This is an old revision of the document!
Powershell Active Directory
General Information
This page shows neat tricks for Powershell within Active Directory to get useful information (one liners) or make batch changes.
Checklist
- Powershell CLI installed
- Powershell running as administrator for any modify commands.
Move inactive computers to a new OU for confirmation and deletion from AD.
get-adcomputer -SearchBase 'ou=Workstations,dc=contoso,dc=com' -filter “Passwordlastset -lt '1/1/2018'” -properties * | Move-ADObject -TargetPath 'ou=OLD,ou=Workstations,dc=contoso,dc=com'- Moves all computers who have not connected to the domain since 1/1/2018 to the OLD OU.
- Computers connected to the domain reset their passwords every 30 days.
- -SearchBase specifies the OU you want to search within, this could be widened to the entire domain if needed.
- -TargetPath specifies where these computers are going to be moved.