Which cmdlet should you run?

Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2012 R2.
The domain contains a user named User1 and a global security group named Group1.
User1 logs on to a client computer named Computer1.
You need to disable the computer account of Computer1.
Which cmdlet should you run?

Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2012 R2.
The domain contains a user named User1 and a global security group named Group1.
User1 logs on to a client computer named Computer1.
You need to disable the computer account of Computer1.
Which cmdlet should you run?

A.
Add AdPrincipalGroupMember.hip

B.
Install -AddsDomainController

C.
Install-WindowsFeature

D.
Install AddsDomain

E.
RonameAdObject

F.
Set-AdAccountControl

G.
Set-AdGroup

H.
Set-User

Explanation:
The Rename-ADObject cmdlet changes the name of an Active Directory object.
References:
http://technet.microsoft.com/en-us/library/ee617225.aspx



Leave a Reply 16

Your email address will not be published. Required fields are marked *


WTF

WTF

F is wrong. Set-AdAccountControl is for user’s UAC settings.

JanTheMan

JanTheMan

wrong answers, The correct answer is Disable-ADAccount
The Disable-ADAccount cmdlet disables an Active Directory user, computer, or service account.

Soko

Soko

F is correct.

Use the following command:

Set-ADAccountControl ” -Enabled $false

lucasdrums

lucasdrums

Set-ADAccountControl -Enabled $false -Identity “computername” does not work. This command works only for User objects, not computer objects. So Answer is wrong, I also agree with JanTheMan, the CMDlet is Disable-ADAccount which is not an option. WRONG ANSWER

lucasdrums

lucasdrums

I meant WRONG QUESTION

Has

Has

get-help Set-ADAccountControl

DESCRIPTION
The Set-ADAccountControl cmdlet modifies the user account control (UAC) values for an
Active Directory user or computer account.

Has

Has

Here is an example

C:\PS>Set-ADAccountControl -Identity “FABRIKAM-SRV1” -TrustedForDelegation $true

retro

retro

Set-ADAccountControl -Identity ‘MachineFQDN’ -Enabled $False

-tested in lab.

ITNavigator

ITNavigator

It’s obviously “F”, but
if computer name and user name are the same (Set-ADAccountControl -Identity ‘MachineFQDN’ -Enabled $False) will disable user account, however you still can specify that you want to disable using that command:
Set-ADAccountControl ‘CN=’Computer1′,OU=’Computers’,DC=contoso,DC=com’ -Enabled $False

Gerard Manvussa

Gerard Manvussa

Tested in lab.
To specify an LDAP DN, I used double-quotes:
Set-ADAccountControl “CN=Computer1,OU=Computers,DC=contoso,DC=com” -Enabled $False

Check in AD Admin Center for this computer object, you will see it’s disabled.

related web-site

related web-site

Hey this is somewhat of off topic but I was wanting to know if blogs use WYSIWYG editors or if you have to manually code with HTML. I’m starting a blog soon but have no coding expertise so I wanted to get advice from someone with experience. Any help would be greatly appreciated!|

Yeah

Yeah

Bitch keep your ass on topic.

Pulea

Pulea

Bitch stop spamming your stupid ass party invitations site