Note: This code must be run on a computer where the Active Directory PowerShell cmdlets are installed.Powershell #Define OU to begin search $OU = "OU=?,DC=?,DC=?" #Define a work folder for the report $WorkFolder = "C:\Admin" #Define # of days to search for users that have not logged in $Days = 30 #Report file $ExportedReport = "$WorkFolder\$DaysDayEnabledUsers. It then disables and assigns a random 32 character password to each account (using characters with ASCII codes from 33 to 126).
The code uses an LDAP filter to find all user accounts with a username that begins with either Generic or Test. Having defined the Get-ReskitUser function, you use it to retrieve summary information about AD users.
The accounts may have been handed out to staff for short term requirements during the week, and the scheduled task ensures the accounts don't remain active longer than intended. I use this command as the action of a scheduled task to automatically reset several generic user accounts every Friday evening. This is just a quick tip demonstrating how you can easily disable one or more Active Directory user accounts, and randomise the password of each, using a single PowerShell command. Learning in Public ✪ Disable User Accounts and Set Random Passwords on a Schedule using Powershell Peter Hinchley : Disable User Accounts and Set Random Passwords on a Schedule using Powershell Peter Hinchley
0 kommentar(er)
