Powershell Active Directory
General Information
This page shows neat tricks for Powershell within Active Directory to get useful information (one liners) or make batch changes.
Checklist
- Powershell CLI installed
- Powershell running as administrator for any modify commands.
Move inactive computers to a new OU for confirmation and deletion from AD.
get-adcomputer -SearchBase 'ou=Workstations,dc=contoso,dc=com' -filter “Passwordlastset -lt '1/1/2018'” -properties * | Move-ADObject -TargetPath 'ou=OLD,ou=Workstations,dc=contoso,dc=com'- Moves all computers who have not connected to the domain since 1/1/2018 to the OLD OU.
- Computers connected to the domain reset their passwords every 30 days.
- -SearchBase specifies the OU you want to search within, this could be widened to the entire domain if needed.
- -TargetPath specifies where these computers are going to be moved.