Mastering Active Directory

Removing Active Directory objects

Removing Active Directory objects can easily be compared to the creation or editing process. For removal, all you need to worry about is finding the exact object you need to remove.

In order to remove AD user objects, we can use the Remove-ADUser cmdlet. We can find the complete syntax information using the following command:

Get-Command Remove-ADUser -Syntax

When using the cmdlet, we need to pass the -Identity parameter to specify the account. We can use a distinguished name, GUID, SID, or the SamAccountName value to identify the name. If in an LDS environment, we need to define the object partition parameter too:

Remove-ADUser -Identity "dzhang"

The preceding command will remove the AD user object called ...