How can I add a user to a specific group in Active Directory for 35 days and then remove the user from the group using PowerShell?

Hi @Zring Abdulrazzaq Rasool ,

to add and remove users to and from on-premises Active Directory you can use these cmdlets in your script:

Add-ADGroupMember

Remove-ADGroupMember

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

Hi Andreas, thanks for your reply, I found below script and it works, thanks again

Variables

$User = "username" # Replace with the username you want to add

$Group = "groupname" # Replace with the group name

$Days = 35

Add user to group

Add-LocalGroupMember -Group $Group -Member $User

Write-Output "$User has been added to $Group for $Days days."

Schedule removal after 35 days

$action = {

Remove-LocalGroupMember -Group $using:Group -Member $using:User

Write-Output "$using:User has been removed from $using:Group after $using:Days days."

}

$Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date).AddDays($Days)

$Principal = New-ScheduledTaskPrincipal -UserId "SYSTEM" -LogonType ServiceAccount -RunLevel Highest

$Settings = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable

Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute "powershell.exe" -Argument "-Command $($action.ToString())") -Trigger $Trigger -Principal $Principal -Settings $Settings -TaskName "RemoveUserFromGroup" -Description "Remove user $User from $Group after $Days days"