How to modify an account in Active Directory?
Read on to know how to modify an account in Active Directory using PowerShell and how you can get it done easily with ADManager Plus.
Steps to modify an account using powershell :
- Identify the domain in which the account to be modified is located.
- List the attributes that have to be modified.
- Create and compile the script for modifying the AD account. Execute the script in PowerShell.
- Sample script to disable an AD User account:
Click to copy entire script
PS C:\> Set-ADObject -Identity 'CN=ManuJos Direct Reports,OU=Finance,OU=UserAccounts,DC=EXAMPLE,DC=COM' -Description "Employee in Finance dept"
How to modify an account in Active Directory :
- Navigate to Management > User Management > Modify Single User. .
- Select the Domain and the User Account(s) you wish to modify and make the modifications to the desired attributes. You can even import this list from a CSV file. Click Apply.
» Start 30-day Free Trial
Although modifying AD accounts with native tools like PowerShell looks simple, it comes with a few limitations:
- The PowerShell script can be run only from the computers which have the Active Directory Domain Services role installed in them.
- Need for a new script, in case multiple AD accounts are to be modified.
- The syntax, parameters and iterations need to be correct. A typo or incorrect syntax might be difficult to spot and rectify, especially when the script is a long one.
- You can modify the accounts only if you know the distinguished name or the GUID of the AD account.
- Cannot delegate the modification of AD accounts or other AD management tasks to help desk technicians.
ADManager Plus lets you perform the same with a few clicks from its web-based GUI console. It also has options for modifying multiple users simultaneously with templates or by importing a CSV file containing the modified attribute values.