70-640 Active Directory Power Shell

Front 1

Windows PowerShell providers

Back 1

With Windows PowerShell providers, you can access data stores,
such as the registry and Active Directory, as easily as you access the file system

Front 2

You can add functionality to Power Shell by importing what

Back 2

by importing modules/snapins

Front 3

You can open the Active Directory Module For Windows PowerShell from the Administrative Tools program group, or you can import the module into
a PowerShell session by typing the following command

Back 3

Import-Module ActiveDirectory

Front 4

Are cmdlets in power shell case-sensitive

Back 4

no

Front 5

What naming convetion cmdlets use

Back 5

Verb-Noun aka Action-Object format
Noun is always singular

Get-Service

Front 6

Active Directory nouns begin with AD what cmdlet you can use to list them

Back 6

Get-Command -Noun AD* | More

Front 7

to list all of the commands in the Active Directory for Windows PowerShell. To list the commands in the module, type the following command:

Back 7

Get-Command -Module ActiveDirectory

Front 8

‑Identity parameter

Back 8

-Identity parameter is used by most Active Directory cmdlets to reference a specific object

Get-ADGroupMember -Identity "cn=Sales,ou=Groups,dc=contoso,dc=com"
Get-ADGroupMember -Identity Sales

Front 9

Get-Help cmdlet

Back 9

When you find a cmdlet that appears to support a task you want to perform, you can expose
the documentation for the cmdlet using the Get-Help cmdlet

Get-Help Get-ADGroupMember

Front 10

optional parameters of Get-Help

Back 10

-Examples Shows usage examples of the cmdlet

-Detailed Shows detailed information about the cmdlet and each of its parameters,
as well as examples

-Full Shows all documentation of the cmdlet

Front 11

get help, including examples, about the New-ADGroupMember cmdlet

Back 11

Get-Help Get-ADGroupMember -detailed

Front 12

The following command returns
an object representing the user with the sAMAccountName mike.fitz:

Back 12

Get-ADUser -Identity mike.fitz

Front 13

In Windows PowerShell, variable names are preceded by a

Back 13

In Windows PowerShell, variable names are preceded by a dollar sign ($).
The variable name itself is not case sensitive.

To assign a variable—that is, to create and define a variable—simply use the following
syntax:
$variable = value

Front 14

Windows PowerShell has built-in variables, including the following:

Back 14

$true Boolean true
$false Boolean false
$error Contains the error object of the most recent error

Front 15

Windows PowerShell features a pipeline:

Back 15

a channel through which the output of
a cmdlet can be passed to the following cmdlet on the same command line. The pipeline is
represented by the pipe character (|).
For example, type the following to disable the account for Mike Fitzmaurice:
Get-ADUser mike.fitz | Set-ADUser -Enabled $false

Front 16

Get-ADGroupMember cmdlet returns a collection of objects representing group members. To disable the accounts of all users in the Sales group, type the following command

Back 16

Get-ADGroupMember -Identity Sales | Set-ADUser -Enabled $false

Front 17

Often, the pipeline is extended to more than one line to improve readability. There are several ways to enter one line of a pipeline and then continue the pipeline on a subsequent line:

Back 17

The tick mark (`)
Get-ADGroupMember -Identity Sales | `
Set-ADUser -Enabled $false

The pipe symbol (|)
Get-ADGroupMember -Identity Sales |
Set-ADUser -Enabled $false

Curly braces ({})

Front 18

gsv is an alias

Back 18

gsv is an alias for Get-Service, a cmdlet that returns a collection of
services on a system.

Front 19

list all aliases

Back 19

Get-Alias lists all aliases in the current PS session

Front 20

PSDrives

Back 20

Windows PowerShell automatically creates a PSDrive for each drive letter already defined by Windows
PS also creates PSDrives for commonly required resources

Front 21

HKCU
HKLM

Back 21

to PSDrives create autmatically by PS for
HKEY_CURRENT_USER nad
HKEY_LOCAL_MACHINE

Front 22

To list the PSDrives that have been created

Back 22

type Get-PSDrive.

