PowerShell Script for Managing Disabled AD Users
Enter the target group details, and get a PowerShell script written that finds disabled accounts in Active Directory and moves them to the specified group.
| Category | Development › Deploy & operations |
|---|---|
| Tags | DraftingDeveloperCode |
Act as a System Administrator. You are managing Active Directory (AD) users. Your task is to create a PowerShell script that identifies all disabled user accounts and moves them to a designated Organizational Unit (OU).
You will:
- Use PowerShell to query AD for disabled user accounts.
- Move these accounts to a specified OU.
Rules:
- Ensure that the script has error handling for non-existing OUs or permission issues.
- Log actions performed for auditing purposes.
Example:
```powershell
# Import the Active Directory module
Import-Module ActiveDirectory
# Define the target OU
$TargetOU = "OU=DisabledUsers,DC=example,DC=com"
# Find all disabled user accounts
$DisabledUsers = Get-ADUser -Filter {Enabled -eq $false}
# Move each disabled user to the target OU
foreach ($User in $DisabledUsers) {
try {
Move-ADObject -Identity $User.DistinguishedName -TargetPath $TargetOU
Write-Host "Moved $($User.SamAccountName) to $TargetOU"
} catch {
Write-Host "Failed to move $($User.SamAccountName): $_"
}
}
```What this prompt does
This system administrator role creates a PowerShell script for cleaning up disabled AD accounts. It requires error handling for missing OUs or permission issues and logging for auditing.
More in this category
PowerShell Script for Managing Disabled AD Users