Here\u2019s a list of all the Active Directory cmdlets in Windows PowerShell that are available in Windows Server\u00a02008\u00a0R2 with a link to Microsoft TechNet for each cmdlet for more details.<\/p>\n
Add-ADComputerServiceAccount<\/a><\/p>\n Adds one or more service accounts to an Active\u00a0Directory computer.<\/p>\n Add-ADDomainControllerPasswordReplicationPolicy<\/a><\/p>\n Adds users, computers, and groups to the Allowed List or the Denied List of the read-only domain controller (RODC) Password Replication Policy (PRP).<\/p>\n Add-ADFineGrainedPasswordPolicySubject<\/a><\/p>\n Applies a fine-grained password policy to one more users and groups.<\/p>\n Add-ADGroupMember<\/a><\/p>\n Adds one or more members to an Active\u00a0Directory group.<\/p>\n Add-ADPrincipalGroupMembership<\/a><\/p>\n Adds a member to one or more Active\u00a0Directory groups.<\/p>\n Clear-ADAccountExpiration<\/a><\/p>\n Clears the expiration date for an Active\u00a0Directory account.<\/p>\n Disable-ADAccount<\/a><\/p>\n Disables an Active\u00a0Directory account.<\/p>\n Disable-ADOptionalFeature<\/a><\/p>\n Disables an Active\u00a0Directory optional feature.<\/p>\n Enable-ADAccount<\/a><\/p>\n Enables an Active\u00a0Directory account.<\/p>\n Enable-ADOptionalFeature<\/a><\/p>\n Enables an Active\u00a0Directory optional feature.<\/p>\n Get-ADAccountAuthorizationGroup<\/a><\/p>\n Gets the Active\u00a0Directory security groups that contain an account.<\/p>\n Get-ADAccountResultantPasswordReplicationPolicy<\/a><\/p>\n Gets the resultant password replication policy for an Active\u00a0Directory account.<\/p>\n Get-ADComputer<\/a><\/p>\n Gets one or more Active\u00a0Directory computers.<\/p>\n Get-ADComputerServiceAccount<\/a><\/p>\n Gets the service accounts that are hosted by an Active\u00a0Directory computer.<\/p>\n Get-ADDefaultDomainPasswordPolicy<\/a><\/p>\n Gets the default password policy for an Active\u00a0Directory domain.<\/p>\n Get-ADDomain<\/a><\/p>\n Gets an Active\u00a0Directory domain.<\/p>\n Get-ADDomainController<\/a><\/p>\n Gets one or more Active\u00a0Directory domain controllers, based on discoverable services criteria, search parameters, or by providing a domain controller identifier, such as the NetBIOS name.<\/p>\n Get-ADDomainControllerPasswordReplicationPolicy<\/a><\/p>\n Gets the members of the Allowed List or the Denied List of the RODC PRP.<\/p>\n Get-ADDomainControllerPasswordReplicationPolicyUsage<\/a><\/p>\n Gets the resultant password policy of the specified ADAccount on the specified RODC.<\/p>\n Get-ADFineGrainedPasswordPolicy<\/a><\/p>\n Gets one or more Active\u00a0Directory fine-grained password policies.<\/p>\n Get-ADFineGrainedPasswordPolicySubject<\/a><\/p>\n Gets the users and groups to which a fine-grained password policy is applied.<\/p>\n Get-ADForest<\/a><\/p>\n Gets an Active\u00a0Directory forest.<\/p>\n Get-ADGroup<\/a><\/p>\n Gets one or more Active\u00a0Directory groups.<\/p>\n Get-ADGroupMember<\/a><\/p>\n Gets the members of an Active\u00a0Directory group.<\/p>\n Get-ADObject<\/a><\/p>\n Gets one or more Active\u00a0Directory objects.<\/p>\n Get-ADOptionalFeature<\/a><\/p>\n Gets one or more Active\u00a0Directory optional features.<\/p>\n Get-ADOrganizationalUnit<\/a><\/p>\n Gets one or more Active\u00a0Directory OUs.<\/p>\n Get-ADPrincipalGroupMembership<\/a><\/p>\n Gets the Active\u00a0Directory groups that have a specified user, computer, or group.<\/p>\n Get-ADRootDSE<\/a><\/p>\n Gets the root of a domain controller information tree.<\/p>\n Get-ADServiceAccount<\/a><\/p>\n Gets one or more Active\u00a0Directory service accounts.<\/p>\n Get-ADUser<\/a><\/p>\n Gets one or more Active\u00a0Directory users.<\/p>\n Get-ADUserResultantPasswordPolicy<\/a><\/p>\n Gets the resultant password policy for a user.<\/p>\n Install-ADServiceAccount<\/a><\/p>\n Installs an Active\u00a0Directory service account on a computer.