COMMAND EVERYTHING.
Practical commands. Clear explanations. Authoritative sources.
2557 published commands · 2545 documentation-verified · 12 awaiting review · Ask Cmdlet AI
Creates a new Active Directory forest.
Install-ADDSForest [-SkipPreChecks] -DomainName <String>
[-SafeModeAdministratorPassword <SecureString>] [-CreateDnsDelegation]
[-DatabasePath <String>] [-DnsDelegationCredential <PSCredential>] [-NoDnsOnNetwork]
[-DomainMode <DomainMode>] [-DomainNetbiosName <String>] [-ForestMode <ForestMode>]
[-InstallDns] [-LogPath <String>] [-NoRebootOnCompletion] [-SkipAutoConfigureDns]
[-SysvolPath <String>] [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryInstalls an Active Directory managed service account on a computer or caches a group managed service account on a computer.
Install-ADServiceAccount [-WhatIf] [-Confirm] [-AccountPassword <SecureString>] [-AuthType <ADAuthType>]
[-Force] [-Identity] <ADServiceAccount> [-PromptForPassword] [<CommonParameters>]Copied 0 timesActive DirectoryPerforms installation and configuration of the Active Directory Certificate Services (AD CS) Certification Authority (CA) role service.
Install-AdcsCertificationAuthority [-AllowAdministratorInteraction]
[-ValidityPeriod <ValidityPeriod>] [-ValidityPeriodUnits <Int32>]
[-CACommonName <String>] [-CADistinguishedNameSuffix <String>]
[-CAType <CAType>] [-CryptoProviderName <String>]
[-DatabaseDirectory <String>] [-HashAlgorithmName <String>]
[-IgnoreUnicode] [-KeyLength <Int32>] [-LogDirectory <String>]
[-OutputCertRequestFile <String>] [-OverwriteExistingCAinDS]
[-OverwriteExistingKey] [-ParentCA <String>] [-OverwriteExistingDatabase]
[-Credential <PSCredential>] [-Force] [-WhatIf] [-Confirm]
[<CommonParameters>]Copied 0 timesActive DirectoryPerforms the configuration of Certificate Enrollment Policy Web Service.
Install-AdcsEnrollmentPolicyWebService
[-AuthenticationType <AuthenticationType>] [-SSLCertThumbprint <String>]
[-KeyBasedRenewal] [-Force] [-Credential <PSCredential>] [-WhatIf]
[-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryPerforms the initial configuration of the Certificate Enrollment Web service.
Install-AdcsEnrollmentWebService [-CAConfig <String>]
[-ApplicationPoolIdentity] [-AuthenticationType <AuthenticationType>]
[-SSLCertThumbprint <String>] [-RenewalOnly] [-AllowKeyBasedRenewal]
[-Force] [-Credential <PSCredential>] [-WhatIf] [-Confirm]
[<CommonParameters>]Copied 0 timesActive DirectoryInstalls the NDES role service.
Install-AdcsNetworkDeviceEnrollmentService [-ApplicationPoolIdentity]
[-RAName <String>] [-RAEmail <String>] [-RACompany <String>]
[-RADepartment <String>] [-RACity <String>] [-RAState <String>]
[-RACountry <String>] [-SigningProviderName <String>]
[-SigningKeyLength <Int32>] [-EncryptionProviderName <String>]
[-EncryptionKeyLength <Int32>] [-CAConfig <String>] [-Force]
[-Credential <PSCredential>] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryInstalls the Online Responder service.
Install-AdcsOnlineResponder [-Force] [-Credential <PSCredential>] [-WhatIf]
[-Confirm] [<CommonParameters>]Copied 0 timesActive DirectoryRaises the behavior level of a farm.
Invoke-AdfsFarmBehaviorLevelRaise [-Member <String[]>] [-Credential <PSCredential>]
[-ServiceAccountCredential <PSCredential>] [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]Copied 0 timesActive DirectorySchedules a remote Group Policy refresh on the specified computer.
Invoke-GPUpdate [-AsJob] [-Boot] [[-Computer] <String>] [[-RandomDelayInMinutes] <Int32>] [-Force]
[-LogOff] [-Target <String>] [<CommonParameters>]Copied 0 timesActive DirectoryMoves a directory server in Active Directory to a new site.
Move-ADDirectoryServer [-WhatIf] [-Confirm] [-AuthType <ADAuthType>] [-Credential <PSCredential>]
[-Identity] <ADDirectoryServer> [-Server <String>] [-Site] <ADReplicationSite> [<CommonParameters>]Copied 0 timesActive DirectoryMoves operation master roles to an Active Directory directory server.
Move-ADDirectoryServerOperationMasterRole [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Force] [-Identity] <ADDirectoryServer>
[-OperationMasterRole] <ADOperationMasterRole[]> [-PassThru] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryMoves an Active Directory object or a container of objects to a different container or domain.
Move-ADObject [-WhatIf] [-Confirm] [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Identity] <ADObject>
[-Partition <String>] [-PassThru] [-Server <String>] [-TargetPath] <String> [-TargetServer <String>]
[<CommonParameters>]Copied 0 timesActive DirectoryCreates an Active Directory Domain Services authentication policy object.
