{"id":83419,"date":"2010-01-25T00:01:00","date_gmt":"2010-01-25T00:01:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2010\/01\/25\/hey-scripting-guy-whats-up-with-active-directory-domain-services-cmdlets\/"},"modified":"2010-01-25T00:01:00","modified_gmt":"2010-01-25T00:01:00","slug":"hey-scripting-guy-whats-up-with-active-directory-domain-services-cmdlets-2","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/hey-scripting-guy-whats-up-with-active-directory-domain-services-cmdlets-2\/","title":{"rendered":"Hey, Scripting Guy! What’s Up with Active Directory Domain Services Cmdlets?"},"content":{"rendered":"

 \"Bookmark<\/a><\/p>\n

 <\/p>\n

\"Hey,<\/p>\n

Hey, Scripting Guy! I have heard that Windows PowerShell 2.0 includes cmdlets to work with Microsoft Active Directory Domain Services (AD DS). However, when I use the Get-Command<\/b> cmdlet to list the available cmdlets in my Windows PowerShell session, I do not see any AD DS cmdlets. What gives? Is this more of the notorious Microsoft vaporware<\/font><\/a>? <\/p>\n

— JM<\/p>\n

\n

 <\/p>\n

\"Hey,Hello JM, <\/p>\n

Microsoft Scripting Guy Ed Wilson here. Today is a lovely day in Charlotte. The sky is clear blue with high cirrus clouds<\/font><\/a>, the sun is shining brightly, and the birds are moonwalking<\/font><\/a> on my front lawn while looking for take-away<\/a> meals. Charlotte has successfully dug out from the 2010 snowstorm that never came. Just because Charlotte did not receive any snow did not keep our citizens from acting in sympathy with our northern neighbors. The stores were all mobbed by panic buyers. Businesses were closed and schools shuttered their doors. And (wait for it) the snow never arrived. We were robbed! I wanted to take a snow day, and make a snow version of Dr. Scripto in my front yard—<\/span>major bummer. Meg in New York on Twitter offered to box up and ship some snow to us, but I figured it would melt before it arrived so I politely declined. The sky outside reminds me of when I was in London teaching a Windows Management Instrumentation (WMI) class to a Microsoft Premier customer. One day the sky cleared, revealing a beautiful deep blue sky. <\/p>\n

\"Image<\/p>\n

\n

 <\/p>\n<\/p>\n

JM, the AD DS Windows PowerShell cmdlets are not vaporware, but unless you are running Windows Server 2008 R2 with the AD DS role on your laptop, you probably do not have access to the cmdlets. The first thing you need to do is download the Remote Server Administration Tools (RSAT) for Windows 7<\/a>. After you have downloaded and installed the RSAT tools, you still have to go into Programs and Features in Control Panel, and click Turn Windows features on or off<\/b>. This opens the Windows Features dialog box, which is shown in the following image.<\/p>\n

\"Image<\/p>\n


After you have accessed the Windows Features dialog box, you still must choose the administrative tools you wish to install. Just installing the RSAT module does not actually install any of the RSAT tools. It merely gives you the ability to install RSAT tools. Though this is a nice granular feature, it can be a bit annoying because there is no “click to install all the tools” feature. The nice thing is if you find you have left something out, you can easily add it back in without needing to have access to the original bits again. You use the same Turn Windows features on or off<\/b> dialog box that you use to, for example, add or remove games. The Turn Windows features on or off<\/b> dialog box is seen in the following image, with a portion of the RSAT section highlighted. There are so many tools, they will not fit on the screen without scrolling (depending on your screen resolution of course). <\/p>\n

\"Image<\/p>\n

\n

 <\/p>\n<\/p>\n

After you have installed the RSAT tools and added the appropriate, there is one more thing you must do before you are able to use the AD DS cmdlets. You must import the Active Directory module. You can use a wildcard character to shorten the typing requirements, as seen here:<\/p>\n

PS C:> Import-Module active*
PS C:><\/p>\n

<\/font><\/span><\/p>\n

If everything is working correctly, you will see the Windows PowerShell progress bar displayed in your Windows PowerShell console, which is shown in the following image.<\/p>\n

