AD DS Administration Tools
- Active Directory Administration snap-ins
- Active Directory Administrative Center
- Active Directory module in Windows PowerShell
- Directory Service commands
Managing User Accounts
- Delete a user account
- Create a new user account
- Move the user account
- View the WINDOWS POWERSHELL HISTORY
- Use Windows PowerShell to manage user accounts
- Find inactive user accounts
- Find disabled user accounts
- Delete disabled user account
Steps:-
Delete a user account
- Sign in to LON‑DC1 as Adatum\Administrator with the password .
- On LON‑DC1, in Server Manager, click Tools.
- Click Active Directory Administrative Center.
- In the Active Directory Administrative Center, click Adatum (local), and then double‑click Managers.
- In Managers, right‑click Ed Meadows, and then click Delete.
- In the Delete Confirmation dialog box, click Yes.
Create a new user account
- In the Action pane, click New, and then click User.
- In the Create User dialog box, in Full name, type Ed Meadows.
- In User UPN logon, type Ed.
- In Password and Confirm password, type Password, and then click OK.
Move the user account
- Right‑click Ed Meadows, and then click Move.
- Click the IT organizational unit (OU), and then click OK.
- In the navigation pane, click Adatum (local).
- In the results pane, double‑click IT.
- Verify that Ed Meadow’s account is listed.
View the WINDOWS POWERSHELL HISTORY
- If you have not already done so, maximize Active Directory Administrative Center.
- At the bottom of the Active Directory Administrative Center window, click
- WINDOWS POWERSHELL HISTORY to expand the history section.
a.The Remove-ADObject
command and the switches used with it to delete Ed Meadows.
b.The New-ADUser
command and the switches used with it to recreate Ed Meadows.
c.The additional commands used to configure
the Ed Meadows account.
d.The Move-ADObject
command and the switches used with it to move Ed Meadows.
Close the Active Directory Administrative
Center.
Find users who have not signed in during
the last 30 days
- On the taskbar, click the Windows PowerShell icon.
- To create a variable to specify the past 30 days, type the following command, and then press Enter:
$logonDate
= (get‑date).AddDays(‑30)
- To find all the user accounts that have not signed in during the past 30 days, type the following command, and then press Enter:
Get‑ADUser
‑Filter{lastLogon ‑le $logonDate}
The
results include nearly every account in the domain because most of the accounts
have never signed in.
Group Types
- Distribution groups
Used only with email applications
Not security-enabled (no SID); cannot be
given permissions
- Security groups
- Security principal with a SID;
- can be given permissions
- Can also be email-enabled
Both security groups and distribution
groups can be converted to the other type of group