New-ADAuthenticationPolicy [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-ComputerAllowedToAuthenticateTo <String>] [-ComputerTGTLifetimeMins <Int32>]
[-Credential <PSCredential>] [-Description <String>] [-Enforce]
[-Instance <ADAuthenticationPolicy>] [-Name] <String> [-OtherAttributes <Hashtable>] [-PassThru]
[-ProtectedFromAccidentalDeletion <Boolean>] [-RollingNTLMSecret <ADStrongNTLMPolicyType>]
[-Server <String>] [-ServiceAllowedToAuthenticateFrom <String>]
[-ServiceAllowedToAuthenticateTo <String>] [-ServiceAllowedNTLMNetworkAuthentication]
[-ServiceTGTLifetimeMins <Int32>] [-UserAllowedToAuthenticateFrom <String>]
[-UserAllowedToAuthenticateTo <String>] [-UserAllowedNTLMNetworkAuthentication]
[-UserTGTLifetimeMins <Int32>] [<CommonParameters>]Copied 0 timesActive DirectoryCreates an Active Directory Domain Services authentication policy silo object.
New-ADAuthenticationPolicySilo [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-ComputerAuthenticationPolicy <ADAuthenticationPolicy>] [-Credential <PSCredential>] [-Description <String>]
[-Enforce] [-Instance <ADAuthenticationPolicySilo>] [-Name] <String> [-OtherAttributes <Hashtable>]
[-PassThru] [-ProtectedFromAccidentalDeletion <Boolean>] [-Server <String>]
[-ServiceAuthenticationPolicy <ADAuthenticationPolicy>] [-UserAuthenticationPolicy <ADAuthenticationPolicy>]
[<CommonParameters>]Copied 0 timesActive DirectoryCreates a central access rule in Active Directory.
New-ADCentralAccessRule [-WhatIf] [-Confirm] [-AuthType <ADAuthType>] [-Credential <PSCredential>]
[-CurrentAcl <String>] [-Description <String>] [-Instance <ADCentralAccessRule>] [-Name] <String> [-PassThru]
[-ProposedAcl <String>] [-ProtectedFromAccidentalDeletion <Boolean>] [-ResourceCondition <String>]
[-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryCreates a new claim transformation policy object in Active Directory.
New-ADClaimTransformPolicy [-WhatIf] [-Confirm] [-AuthType <ADAuthType>] [-Credential <PSCredential>]
[-DenyAll] [-Description <String>] [-Name] <String> [-PassThru] [-ProtectedFromAccidentalDeletion <Boolean>]
[-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryCreates a new claim type in Active Directory.
New-ADClaimType [-WhatIf] [-Confirm] [-AppliesToClasses <String[]>] [-AuthType <ADAuthType>]
[-Credential <PSCredential>] [-Description <String>] [-DisplayName] <String> [-Enabled <Boolean>]
[-ID <String>] [-Instance <ADClaimType>] [-IsSingleValued <Boolean>] [-OtherAttributes <Hashtable>]
[-PassThru] [-ProtectedFromAccidentalDeletion <Boolean>] [-RestrictValues <Boolean>] [-Server <String>]
-SourceAttribute <String> [-SuggestedValues <ADSuggestedValueEntry[]>] [<CommonParameters>]Copied 0 timesActive DirectoryCreates a new Active Directory computer object.
New-ADComputer [-WhatIf] [-Confirm] [-AccountExpirationDate <DateTime>] [-AccountNotDelegated <Boolean>]
[-AccountPassword <SecureString>] [-AllowReversiblePasswordEncryption <Boolean>]
[-AuthenticationPolicy <ADAuthenticationPolicy>] [-AuthenticationPolicySilo <ADAuthenticationPolicySilo>]
[-AuthType <ADAuthType>] [-CannotChangePassword <Boolean>] [-Certificates <X509Certificate[]>]
[-ChangePasswordAtLogon <Boolean>] [-CompoundIdentitySupported <Boolean>] [-Credential <PSCredential>]
[-Description <String>] [-DisplayName <String>] [-DNSHostName <String>] [-Enabled <Boolean>]
[-HomePage <String>] [-Instance <ADComputer>] [-KerberosEncryptionType <ADKerberosEncryptionType>]
[-Location <String>] [-ManagedBy <ADPrincipal>] [-Name] <String> [-OperatingSystem <String>]
[-OperatingSystemHotfix <String>] [-OperatingSystemServicePack <String>] [-OperatingSystemVersion <String>]
[-OtherAttributes <Hashtable>] [-PassThru] [-PasswordNeverExpires <Boolean>] [-PasswordNotRequired <Boolean>]
[-Path <String>] [-PrincipalsAllowedToDelegateToAccount <ADPrincipal[]>] [-SAMAccountName <String>]
[-Server <String>] [-ServicePrincipalNames <String[]>] [-TrustedForDelegation <Boolean>]
[-UserPrincipalName <String>] [<CommonParameters>]Copied 0 timesActive DirectoryPerforms prerequisite checks for cloning a domain controller and generates a clone configuration file if all checks succeed.
