Active Directory with PowerShell电子书

Active Directory with PowerShell

Table of Contents

Active Directory with PowerShell

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers, and more

Why subscribe?

Free access for Packt account holders

Instant updates on new Packt books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the example code

Errata

Piracy

Questions

1. Let's Get Started

Ways to automate Active Directory operations

The Microsoft Active Directory module

Installing Active Directory

Installing the Remote Server Administration Tool kit

Installing the Active Directory module

Testing the functionality

Quest Active Directory PowerShell cmdlets

Installing Quest

Testing the functionality

Using the Native method of PowerShell

Summary

2. Managing User and Computer Objects

Managing user accounts

Creating user accounts

Creating bulk user accounts

Modifying user properties

Updating the description of a user object

Updating the telephone numbers of multiple users

Enabling or disabling user accounts

Moving user accounts to another OU

Deleting user accounts

Managing computer accounts

Creating computer accounts

Modifying computer accounts

Setting the description for a computer account

Moving computer accounts to a different OU

Enabling or disabling computer accounts

Deleting computer accounts

Summary

3. Working with Active Directory Groups and Memberships

Creating different types of security groups

Searching and modifying group object information

Adding members to a group

Adding user accounts to groups

Adding computer accounts to groups

Adding one group as a member to an other

Listing members of a security group in Active Directory

Removing members from an AD group

Deleting a security group

Summary

4. Configuring Group Policies

Installing the Group Policy module

Querying Group Policies

Creating and linking Group Policies

Working with links, enforcements, and order of GPOs

Working with Group Policy permissions

Querying GPO permissions

Modifying GPO permissions

Updating Group Policy and generating Resultant Set of Policy

Remotely triggering Group Policy update

Collecting RSOP data remotely

Removing Group Policy links and objects

Summary

5. Managing Domains, Organizational Units, Sites, and Subnets

Managing domains

Querying forest and domain details

Querying domain controller details

Querying flexible single-master operation role owners

Managing Organizational Units

Searching for OUs

Creating OUs

Modifying OUs

Renaming, moving, and deleting OUs

Managing sites and subnets

Querying sites and subnets

Creating and modifying sites

Creating and modifying subnets

Removing sites and subnets

Summary

6. Advanced AD Operations Using PowerShell

Installing a new domain

Adding additional domain controllers

Obtaining an Active Directory replication status

Managing Fine-Grained Password Policies

Transferring FSMO roles

Restoring deleted objects

Demoting domain controllers and removing domains

Summary

7. Managing DFS-N and DFS-R Using PowerShell

Installing DFS roles

Installing the DFS-N role

Installing the DFS-R role

Managing DFS-N

Querying DFS namespaces

Querying DFS-N folders and targets

Creating the DFS-N root and folders

Adding and removing folder targets

Managing DFS-R

Querying DFS-R groups and settings

Creating a DFS-R group

Deleting a DFS-R group

Summary

8. Managing Active Directory DNS Using PowerShell

Installing and configuring a DNS server

Installing a DNS server

Configuring the DNS server

Changing the listening IP address

Enabling or disabling recursion

Working with root hints and forwarders

Conditional forwarders

Managing DNS zones

Creating, modifying, and deleting DNS records

Managing A records and PTR records

Managing CNAME records

Managing DNS Clients

Summary

9. Miscellaneous Scripts and Resources for Further Learning

Checking whether a user, group, computer, or an OU exists

Usage

Getting membership of a user, computer, and group

Usage

Resetting the password for multiple user accounts

Usage

Bulk creation of user accounts

Usage

Getting the password expiry date of user accounts

Usage

Finding all the disabled user accounts

Output

Getting all domain controllers and their site names in the forest

Usage

Moving objects from one OU to another

Usage

Finding inactive computers in Active Directory

Usage

Creating groups in bulk

Usage

Exporting an AD group member's details to CSV

Usage

Finding empty groups in Active Directory

Usage

Verifying whether a user is a member of the given group or not

Usage

Comparing AD groups' membership

Usage

Resources for further learning

PowerShell resources

Active Directory resources

Index