Link],[Link]@[Link]

You might also like