New-ADDCCloneConfigFile [-AlternateWINSServer <String>] [-CloneComputerName <String>] [-IPv4Address <String>]
[-IPv4DefaultGateway <String>] [-IPv4DNSResolver <String[]>] [-IPv4SubnetMask <String>]
[-IPv6DNSResolver <String[]>] [-Offline] -Path <String> [-PreferredWINSServer <String>] [-SiteName <String>]
[-Static] [<CommonParameters>]Copied 0 timesActive DirectoryCreates a new Active Directory fine-grained password policy.
New-ADFineGrainedPasswordPolicy [-WhatIf] [-Confirm] [-AuthType <ADAuthType>] [-ComplexityEnabled <Boolean>]
[-Credential <PSCredential>] [-Description <String>] [-DisplayName <String>]
[-Instance <ADFineGrainedPasswordPolicy>] [-LockoutDuration <TimeSpan>] [-LockoutObservationWindow <TimeSpan>]
[-LockoutThreshold <Int32>] [-MaxPasswordAge <TimeSpan>] [-MinPasswordAge <TimeSpan>]
[-MinPasswordLength <Int32>] [-Name] <String> [-OtherAttributes <Hashtable>] [-PassThru]
[-PasswordHistoryCount <Int32>] [-Precedence] <Int32> [-ProtectedFromAccidentalDeletion <Boolean>]
[-ReversibleEncryptionEnabled <Boolean>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryCreates an Active Directory group.
New-ADGroup [-WhatIf] [-Confirm] [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Description <String>]
[-DisplayName <String>] [-GroupCategory <ADGroupCategory>] [-GroupScope] <ADGroupScope> [-HomePage <String>]
[-Instance <ADGroup>] [-ManagedBy <ADPrincipal>] [-Name] <String> [-OtherAttributes <Hashtable>] [-PassThru]
[-Path <String>] [-SamAccountName <String>] [-Server <String>] [<CommonParameters>]Copied 0 timesActive DirectoryCreates an Active Directory organizational unit.
New-ADOrganizationalUnit [-WhatIf] [-Confirm] [-AuthType <ADAuthType>] [-City <String>] [-Country <String>]
[-Credential <PSCredential>] [-Description <String>] [-DisplayName <String>]
[-Instance <ADOrganizationalUnit>] [-ManagedBy <ADPrincipal>] [-Name] <String> [-OtherAttributes <Hashtable>]
[-PassThru] [-Path <String>] [-PostalCode <String>] [-ProtectedFromAccidentalDeletion <Boolean>]
[-Server <String>] [-State <String>] [-StreetAddress <String>] [<CommonParameters>]Copied 0 timesActive DirectoryCreates an Active Directory replication site in the directory.
New-ADReplicationSite [-WhatIf] [-Confirm] [-AuthType <ADAuthType>]
[-AutomaticInterSiteTopologyGenerationEnabled <Boolean>] [-AutomaticTopologyGenerationEnabled <Boolean>]
[-Credential <PSCredential>] [-Description <String>] [-Instance <ADReplicationSite>]
[-InterSiteTopologyGenerator <ADDirectoryServer>] [-ManagedBy <ADPrincipal>] [-Name] <String>
[-OtherAttributes <Hashtable>] [-PassThru] [-ProtectedFromAccidentalDeletion <Boolean>]
[-RedundantServerTopologyEnabled <Boolean>] [-ReplicationSchedule <ActiveDirectorySchedule>]
[-ScheduleHashingEnabled <Boolean>] [-Server <String>] [-TopologyCleanupEnabled <Boolean>]
[-TopologyDetectStaleEnabled <Boolean>] [-TopologyMinimumHopsEnabled <Boolean>]
[-UniversalGroupCachingEnabled <Boolean>] [-UniversalGroupCachingRefreshSite <ADReplicationSite>]
[-WindowsServer2000BridgeheadSelectionMethodEnabled <Boolean>]
[-WindowsServer2000KCCISTGSelectionBehaviorEnabled <Boolean>] [-WindowsServer2003KCCBehaviorEnabled <Boolean>]
[-WindowsServer2003KCCIgnoreScheduleEnabled <Boolean>]
[-WindowsServer2003KCCSiteLinkBridgingEnabled <Boolean>] [<CommonParameters>]Copied 0 timesActive DirectoryCreates a new Active Directory site link for in managing replication.
New-ADReplicationSiteLink [-WhatIf] [-Confirm] [-AuthType <ADAuthType>] [-Cost <Int32>]
[-Credential <PSCredential>] [-Description <String>] [-Instance <ADReplicationSiteLink>]
[-InterSiteTransportProtocol <ADInterSiteTransportProtocolType>] [-Name] <String>
[-OtherAttributes <Hashtable>] [-PassThru] [-ReplicationFrequencyInMinutes <Int32>]
[-ReplicationSchedule <ActiveDirectorySchedule>] [-Server <String>] [[-SitesIncluded] <ADReplicationSite[]>]
[<CommonParameters>]Copied 0 times