-
Notifications
You must be signed in to change notification settings - Fork 207
/
Copy pathRemove-ADUser.ps1
101 lines (86 loc) · 3.4 KB
/
Remove-ADUser.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
#Requires -Version 5.0
#Requires -Modules ActiveDirectory
<#
.SYNOPSIS
Removes Active Directory account
.DESCRIPTION
.NOTES
This PowerShell script was developed and optimized for ScriptRunner. The use of the scripts requires ScriptRunner.
The customer or user is authorized to copy the script from the repository and use them in ScriptRunner.
The terms of use for ScriptRunner do not apply to this script. In particular, ScriptRunner Software GmbH assumes no liability for the function,
the use and the consequences of the use of this freely available script.
PowerShell is a product of Microsoft Corporation. ScriptRunner is a product of ScriptRunner Software GmbH.
© ScriptRunner Software GmbH
.COMPONENT
Requires Module ActiveDirectory
.LINK
https://github.com/scriptrunner/ActionPacks/tree/master/ActiveDirectory/Users
.Parameter OUPath
Specifies the AD path
[sr-de] Active Directory Pfad
.Parameter Username
Display name, SAMAccountName, DistinguishedName or user principal name of Active Directory user
[sr-de] Anzeigename, SAMAccountName, Distinguished-Name oder UPN des Benutzerkontos
.Parameter DomainAccount
Active Directory Credential for remote execution without CredSSP
[sr-de] Active Directory-Benutzerkonto für die Remote-Ausführung ohne CredSSP
.Parameter DomainName
Name of Active Directory Domain
[sr-de] Name der Active Directory Domäne
.Parameter AuthType
Specifies the authentication method to use
[sr-de] Gibt die zu verwendende Authentifizierungsmethode an
#>
param(
[Parameter(Mandatory = $true,ParameterSetName = "Local or Remote DC")]
[Parameter(Mandatory = $true,ParameterSetName = "Remote Jumphost")]
[string]$OUPath,
[Parameter(Mandatory = $true,ParameterSetName = "Local or Remote DC")]
[Parameter(Mandatory = $true,ParameterSetName = "Remote Jumphost")]
[string]$Username,
[Parameter(Mandatory = $true,ParameterSetName = "Remote Jumphost")]
[PSCredential]$DomainAccount,
[Parameter(ParameterSetName = "Local or Remote DC")]
[Parameter(ParameterSetName = "Remote Jumphost")]
[string]$DomainName,
[Parameter(ParameterSetName = "Local or Remote DC")]
[Parameter(ParameterSetName = "Remote Jumphost")]
[ValidateSet('Basic', 'Negotiate')]
[string]$AuthType = "Negotiate"
)
Import-Module ActiveDirectory
try{
[hashtable]$cmdArgs = @{'ErrorAction' = 'Stop'
'AuthType' = $AuthType
}
if($null -ne $DomainAccount){
$cmdArgs.Add("Credential", $DomainAccount)
}
if([System.String]::IsNullOrWhiteSpace($DomainName)){
$cmdArgs.Add("Current", 'LocalComputer')
}
else {
$cmdArgs.Add("Identity", $DomainName)
}
$Domain = Get-ADDomain @cmdArgs
$cmdArgs = @{'ErrorAction' = 'Stop'
'Server' = $Domain.PDCEmulator
'AuthType' = $AuthType
'Identity' = $Username
}
if($null -ne $DomainAccount){
$cmdArgs.Add("Credential", $DomainAccount)
}
$null = Remove-ADUser @cmdArgs -Confirm:$false
if($SRXEnv) {
$SRXEnv.ResultMessage = "User $($Username) deleted"
}
else {
Write-Output "User $($Username) deleted"
}
}
catch{
throw
}
finally{
}