Active Directory Administration Cookbook

How to do it...

This feature can only be leveraged using Windows PowerShell.

Normally, to add a group membership to a group, you'd use the following lines of PowerShell:

Import-Module ActiveDirectoryAdd-ADGroupMember -Identity "CN=Group,OU=Organizational Unit,DC=lucernpub,DC=com" -Members "User"

However, to create an expiring group membership to a group, use the following lines of PowerShell on a system with the Active Directory Module for Windows PowerShell installed:

Import-Module ActiveDirectoryAdd-ADGroupMember -Identity "CN=Group,OU=Organizational Unit,DC=lucernpub,DC=com" -Members "User" -MemberTimeToLive (New-TimeSpan -Days 14)  

To view the time-to-live for group memberships, use the following lines of PowerShell on a system with the ...