Change Country, Country Code via Powershell for a specific OU

Question

Change Country, Country Code via Powershell for a specific OU

Stefanos Constantinou 61

Hello everyone,

I have been trying to get a working command via Powershell on AD server which will change C, Country, CountryCode for a specific OU

Get-ADUser -SearchBase 'OU=Test OU,OU=Users and Computers,OU=Company HQ,DC=DOMAIN,DC=com' -filter * | ForEach {Set-ADUser -Identity * -c="IT" -co="Italy" -countryCode="380"}

no luck with the result with the brackets or without {} after the pipeline

Accepted answer

1 additional answer

Your answer

Answer 1

Anonymous

Hi，

Use -replace to set these properties as there are no corresponding parameters for them

Get-ADUser -SearchBase 'OU=Test OU,OU=Users and Computers,OU=Company HQ,DC=DOMAIN,DC=com' -filter * | Set-ADUser -Replace @{c="IT";co="Italy";countryCode="380"}

Best Regards，
Ian Xue

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Stefanos Constantinou 61 Reputation points

2020-12-19T00:17:36.017+00:00

Thank you, it works amazingly great!

I have marked your answer as accepted.

Additionally, is there any chance to run the command recursively?
For replacing the attributes for sub/child-OUs?
Rich Matheisen 47,901 Reputation points

2020-12-19T03:00:15.703+00:00

Add "-SeachScope Subtree" to the Get-ADUser.
Stefanos Constantinou 61 Reputation points

2020-12-20T18:49:58.793+00:00

Actually it works in Sub-OUs with the original form, I have just tested it

May I have your suggestion in the coding?
It seems I cannot get it right

Rich Matheisen 47,901

To search the OU and all child OUs:

Get-ADUser -SearchBase 'OU=Test OU,OU=Users and Computers,OU=Company HQ,DC=DOMAIN,DC=com' -SearchScope SubTree -filter *

To search only the OU and not its child OUs:

Get-ADUser -SearchBase 'OU=Test OU,OU=Users and Computers,OU=Company HQ,DC=DOMAIN,DC=com' -SearchScope OneLevel -filter *

Stefanos Constantinou 61 Reputation points

2020-12-21T19:24:06.043+00:00

Actually the above by using the pipeline with my Set-ADUser does the same thing.

the following does nothing:
Get-ADUser -SearchBase 'OU=Test OU,OU=Users and Computers,OU=Company HQ,DC=DOMAIN,DC=com' -SearchScope Base -filter * | Set-ADUser -Replace @{c="CY";co="Cyprus";countryCode="196"}

& the following changes both parent and sub-OU user's attributes:
Get-ADUser -SearchBase 'OU=Test OU,OU=Users and Computers,OU=Company HQ,DC=DOMAIN,DC=com' -SearchScope Subtree -filter * | Set-ADUser -Replace @{c="CY";co="Cyprus";countryCode="196"}
Rich Matheisen 47,901 Reputation points

2020-12-21T20:04:18.207+00:00

The default value for the -SearchScope parameter is "SubTree". I provided examples of how to search for children and for any children of those children ("Subtree"), and how to limit the scope of the search to just the immediate children ("OneLevel"). The scope "Base" will never retrieve any AD User objects unless the -SearchBase value is the distinguished name of the AD User.

Answer 2

Rich Matheisen 47,901

Remove the "-Identity *" from the Set-ADUser. You're already piping all the user accounts from the Get-ADUser.

Stefanos Constantinou 61 Reputation points

2020-12-18T20:07:09.913+00:00

I have removed the "-Identity *" , it does not show any errors but it does not work.

The next user's advice with the -replace parameter works great!

Share via

Change Country, Country Code via Powershell for a specific OU

1 additional answer

Your answer