Whether powershell can be used to add and delete administrator rights for domain users on the AD domain server

huangmincong2012 注册会员
2023-02-28 07:07

May I ask if there are some specific operation steps, I don't quite understand, thank you

admin 超级管理员
2023-02-28 07:07

I don't have a test environment here to give you specific steps. Such as GPO setting and delivery, these need to have a specific environment can be configured. If you use the domain environment, you should have the authorization to purchase Microsoft. You can make a case to Microsoft and ask TAC for assistance. Thanks!

dongwei1529 注册会员
2023-02-28 07:07

Active Directory group management is closely related to user management. You can use the cmdlet of the Windows PowerShell Active Directory module to create and delete groups and modify group properties. These CmDlets can also be used to change group membership.
You can issue a group to the domain computer through the GPO as the admin group of the computer.
To temporarily add admin permissions to a user, add the user to this group. When cancellation is required, the user is removed from the group.

New-ADGroup -Name ApplicationAdmins -GroupScope Global 

* - ADPrincipalGroupMembership add user account for the group members.

This link has requirements similar to yours, you can refer to: < span > https://www.likecs.com/ask-10218495.html < / span > < / a > < br / > if the above are helpful to you, hope to adopt. Thanks!