\"Image<\/p>\n

\n

 <\/p>\n<\/p>\n

To check to see if the AD DS cmdlets have been imported to your Windows PowerShell console session, use the Get-Command<\/b> cmdlet with the –module<\/b> parameter:<\/p>\n

Get-Command -Module active*<\/p>\n

<\/font><\/span><\/p>\n

The Get-Command<\/b> cmdlet, when used with the –module<\/b> parameter, will return cmdlets that are exported by the specified module. If you are curious about how many cmdlets are exported, you can pipe the results to the Measure-Object<\/b> cmdlet, as seen here:<\/p>\n

PS C:> Get-Command -Module active* | Measure-Object<\/p>\n


Count    <\/span>: 76
Average  <\/span>:
Sum      <\/span>:
Maximum  <\/span>:
Minimum  <\/span>:
Property :<\/p>\n

PS C:><\/p>\n

<\/font><\/span><\/p>\n

If you are not sure of the name of the module, you can use the Get-Module<\/b> cmdlet with the –ListAvailable<\/b> switch. Keep in mind that the list of modules returned by this command will depend on which modules you have created or installed on your system:<\/p>\n

PS C:> Get-Module -ListAvailable<\/p>\n

ModuleType Name                      <\/span>ExportedCommands
———- —-   <\/span>                   <\/span>—————-
Script     <\/span>BasicFunctions            <\/span>{}
Script     <\/span>DotNet                    <\/span>{}
Manifest   <\/span>FileSystem                <\/span>{}
Manifest   <\/span>IsePack                   <\/span>{}
Manifest   <\/span>PowerShellPack            <\/span>{}
Manifest   <\/span>PSCodeGen                 <\/span>{}
Manifest   <\/span>PSImageTools              <\/span>{}
Manifest   <\/span>PSRSS                     <\/span>{}
Manifest   <\/span>PSSystemTools             <\/span>{}
Manifest   <\/span>PSUserTools               <\/span>{}
Manifest   <\/span>TaskScheduler             <\/span>{}
Manifest   <\/span>WPK                      <\/span> <\/span>{}
Manifest   <\/span>ActiveDirectory           <\/span>{}
Manifest   <\/span>AppLocker                 <\/span>{}
Manifest   <\/span>BitsTransfer              <\/span>{}
Manifest   <\/span>FailoverClusters          <\/span>{}
Manifest   <\/span>GroupPolicy               <\/span>{}
Manifest   <\/span>NetworkLoadBalancingCl… {}
Manifest   <\/span>PSDiagnostics             <\/span>{}
Manifest   <\/span>TroubleshootingPack       <\/span>{}<\/p>\n


PS C:><\/p>\n

<\/font><\/span><\/p>\n

To create a new user in Active Directory, use the New-ADUser<\/b> cmdlet. Two parameters are required when creating a new user: the name<\/b> parameter and the path<\/b> parameter. The name<\/b> parameter is the name of the user object to create, and the path<\/b> parameter specifies the organizational unit that will contain the new object. The path<\/b> parameter uses standard LDAP syntax, as seen here:<\/p>\n

New-ADUser -Name HSG_Test -Path “ou=test,dc=nwtraders,dc=com”<\/p>\n

<\/font><\/span><\/p>\n

If you do not specify the path when creating a new user, an error message will be returned after a few seconds:<\/p>\n

PS C:> New-ADUser -Name HSG_Test1
New-ADUser : Unable to contact the server. This may be because this server does not exist, it is currently down,
does not have the Active Directory Web Services running.
At line:1 char:11
+ New-ADUser <<<<  <\/span>-Name HSG_Test1
    <\/span>+ CategoryInfo          <\/span>: ResourceUnavailable: (:) [New-ADUser], ADServerDownException
    <\/span>+ FullyQualifiedErrorId : Unable to contact the server. This may be because this server does not exist, it i
   <\/span>ently down, or it does not have the Active Directory Web Services running.,Microsoft.ActiveDirectory.Manageme
  <\/span>mmands.NewADUser<\/p>\n

