Difference between revisions of "Quest Active Directory and O365"

Latest revision as of 10:06, 27 April 2015

In Powershell load the Quest snapin
Add-PSSnapin Quest.ActiveRoles.ADManagement
$pw = read-host "Enter password" -AsSecureString
connect-QADService -service 'dc02.example.com'-ConnectionAccount 'DOMAIN\useracc'-ConnectionPassword $pw
To disconnect at the end of session : Disconnect-QADService

The following are examples of configuring the ProxyAddresses atribute :
$roy = get-qaduser abcde001
$roy | set-qaduser -objectAttributes @{ProxyAddresses=@{Update=@("SMTP:roy@globomantics.com")}}
$roy | set-qaduser -objectAttributes @{ProxyAddresses=@{Delete=@("SMTP:roy@globomantics.com")}
$roy | set-qaduser -objectAttributes @{ProxyAddresses=@{Append=@("smtp:george2@bold.ac.uk")}}

The following sets the users password.
Set-QADUser <user> -UserPassword “Password”

Unlocking a user
unlock-QADUser 'MyDomain\JSmith'
Unlock-QADUser DSotnikov

Setting Extensionattributes
Get-QADUser user1 | Set-QADUser -objectAttributes @{extensionAttribute1="your value"}

Change account expiry dates
get-qaduser -AccountExpiresafter 2014/07/26 -AccountExpiresbefore 2014/08/02 | set-qaduser -accountexpires 2030/07/26

Get all disabled accounts
Get-QADUser -Disabled

Get all locked accounts in the accounting department
Get-QADUser -Locked -Department Accounting

Examples of get-QADGroup
Display the description of the 'SuperAdmins' group in domain ss64Dom
PS C:>(get-QADGroup 'ss64Dom\SuperAdmins').DirectoryEntry.description
Using an LDAP search filter, display all the groups whose description starts with an 's'
PS C:> get-QADGroup -SearchRoot 'ss64.com/sampleOU' -LdapFilter '(description=s*)'
List all distribution groups in a specific OU container:
PS C:> get-QADGroup -SearchRoot 'ss64.com/sampleOU' -GroupType 'Distribution' ( Security ??? )
Retrieve groups from a particular container that have the user usr1021 as a direct or indirect member:
PS C:> get-QADGroup -SearchRoot '<DN of container>' -ContainsIndirectMember 'ss64Dom\usr1021'

To connect to Office365
$O365Cred = Get-Credential
$O365Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $O365Cred -Authentication Basic -AllowRedirection
Import-PSSession $O365Session
Connect-MsolService -Credential $O365Cred

To find mailboxes with forwarders
Get-Mailbox -ResultSize Unlimited | select UserPrincipalName,ForwardingSmtpAddress,DeliverToMailboxAndForward | Export-csv .\users.csv -NoTypeInformation