Active Directory Administration Cookbook

Using Windows PowerShell

The Active Directory module for Windows PowerShell can be used to select multiple user objects as well. Modifications can then be applied to the scope of users using the piping mechanism in PowerShell. Since scoping in PowerShell is more advanced, this way is best used to modify multiple user objects throughout the Active Directory forest and/or to modify user objects, repeatedly.

As an example, use the following lines of PowerShell on a system with the Active Directory module for Windows PowerShell is installed to modify Prevent from accidental deletion for all of the user objects whose sAMAccountName starts with service_:

Import-Module ActiveDirectoryGet-ADUser -ldapfilter "(sAMAccountName=service_*)" | Set-ADObject ...