Blog PowerShell for Managing Active Directory Ravikanth C

Blog About me  Lead Engineer at Dell  Windows PowerShell MVP  Developer on several PowerShell projects on Codeplex  Author of  Free eBook: Layman’s guide to PowerShell 2.0 remoting  Co-author on Quest’s SharePoint 2010 & PowerShell cheat sheet  Blog at  Founder & editor of PowerShellFromIndia  More details on this soon

Blog Giving away.. Two copies (eBook) of Managing Active Directory with Windows PowerShell: TFM Thanks to Sapien Press One copy (eBook) of Windows PowerShell Cookbook Thanks to O'Reilly Media

Blog PowerShell for Active Directory  [ADSI] adapter  In-box  Windows Server 2008 R2 includes a PowerShell module  In-box  Quest Software ActiveRoles Management Shell  Free download  Softerra Adaxes  Commercial product  Idera Scripts for Active Directory  Free; uses [ADSI]

Blog PowerShell for Active Directory Microsoft cmdlets Quest cmdlets  PowerShell 2.0 only  Require AD Management Gateway for managing pre- Windows 2008 R2 DC  Cannot manage local LDS on Windows 7  Cannot manage terminal services attributes  Version Independent  Support Windows 2003, 2008, and 2008 R2 DC management  Can manage Windows 7 local LDS  Can manage terminal services attributes

Blog Microsoft cmdlets for Active Directory  In-box from Windows Server 2008 R2 onwards  Get enabled by  Installing AD DS or LDS server roles or  Running DCPromo.exe or  Installing RSAT on Windows Server 2008 R2 or Windows 7  To access AD cmdlets  Start->Administrative Tools->Active Directory Module for Windows PowerShell or  Import-Module ActiveDirectory  To list AD cmdlets  Get-Command -noun AD* or  Get-Command –Module ActiveDirectory

Blog Managing down level servers Requires AD Management Gateway Services AD PowerShell cmdlets & ADAC use AD web services to administer directory Available for Windows 2003 R2 with SP SP SP2

Blog Microsoft cmdlets for Active Directory  Cmdlets can be grouped under  Forests & Domains  User & Computer accounts  Groups  Password Policies  OU tasks  Service Accounts  Schema Tasks

Blog Forest & Domains  Get-ADForest  Set-ADForest  Set-ADForestMode  Get-ADDomain  Set-ADDomainMode

Blog User Accounts  Get-ADUser  New-ADUser  Set-ADUser  Remove-ADUser  Disable-ADAccount  Enable-ADAccount  Set-ADAccountExpiration  Clear-ADAccountExpiration  Set-ADAccountPassword  Unlock-ADAccount

Blog Groups  Get-ADGroup  New-ADGroup  Set-ADGroup  Remove-ADGroup  Get-ADGroupMember  Add-ADGroupMember  Remove-ADGroupMember

Blog OU tasks  Get-ADOrganizationalUnit  New- ADOrganizationalUnit

Blog Service Accounts  Get-ADServiceAccount  New-ADServiceAccount  Set-ADServiceAccount  Install-ADServiceAccount  Uninstall-ADServiceAccount  Reset-ADServiceAccountPassword

Blog AD Recycle Bin  Enable AD Optional Feature: “Recycle Bin Feature”  This is an irreversible action  Restore-ADObject to restore deleted objects

Blog Moving an AD Object  Use Get-ADObject to get an instance  Pipe it to Move-ADObject and specify new location as a value to -TargetPath

Blog Learning Resources – PowerShell for AD  Cmdlet reference Cmdlet reference  Book: Managing Active Directory with PowerShell: TFM Book: Managing Active Directory with PowerShell: TFM  AD cmdlets quick reference guide AD cmdlets quick reference guide  Adaxes Cmdlets Adaxes Cmdlets  Quest Cmdlets Quest Cmdlets  Idera PowerShell Scripts Idera PowerShell Scripts  ADMGS for down level servers ADMGS for down level servers

Blog Learning resources - PowerShell  Getting started guide Getting started guide  PowerShell Learning center PowerShell Learning center  The scripting Guys blog The scripting Guys blog  PowerScripting Podcast PowerScripting Podcast  PowerShell.com free online eBook PowerShell.com free online eBook

Blog Q & A Thanks