Modifying AD objects
When we create objects, we define values for attributes. After we've created the objects, there may be situations where we need to edit the values of those attributes or add values to empty attributes.
We can use the Set-ADUser cmdlet to change and add attribute values to existing AD user objects:
Set-ADUser tidris -OfficePhone "0912291120" -City "London"
In the preceding sample command, we're adding values for the -OfficePhone and -City attributes for the tidris user.
There are occasions where you may need to change the existing value of an attribute:
Set-ADUser tidris -OfficePhone "0112291120"
In the preceding command, I'm replacing an existing value with a new one.
In the aforementioned commands, I defined the exact user account, but it's not practical if you need to do this for a large number of accounts. To do that, we need to combine the Set-ADUser cmdlet with the Get-ADuser...
