Windows Server 2008 R2: AD Module for Windows PowerShell

Email Print Digg This Add to del.icio.us

Windows Server 2008 R2 includes a new Active Directory module for Windows PowerShell, which is a consolidated group of cmdlets. These cmdlets can be used to manage Active Directory Domain Services (AD DS), Active Directory Lightweight Directory Services (AD LDS), and Active Directory Database Mounting Tool instances.

Overview

The Active Directory module for Windows PowerShell in Windows Server 2008 R2 features 76 cmdlets. These cmdlets can perform several administrative, configuration, and diagnostic tasks against Active Directory Domain Services, Active Directory Lightweight Directory Services and Active Directory Database Mounting Tool instances.

Installation

The Active Directory module for Windows PowerShell is supported on the Windows Server 2008 R2 and Windows 7 operating systems.

There are five scenarios where the Active Directory module for Windows PowerShell is installed:

• Automatically, when the Active Directory Domain Services (AD DS) server role is added to a server running Windows Server 2008 R2
• Automatically, when the Active Directory Lightweight Directory Services (AD LDS) server role is added to a server running Windows Server 2008 R2
• Automatically, when you use the Dcpromo.exe command-line tool to promote a server that has Windows Server 2008 R2 installed to a domain controller
• As part of the Remote Server Administration Tools (RSAT) feature on a server that has Windows Server 2008 R2 installed
• As part of the RSAT feature on a computer that has Windows 7 installed

The Active Directory module for Windows PowerShell cannot be installed on computers running Windows 2000, Windows Server 2003 or Windows Server 2008.

When you install the Active Directory module for Windows PowerShell as part of the RSAT feature, you must have at least one domain controller that has Windows Server 2008 R2 installed in your domain if you plan to manage AD DS remotely. Similarly, when you install the Active Directory module for Windows PowerShell as part of the RSAT feature, you must have at least one instance in an AD LDS configuration set that is running on a Windows Server 2008 R2 server.

The Windows Server 2008 R2 Active Directory Web Services (ADWS) service, which is new in Windows Server 2008 R2, must be installed on at least one domain controller in the domain or on one server that hosts your AD LDS instance. For more information about ADWS, see What's New in AD DS: Active Directory Web Services.

Active Directory Module for Windows PowerShell Cmdlets

The following is a list of the cmdlets, included in the Active Directory module for Windows PowerShell:

• Disable-ADAccount
• Search-ADAccount
• Enable-ADAccount
• Unlock-ADAccount
• Get-ADAccountAuthorizationGroup
• Set-ADAccountControl
• Set-ADAccountExpiration
• Clear-ADAccountExpiration
• Set-ADAccountPassword
• Get-ADAccountResultantPasswordReplicationPolicy
• Remove-ADComputer
• Get-ADComputer
• Set-ADComputer
• New-ADComputer
• Remove-ADComputerServiceAccount
• Add-ADComputerServiceAccount
• Get-ADComputerServiceAccount
• Set-ADDefaultDomainPasswordPolicy
• Get-ADDefaultDomainPasswordPolicy
• Move-ADDirectoryServer
• Move-ADDirectoryServerOperationMasterRole
• Get-ADDomain
• Set-ADDomain
• Get-ADDomainController
• Remove-ADDomainControllerPasswordReplicationPolicy
• Add-ADDomainControllerPasswordReplicationPolicy
• Get-ADDomainControllerPasswordReplicationPolicy
• Get-ADDomainControllerPasswordReplicationPolicyUsage
• Set-ADDomainMode
• New-ADFineGrainedPasswordPolicy
• Remove-ADFineGrainedPasswordPolicy
• Get-ADFineGrainedPasswordPolicy
• Set-ADFineGrainedPasswordPolicy
• Get-ADFineGrainedPasswordPolicySubject
• Add-ADFineGrainedPasswordPolicySubject
• Remove-ADFineGrainedPasswordPolicySubject
• Get-ADForest
• Set-ADForest
• Set-ADForestMode
• Remove-ADGroup
• Get-ADGroup
• New-ADGroup
• Set-ADGroup
• Get-ADGroupMember
• Remove-ADGroupMember
• Add-ADGroupMember
• Set-ADObject
• Remove-ADObject
• Restore-ADObject
• Rename-ADObject
• Get-ADObject
• New-ADObject
• Move-ADObject
• Disable-ADOptionalFeature
• Get-ADOptionalFeature
• Enable-ADOptionalFeature
• New-ADOrganizationalUnit
• Set-ADOrganizationalUnit
• Remove-ADOrganizationalUnit
• Get-ADOrganizationalUnit
• Get-ADPrincipalGroupMembership
• Remove-ADPrincipalGroupMembership
• Add-ADPrincipalGroupMembership
• Get-ADRootDSE
• Get-ADServiceAccount
• Set-ADServiceAccount
• Uninstall-ADServiceAccount
• Remove-ADServiceAccount
• New-ADServiceAccount
• Install-ADServiceAccount
• Reset-ADServiceAccountPassword
• Set-ADUser
• Get-ADUser
• Remove-ADUser
• New-ADUser
• Get-ADUserResultantPasswordPolicy

John Policelli (Microsoft MVP for Directory Services, MCTS, MCSA, ITSM, iNet+, Network+, and A+) is a solutions-focused IT consultant with over a decade of combined success in architecture, security, strategic planning, and disaster recovery planning. John has designed and implemented dozens of complex directory service, e-Messaging, web, networking, and security enterprise solutions. John is the author of Active Directory Domain Services 2008 How-To (Sams Publishing) and maintains a blog at http://policelli.com/blog.

Email Print Digg This Add to del.icio.us

Enterpriseitplanet Forum Topic By Replies Updated Wireless lan hardware for school davetrainor 3 2-10-2010 06:47 AM Beginner seeking help with network design - namely switches darrenlight85 2 1-29-2010 01:18 AM Enterprise Networking problem with 802.11n PMitchell 1 1-12-2010 03:55 PM redirecting Skype output speech to TCP socket and receiving in other app johnyjj2 1 12-10-2009 08:35 AM DNS Issue with test network davis 9 12-9-2009 02:53 PM