Monthly Archives: February 2012

What logon scripts are in your environment “`nMicrosoft” Get-ADUser -LDAPFilter “(&(objectclass=user)(objectcategory=user)(scriptpath=*))” -Properties *| Format-Table Name, DistinguishedName, ScriptPath -AutoSize “`nAD provider” Get-ChildItem -Filter “(&(objectclass=user)(objectcategory=user)(scriptpath=*))” ` -Path Ad:\”DC=Manticore,DC=org” -Recurse | foreach { $user = [adsi]“LDAP://$($_.DistinguishedName)” $user | select @{N=”Name”; E={$_.name}}, @{N=”DistinguishedName”; E={$_.distinguishedname}}, … Continue reading →

Staying on the profile tab we can also set a logon script $ou = “OU=BlogTests,DC=Manticore,DC=org” “`nMicrosoft” $name = “UserA” Get-ADUser -Identity $name | Set-ADUser -ScriptPath “ls1.cmd” “`nAD provider” $name = “UserB” $dn = “cn=$name,$ou” Set-ItemProperty -Path AD:\$dn -Name scriptpath -Value … Continue reading →

To display the home drive information for your users “`nMicrosoft” Get-ADUser -LDAPFilter “(&(objectclass=user)(objectcategory=user)(homeDirectory=*))” -Properties *| Format-Table Name, DistinguishedName, HomeDirectory, HomeDrive -AutoSize “`nAD provider” Get-ChildItem -Filter “(&(objectclass=user)(objectcategory=user)(homeDirectory=*))” ` -Path Ad:\”DC=Manticore,DC=org” -Recurse | foreach { $user = [adsi]“LDAP://$($_.DistinguishedName)” $user | select @{N=”Name”; … Continue reading →

One task when creating a new user is to set their home directory. This information is on the Profile tab in the lower box. In the GUI we would use the Connect radio button, select a drive letter and supply … Continue reading →

A question on the forum asked about setting the value for a group’s displayname attribute.  When you first create a group using any of the techniques we have seen earlier the displayname property is not set.  You can set it … Continue reading →

Do you need to remove all members from a group $ou = “OU=BlogTests,DC=Manticore,DC=org” “`nMicrosoft” $group = “GroupUnvlSecA” Get-ADGroupMember -Identity $group | Remove-ADPrincipalGroupMembership -MemberOf $group -Confirm:$false “`nAD provider” $group = “GroupUnvlSecB” $ou = “OU=TestGroups,DC=Manticore,DC=org” $members = @() Set-ItemProperty -Path ad:\”cn=$group,$ou” -Name … Continue reading →

We may need to copy the members of one group into a second In these examples I’m copying the membership of a Universal group into a Domain Local group.  That’s just because I have those groups available. You can copy … Continue reading →