Users & Groups - OsbornePro

Windows User and Group Commands

# NEW LOCAL USER
net user rosborne Password123! /ADD
New-LocalUser -FullName "Rob Osborne" -Name rosborne -NoPassword
New-LocalUser -FullName "Rob Osborne" -Name rosborne -Password (ConvertTo-SecureString -AsPlainText -String "Password123!" -Force)
# OR
net user /ADD rosborne *
Type a password for the user:
Retype the password to confirm:
The command completed successfully.

# ALLOW USER TO CHANGE PASSWORD
net user rosborne Password123! /ADD /PASSWORDCHG:Yes
New-LocalUser -Name rosborne -Password (ConvertTo-SecureString -AsPlainText -String "Password123!" -Force)

# PREVET CHANGING PASSWORD
net user rosborne Password123! /ADD /PASSWORDCHG:No
New-LocalUser -Name rosborne -Password (ConvertTo-SecureString -AsPlainText -String "Password123!" -Force)

# CREATE ACCOUNT THAT EXPIRES
New-LocalUser -FullName "Rob Osborne" -Name rosborne -Description "Example account" -PasswordNeverExpires $True -AccountExpires (Get-Date).AddDays(365) -Disabled -UserMayNotChangePassword -Password (ConvertTo-SecureString -AsPlainText -String "Password123!" -Force)

# ADD LOCAL USER TO LOCAL GROUP
net localgroup administrators rosborne /add
Add-LocalGroupMember -Group "Administrators" -Member "Admin", "MicrosoftAccount\username@Outlook.com", "AzureAD\rosborne@osbornepro.com", "OsbornePro\Domain Admins"

# NEW DOMAIN USER
net user rosborne "Password123!" /ADD /DOMAIN
New-ADUser -Name "Rob Osborne" -GivenName "Rob" -Surname "Osborne" -SamAccountName "rosborne" -UserPrincipalName "rosborne@osbornepro.com" -Path "OU=Employees,OU=Managed,DC=osbornepro,DC=com" -AccountPassword $SecureString -Enabled $true

# ADD DOMAIN USER TO DOMAIN GROUP
net group "Domain Admins" rosborne /ADD /DOMAIN
Add-ADGroupMember -Identity "OsbornePro\Domain Users" -Members rosborne

# ADD DOMAIN USER TO LOCAL GROUP
net localgroup Users osbornepro\rosborne /add
Add-LocalGroupMember -Group Administrators -Member "osbornepro\rosborne"

# LIST GROUP MEMBERS
net localgroup administrators
Get-LocalGroupMember -Group Administrators

# FIND LOCKED USER ACCOUNTS
Search-ADAccount -LockedOut

# UNLOCK USER ACCOUNT
Unlock-ADAccount –Identity rob.osborne

# LIST DISABLED ACCOUNTS
Search-ADAccount -AccountDisabled

# FORCE PASSWORD CHANGE NEXT LOGIN
Set-ADUser -Identity rob.osborne -ChangePasswordAtLogon $True
Get-ADUser -Filter 'SamAccountName -like "rob.osborne"' | Set-ADUser -ChangePasswordAtLogon $True

# REPAIR BROKEN TRUST BETWEEN A CLIENT AND DOMAIN
Test-ComputerSecureChannel -Server "dc01.main.osbornepro.com"

# ENABLE A OBJECT ACCOUNT IN AD
Enable-ADAccount -Identity "rob.osborne"

# DISABLE A OBJECT ACCOUNT IN AD
Disable-ADAccount -Identity “rob.osborne”

# MOVE USER TO NEW OU
Move-ADObject -Identity "CN=Rob Osborne,CN=Users,DC=main,DC=osbornepro,DC=com" -TargetPath "OU=IT,OU=Employees,DCC=main,DC=osbornepro,DC=com"

# CREATE A NEW OU in AD
New-ADOrganizationalUnit -Name "Managed" -Path "DC=main,DC=osbornepro,DC=com"

# GET ALL WINDOWS 10 COMPUTERS IN A DOMAIN
Get-ADComputer -Filter {OperatingSystem -Like '*Windows 10*'} -Property OperatingSystem

# CREATE AN AD COMPUTER OBJECT
New-ADComputer -Name "Desktop01" -SamAccountName "Desktop01" -Path "OU=Desktops,OU=Devices,OU=Managed,DC=main,DC=osbornepro,DC=com"

# ADD A LOCAL COMPUTER TO DOMAIN
Add-Computer -DomainName "main.osbornepro.com" -Credential OSBORNEPRO\osborne.admin -Restart -Force

# DELETE A COMPUTER FROM DOMAIN
Remove-ADComputer -Identity "DESKTOP01"

# GET GROUP POLICIES
Get-GPO -All

# BACKUP GROUP POLICIES
Backup-Gpo -All -Path D:\Backups\gpobackup

# RUN AD SYNC FOR RECENT CHANGES
Start-ADSyncSyncCycle -PolicyType Delta

# RUN FULL AD SYNC OF ALL ITEMS
Start-ADSyncSyncCycle -PolicyType Initial

Users & Groups Command Reference

Windows User and Group Commands

Linux User and Group Commands

Site Links

Contact Info

Users & Groups Command Reference

Windows User and Group Commands

Linux User and Group Commands

Site Links

Contact Info

Subscribe to OsbornePro TV