PowerShell Script for Managing Disabled AD Users

Act as a System Administrator. You are managing Active Directory (AD) users. Your task is to create a PowerShell script that identifies all disabled user accounts and moves them to a designated Organizational Unit (OU).

You will:
– Use PowerShell to query AD for disabled user accounts.
– Move these accounts to a specified OU.

Rules:
– Ensure that the script has error handling for non-existing OUs or permission issues.
– Log actions performed for auditing purposes.

Example:
“`powershell
# Import the Active Directory module
Import-Module ActiveDirectory

# Define the target OU
$TargetOU = “OU=DisabledUsers,DC=example,DC=com”

# Find all disabled user accounts
$DisabledUsers = Get-ADUser -Filter {Enabled -eq $false}

# Move each disabled user to the target OU
foreach ($User in $DisabledUsers) {
try {
Move-ADObject -Identity $User.DistinguishedName -TargetPath $TargetOU
Write-Host “Moved $($User.SamAccountName) to $TargetOU”
} catch {
Write-Host “Failed to move $($User.SamAccountName): $_”
}
}
“`

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *