Move AD user by Powershell

Question

I have often move AD users from one OU to another OU.
I am trying to do that by powershell.
In doing that I have to inherit/replace the Meberof list and change the HomeDrive & ScriptPath.
Could you please give me some suggestions or a script to work on?
Thanks

Answer 1

I don't know, and you don't say, what to do if there's not a populated HomeFolder property. My best guess would be something like this:

$DefaultHomeFolderLocation = '\\disk1\homefolder'  
  
$u = Get-ADUser -Id useracct -properties HomeDirectory  
if ($u.HomeDirectory){  
    $newHomeFolderPath = "$(Split-Path $u.HomeDirectory -Parent)" + "\$userName"  
}  
else{  
    $newHomeFolderPath = $DefaultHomeFolderLocation + "\$userName"  
}  

Answer 2

Hi @Marc ,

the following cmdlets should help:
Move-ADObject : https://learn.microsoft.com/en-us/powershell/module/activedirectory/move-adobject?view=windowsserver2022-ps
Set-AdUser : https://learn.microsoft.com/en-us/powershell/module/activedirectory/set-aduser?view=windowsserver2022-ps
Remove-ADGroupMember : https://learn.microsoft.com/en-us/powershell/module/activedirectory/remove-adgroupmember?view=windowsserver2022-ps
Add-ADGroupMember : https://learn.microsoft.com/en-us/powershell/module/activedirectory/add-adgroupmember?view=windowsserver2022-ps

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 3

Thank you @Andreas Baumgarten ,

what about change the HomeDrive & ScriptPath related with the referiments of the new OU group?

Answer 4

I have found some cmdlets below:

-----MOVE USER ------

Get-ADUser -Identity Name.Surname | Move-ADObject -TargetPath "OU=HR,DC=SHELLPRO,DC=LOCAL"  

If I have a target user (target OU) how can get the cleaned target path (without CN=)?

----DELETE "MEMBEROF" WORKING -----

$Users =get-ADuser -identity John -properties *  
ForEach($User In $Users){  
    $MemberOf = $User.MemberOf  
    ForEach($Group In $MemberOf){  
        Write-Host Removing $User from $Group  
        Remove-ADGroupMember $Group $User -Confirm:$false  
            }  
}  

Answer 5

You can remove the CN from the distinguishedName like this:

$dn = "CN=MySurname\, MyGivenname,OU=XXX,OU=YYY,DC=contso,DC=com"  
  
$regex = 'CN=.*?(?<!\\),(.*)'  
  
$DnMinusTheCN = $dn -replace $regex,'$1' # remove the CN from the DN