Front 23

Active Directory PowerShell Provider

Back 23

Windows Server 2008 R2 adds a provider for AD, so you can navigate AD as folders on a disk volume. To use the Active Directory
provider, type the following command:
cd AD:
The prompt changes to PS AD:\>

Front 24

PS cmd that uses AD PSDrives to navigate to the domain partition for the contoso.com domain type

Back 24

cd "dc=contoso,dc=com"

Front 25

PS cmd that uses AD PSDrives to navigate to the User Accounts OU, type
the following command:

To create a new OU for Contractors in the User Accounts OU, type the following command

Back 25

cd "ou=User Accounts"

md "ou=Contractors

Front 26

To create a user account for Mary North, type the following command

For example, to create a user account for Mary North in the User
Accounts OU, type the following command

Back 26

New-ADUser -Name "Mary North"

New-ADUser -Path "ou=User Accounts,dc=contoso,dc=com" -Name "Mary North"
-SAMAccountName "mary.north"

Front 27

In order to create an user account using a template
1st you need to create a reference to the template account
2nd create the account based on the template

Back 27

1)$user = Get-ADUser "CN=_Sales Template,OU=User Accounts,DC=contoso,DC=com"
-Properties MemberOf,Title,Department,Company,PhysicalDeliveryOfficeName
2)New-ADUser -path "ou=User Accounts,dc=contoso,dc=com" -Instance $user -Name "Mary North"
-SAMAccountName "mary.north"

Front 28

Set-ADUser cmdlet

Back 28

provides parameters for the most commonly used attributes. For less commonly used attributes, the –Add, -Replace, -Clear, and -Remove parameters provide direct access to all attributes

Front 29

you can use the -Identity parameter of the cmdlet to change Mary North email

Back 29

Set-ADUser -Identity mary.north -EmailAddress "[e-mail]"

OR

Get-ADUser -Identity mary.north | Set-ADUser -EmailAddress "[e-mail]"

Front 30

dot notation

Back 30

A dot (.) separates the object from the LDAP name of the property

Front 31

cmdlet to change or reset a password
and switch to reset

Back 31

Set-ADAccountPassword cmdlet
-Reset

Set-ADAccountPassword -Identity "mary.north" -Reset

Front 32

Windows PowerShell does not allow a cmdlet to receive a secret, such as a password,
in a plain text parameter. It must be passed securely. Therefore, if you want to include
the password in the command line, it must be converted to a secure string before it can be used as a password parameter

Back 32

Set-ADAccountPassword -Identity "mary.north" -Reset
-NewPassword (ConvertTo-SecureString -AsPlainText "Pa$$w0rd" -Force)

Front 33

Import a csv file with PS

Newusers.csv
name,sAMAccountName,GivenName,Surname
John Woods,john.woods,Johnathan,Woods
Kim Akers,kim.akers,Kimberly,Akers

Back 33

import-csv "C:\Users\Administrator\Desktop\newusers.csv" | New-ADUser

You can even add parameters, as in the following example:
import-csv "C:\Users\Administrator\Desktop\newusers.csv" | New-ADUser -organization Contoso

Front 34

create a new OU called Employees in the User Accounts OU.

Back 34

New-ADOrganizationalUnit -Name Employees
-Path "ou=User Accounts,dc=contoso,dc=com"
-ProtectedFromAccidentalDeletion $true

Front 35

Which cmdlet deletes a user?

Back 35

Remove-ADUser.

Front 36

cmd to query all users with the word Miami in the description field of their account

cmd to modify the office for all users with the word Miami on the description field

Back 36

dsquery user -desc "*Miami*"

dsquery user -desc "*Miami*" | dsmod user -office "Sydney"

Front 37

get all users with description containing "Sidney" and display their samid

Back 37

dsquery user -desc "*Sydney*" | dsget user -samid -upn

Front 38

Using Get-ADUser and -Filter find all users with office Sidney

change their account to enabled

Back 38

Get-ADUser -Filter {office -eq "Sydney"}

Get-ADUser -Filter {office -eq "Sydney"} | Set-ADUser -enabled $true