Creating and managing AD users, groups, and computers

Your active directory, as created in the Installing domain controllers and DNS recipe authenticates users and computers. AD also makes use of group membership to simplify authorization. In this recipe, you add, remove, and update users and computers. You also create and remove groups and manage group membership as well as manage organizational units. This recipe uses the cmdlets in the ActiveDirectory module. You can use a more automated approach to adding users by following the Adding users to the Active Directory using a CSV file recipe.

Getting ready

This recipe uses two working domain controllers (DC1 and DC2) in the Reskit.Org domain.

How to do it...

1. Create a hash table for general user attributes:

$Password = 'Pa$$w0rd'$PasswordSS = ConvertTo-SecureString `
                      -String $Password `
                      -AsPlainText -Force$NewUserHT = @{}$NewUserHT.AccountPassword = $PasswordSS$NewUserHT.Enabled = $true$NewUserHT.PasswordNeverExpires...