PS C:><\/p>\n

<\/font><\/span><\/p>\n

If you try to supply the name of the new user object in the path and leave out the name<\/b> parameter, you will be prompted for the user name: <\/p>\n

PS C:> New-ADUser -Path “cn=HSG_TestUser1,ou=test,dc=nwtraders,dc=com”<\/p>\n

cmdlet New-ADUser at command pipeline position 1
Supply values for the following parameters:
Name: <\/p>\n

<\/font><\/span><\/p>\n

After you supply the name for the user object, an error will then be returned:<\/p>\n

New-ADUser : Unable to contact the server. This may be because this server does not exist, it is currently down, or it
does not have the Active Directory Web Services running.
At line:1 char:11
+ New-ADUser <<<<  <\/span>-Path “cn=HSG_TestUser1,ou=test,dc=nwtraders,dc=com”
    <\/span>+ CategoryInfo          <\/span>: ResourceUnavailable: (:) [New-ADUser], ADServerDownException
    <\/span>+ FullyQualifiedErrorId : Unable to contact the server. This may be because this server does not exist, it is curr
   <\/span>ently down, or it does not have the Active Directory Web Services running.,Microsoft.ActiveDirectory.Management.Co
  <\/span>mmands.NewADUser<\/p>\n

PS C:><\/p>\n

<\/font><\/span><\/p>\n

After the New-ADUser<\/b> cmdlet has been used to create the new user and the name and path supplied, no feedback is displayed on the Windows PowerShell console. You can use Active Directory Users and Computers to see if the user object has been created, as shown in the following image.<\/p>\n

\"Image<\/p>\n

\n

 <\/p>\n<\/p>\n

If you do not want to bother with opening Active Directory Users and Computers, you can use the Get-ADUser<\/b> cmdlet to search for your newly created user:<\/p>\n

PS C:> Get-ADUser -Filter “name -like ‘hsg*'”<\/p>\n


DistinguishedName : CN=HSG_Test,OU=test,DC=NWTraders,DC=Com
Enabled           <\/span>: False
GivenName         <\/span>:
Name              <\/span>: HSG_Test
ObjectClass       <\/span>: user
ObjectGUID        <\/span>: 62d45f11-dad4-4752-b82d-562f8f58243f
SamAccountName    <\/span>: HSG_Test
SID               <\/span>: S-1-5-21-3746122405-834892460-3960030898-1159
Surname           <\/span>:
UserPrincipalName :<\/p>\n

<\/font><\/span><\/p>\n

 <\/p>\n

JM, that is all there is to using the Windows PowerShell cmdlets to create a bunch of new users in Active Directory. Active Directory Week will continue tomorrow. <\/p>\n

If you want to know exactly what we will be looking at tomorrow, follow us on Twitter<\/a> or Facebook<\/font><\/a>. If you have any questions, send e-mail to us at scripter@microsoft.com<\/font><\/a> or post your questions on the Official Scripting Guys Forum<\/a>. See you tomorrow. Until then, peace.<\/p>\n

\n

 <\/p>\n<\/p>\n

Ed Wilson and Craig Liebendorfer, Scripting Guys<\/span><\/b><\/p>\n

\n

 <\/p><\/p>\n","protected":false},"excerpt":{"rendered":"

    Hey, Scripting Guy! I have heard that Windows PowerShell 2.0 includes cmdlets to work with Microsoft Active Directory Domain Services (AD DS). However, when I use the Get-Command cmdlet to list the available cmdlets in my Windows PowerShell session, I do not see any AD DS cmdlets. What gives? Is this more of […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[7,3,20,45],"class_list":["post-83419","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-active-directory","tag-scripting-guy","tag-user-accounts","tag-windows-powershell"],"acf":[],"blog_post_summary":"

    Hey, Scripting Guy! I have heard that Windows PowerShell 2.0 includes cmdlets to work with Microsoft Active Directory Domain Services (AD DS). However, when I use the Get-Command cmdlet to list the available cmdlets in my Windows PowerShell session, I do not see any AD DS cmdlets. What gives? Is this more of […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/83419","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=83419"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/83419\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=83419"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=83419"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=83419"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}