How to remove a member from a group in Active Directory using PowerShell scripts?
Read on to know how to remove an Active Directory (AD) account from a group using PowerShell and how you can get it done easier with ADManager Plus, a comprehensive Active Directory management solution.
Windows PowerShell
- Identify the domain in which the AD account to be removed from the group is located.
- Create and compile the script for removing the AD account from the group. Execute the script in PowerShell.
- Sample script to remove a member from an AD group account:Sample script to remove a member from an AD group account:
Copied
PS C:\> Remove-ADGroupMember -Identity "DemoGroup1" -Members "DemoUser1"PS C:\> Remove-ADGroupMember -Identity "DemoGroup1" -Members "DemoUser1"
Click to copy entire script
ADManager Plus
- Navigate to Management > Group Management > Modify Single Group.
- Select the Domain and the AD Account(s) you wish to remove from the group. Then click Apply.
Screenshot
» Start 30-day Free Trial
Although removing an AD account from a group with native tools like PowerShell looks simple, it comes with a few limitations:
- A PowerShell script can be run only from the computers which have the Active Directory Domain Services role installed in them.
- The syntax, parameters and iterations need to be correct. A typo or incorrect syntax might be difficult to spot and rectify especially when the script is a long one.
- Inability to delegate the management of groups to help desk technicians.
ADManager Plus helps you perform the same with a few clicks from its web based GUI console with pre-defined reports to list all users and remove them them right from the reports. Learn more about it here.