<\/p>\n Move-ADDirectoryServer<\/a><\/p>\n Moves a domain controller in AD\u00a0DS to a new site.<\/p>\n Move-ADDirectoryServerOperationasterRole<\/a><\/p>\n Moves operation master (also known as flexible single master operations or FSMO) roles to an Active\u00a0Directory domain controller.<\/p>\n Move-ADObject<\/a><\/p>\n Moves an Active\u00a0Directory object or a container of objects to a different container or domain.<\/p>\n New-ADComputer<\/a><\/p>\n Creates a new Active\u00a0Director computer.<\/p>\n New-ADFineGrainedPasswordPolicy<\/a><\/p>\n Creates a new Active\u00a0Directory fine-grained password policy.<\/p>\n New-ADGroup<\/a><\/p>\n Creates an Active\u00a0Directory group.<\/p>\n New-ADObject<\/a><\/p>\n Creates an Active\u00a0Directory objet.<\/p>\n New-ADOrganizationalUnit<\/a><\/p>\n Creates a new Active\u00a0Directory OU.<\/p>\n New-ADServiceAccount<\/a><\/p>\n Creates a new Active\u00a0Directory service account.<\/p>\n New-ADUser<\/a><\/p>\n Creates a new Active\u00a0Directory user.<\/p>\n Remove-ADComputer<\/a><\/p>\n Removes an Active\u00a0Directory computer.<\/p>\n Remove-ADComputerServiceAccount<\/a><\/p>\n Removes one or more service accounts from a computer.<\/p>\n Remove-ADDomainControllerPasswordReplicationPolicy<\/a><\/p>\n Removes users, computers, and groups from the Allowed List or the Denied List of the RODC PRP.<\/p>\n Remove-ADFineGrainedPasswordPolicy<\/a><\/p>\n Removes an Active\u00a0Directory fine-grained password policy.<\/p>\n Remove-ADFineGrainedPasswordPolicySubject<\/a><\/p>\n Removes one or more users from a fine-grained password policy.<\/p>\n Remove-ADGroup<\/a><\/p>\n Removes an Active\u00a0Directory group.<\/p>\n Remove-ADGroupMember<\/a><\/p>\n Removes one or more members from an Active\u00a0Directory group.<\/p>\n Remove-ADObject<\/a><\/p>\n Removes an Active\u00a0Directory object.<\/p>\n Remove-ADOrganizationalUnit<\/a><\/p>\n Removes an Active\u00a0Directory OU.<\/p>\n Remove-ADPrincipalGroupMembership<\/a><\/p>\n Removes a member from one or more Active\u00a0Directory groups.<\/p>\n Remove-ADServiceAccount<\/a><\/p>\n Removes an Active\u00a0Directory service account.<\/p>\n Remove-ADUser<\/a><\/p>\n Removes an Active\u00a0Directory user.<\/p>\n Rename-ADObject<\/a><\/p>\n Changes the name of an Active\u00a0Directory object.<\/p>\n Reset-ADServiceAccountPassword<\/a><\/p>\n Resets the service account password for a computer.<\/p>\n Restore-ADObject<\/a><\/p>\n Restores an Active\u00a0Directory object.<\/p>\n Search-ADAccount<\/a><\/p>\n Gets Active\u00a0Directory user, computer, and service accounts.<\/p>\n Set-ADAccountControl<\/a><\/p>\n Modifies user account control (UAC) values for an Active\u00a0Directory account.<\/p>\n Set-ADAccountExpiration<\/a><\/p>\n Sets the expiration date for an Active\u00a0Directory account.<\/p>\n Set-ADAccountPassword<\/a><\/p>\n Modifies the password of an Active\u00a0Directory account.<\/p>\n Set-ADComputer<\/a><\/p>\n Modifies an Active\u00a0Directory computer.<\/p>\n Set-ADDefaultDomainPasswordPolicy<\/a><\/p>\n Modifies the default password policy for an Active\u00a0Directory domain.<\/p>\n Set-ADDomain<\/a><\/p>\n Modifies an Active\u00a0Directory domain.<\/p>\n Set-ADDomainMode<\/a><\/p>\n Sets the domain functional level for an Active\u00a0Directory domain.<\/p>\n Set-ADFineGrainedPasswordPolicy<\/a><\/p>\n Modifies an Active\u00a0Directory fine-grained password policy.<\/p>\n Set-ADForest<\/a><\/p>\n Modifies an Active\u00a0Directory forest.<\/p>\n Set-ADForestMode<\/a><\/p>\n Sets the forest mode for an Active\u00a0Directory forest.<\/p>\n Set-ADGroup<\/a><\/p>\n Modifies an Active\u00a0Directory group.<\/p>\n Set-ADObject<\/a><\/p>\n Modifies an Active\u00a0Directory object.<\/p>\n Set-ADOrganizationalUnit<\/a><\/p>\n Modifies an Active\u00a0Directory OU.<\/p>\n Set-ADServiceAccount<\/a><\/p>\n Modifies an Active\u00a0Directory service account.<\/p>\n Set-ADUser<\/a><\/p>\n Modifies an Active\u00a0Directory user.<\/p>\n