Difference between revisions of "Quest Active Directory and O365"

Revision as of 09:14, 30 July 2014

In Powershell load the Quest snapin
Add-PSSnapin Quest.ActiveRoles.ADManagement
$pw = read-host "Enter password" -AsSecureString
connect-QADService -service 'SECRET'-ConnectionAccount 'SECRET'-ConnectionPassword $pw
To disconnect at the end of session : Disconnect-QADService

The following are examples of configuring the ProxyAddresses atribute :

$roy = get-qaduser abcde001
$roy | set-qaduser -objectAttributes @{ProxyAddresses=@{Update=@("SMTP:roy@globomantics.com")}}
$roy | set-qaduser -objectAttributes @{ProxyAddresses=@{Delete=@("SMTP:roy@globomantics.com")}
$roy | set-qaduser -objectAttributes @{ProxyAddresses=@{Append=@("smtp:george2@bold.ac.uk")}} 

The following sets the users password.

Set-QADUser <user> -UserPassword “Password”

Unlocking a user
unlock-QADUser 'MyDomain\JSmith'
Unlock-QADUser DSotnikov

To connect to Office365
$O365Cred = Get-Credential
$O365Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $O365Cred -Authentication Basic -AllowRedirection
Import-PSSession $O365Session
Connect-MsolService -Credential $O365Cred

Extensionattributes
Get-QADUser user1 | Set-QADUser -objectAttributes @{extensionAttribute1="your value"}

Get all disabled accounts
Get-QADUser -Disabled
Get all locked accounts in the accounting department
Get-QADUser -Locked -Department Accounting
Examples of get-QADGroup

Display the description of the 'SuperAdmins' group in domain ss64Dom
PS C:>(get-QADGroup 'ss64Dom\SuperAdmins').DirectoryEntry.description
Using an LDAP search filter, display all the groups whose description starts with an 's'
PS C:> get-QADGroup -SearchRoot 'ss64.com/sampleOU' -LdapFilter '(description=s*)'
List all distribution groups in a specific OU container:
PS C:> get-QADGroup -SearchRoot 'ss64.com/sampleOU' -GroupType 'Distribution' ( Security ??? ) 
Retrieve groups from a particular container that have the user usr1021 as a direct or indirect member:
PS C:> get-QADGroup -SearchRoot '<DN of container>' -ContainsIndirectMember 'ss64Dom\usr1021'

Mailboxes with forwarders
Get-Mailbox -ResultSize Unlimited | select UserPrincipalName,ForwardingSmtpAddress,DeliverToMailboxAndForward | Export-csv .\users.csv -NoTypeInformation Change account expiry dates get-qaduser -AccountExpiresafter 2014/07/26 -AccountExpiresbefore 2014/08/02 | set-qaduser -accountexpires 2030/07/26