Powershell-move disabled computers to OU

active-directorypowershell

This prints disabled computer accounts to the screen. I want to run a conditional statement against the results and, if true, move them to my "disabled" OU.

get-adcomputer -ldapfilter "(&(objectCategory=computer)(objectClass=computer)(useraccountcontrol:1.2.840.113556.1.4.803:=2))"|select Name, enabled

Best Answer

Get-ADComputer -LDAPFilter "(&(objectCategory=computer)(objectClass=computer)(useraccountcontrol:1.2.840.113556.1.4.803:=2))" | Move-ADObject -TargetPath "OU=disabled,DC=ad,DC=example,DC=net"

Note: This will catch all the computers currently in the OU. You'd need to limit the scope of the search to filter them out otherwise it will retry the move (I'm not sure if it'll fail for those computers, or just skip them)

TheCleaner also wanted me to mention that you can add a -Filter {(DistinguishedName -notlike "OU=disabled,DC=ad,DC=example,DC=net")} to that Get-ADComputer statement to filter out the already moved computer.

Related Solutions

Kiosk Computer GPO

With touchscreen LCDs I've noticed they tend to have built-in power-saving options. The display itself has a timer that counts how long it's been since someone touched the screen, and then goes into standby mode to protect itself.

On the displays, check the menu options accessible through the buttons on the front, and see if you can disable the built-in power-saving options.

GPOs can affect what Windows will do with the power options, but it can't tell the hardware what to. The display itself has it's own agenda, and you need to beat it into submission.

Powershell – trying to add multiple computer accounts to an AD group using powershell

If you are already using the Quest AD cmdlets, have you tried using Get-QADComputer to get the computer account and then pass that on as the Member property?

Import-module ActiveDirectory
$dcPrefix = "asuta.co.il\"
$computernames = Get-Content c:\pacs_ws.txt #input list
foreach ($c in $computernames) {
  Add-QADGroupMember -Identity "S-1-5-21-436374069-152049171-725345543-20610" -Member "$dcPrefix$c"
}

Alternatively, just prepend the Computer account name with the domain FQDN, instead of just the computer account name

Best Answer

Related Solutions

Kiosk Computer GPO

Powershell – trying to add multiple computer accounts to an AD group using powershell

Related Topic