Enhance your Active Directory PowerShell

I really like the PowerShell for Active Directory, that you find in Windows Server 2008 and above.  I cut my teeth on PowerShell with Microsoft Exchange Server 2007, and love the ability to script almost everything – even if the script is just a bunch of repeated commands against a list in Excel, that’s copied and pasted.

Recently, I’ve been looking for quicker and better ways to do things, and I’ve rediscovered Quest’s (Dell’s) ActiveRoles Management Shell.

This is a freely downloadable bunch of cmdlets for Active Directory PowerShell, that really enhance your queries, and help you get so much more from your servers.

For example, the following command will list all enabled user objects in your domain :

get-qaduser -includeallproperties -ldapfilter "(!(userAccountControl:1.2.840.113556.1.4.803:=2))"

Sometimes I find that more relevant to me than finding disabled user objects, but it’s not as easy to do in the out of the box PowerShell.

Anyway, it’s free, it’s useful, and I think it’s a good addition to any AD manager’s toolkit…

The Zoo Keeper

By TheZooKeeper

An Azure Cloud Architect with a background in messaging and infrastructure (Wintel). Bearded dog parent who likes chocolate, doughnuts and Frank's RedHot sauce, but has not yet attempted to try all three in combination!

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.