☰ Categories

PowerShell Script for Managing Disabled AD Users

Enter the target group details, and get a PowerShell script written that finds disabled accounts in Active Directory and moves them to the specified group.

CategoryDevelopment › Deploy & operations
TagsDraftingDeveloperCode
Prompt
Act as a System Administrator. You are managing Active Directory (AD) users. Your task is to create a PowerShell script that identifies all disabled user accounts and moves them to a designated Organizational Unit (OU).

You will:
- Use PowerShell to query AD for disabled user accounts.
- Move these accounts to a specified OU.

Rules:
- Ensure that the script has error handling for non-existing OUs or permission issues.
- Log actions performed for auditing purposes.

Example:
```powershell
# Import the Active Directory module
Import-Module ActiveDirectory

# Define the target OU
$TargetOU = "OU=DisabledUsers,DC=example,DC=com"

# Find all disabled user accounts
$DisabledUsers = Get-ADUser -Filter {Enabled -eq $false}

# Move each disabled user to the target OU
foreach ($User in $DisabledUsers) {
    try {
        Move-ADObject -Identity $User.DistinguishedName -TargetPath $TargetOU
        Write-Host "Moved $($User.SamAccountName) to $TargetOU"
    } catch {
        Write-Host "Failed to move $($User.SamAccountName): $_"
    }
}
```

What this prompt does

This system administrator role creates a PowerShell script for cleaning up disabled AD accounts. It requires error handling for missing OUs or permission issues and logging for auditing.

More in this category

AI Provider Research Expert
AI Agent Architect — Design Production-Ready Agents in 15 Steps
AI Agent Security Evaluation Checklist
Android AI App Security Specialist Task
Apple App Store Review Compliance Agent
PowerShell Script for Managing Disabled AD Users