Request ActiveRoles Server to deprovision a user account. This removes all its rights and permissions without actually removing it.
Syntax Deprovision-QADUser [[-Identity] IdentityParameter] [-ReportFile <String>] [-Xml] [-WhatIf] [-Confirm] Advanced_Options Key -identity The Distinguished Name (DN), Canonical Name, GUID or, where applicable, the Domain\Name, UPN or SID of the user object you wish to disable. -ReportFile Save a report on the deprovisioning results to a file in HTML or XML format. -Xml Save in XML format. -WhatIf Describe what would happen if you executed the command, without actually executing the command. -Confirm Prompt for confirmation before executing the command. Advanced_Options: [-UseGlobalCatalog] [-Proxy] [-Service String] [-ConnectionAccount String] [-ConnectionPassword SecureString] [-Credential PSCredential] [-Connection ArsConnection]
By default Unlock-QADUser will connect to any available domain controller with the credentials of the locally logged on user, to connect to a specific domain controller using a specific account, either use the advanced options (-Proxy/-Service/-ConnectionAccount) or use the Connect-QADService cmdlet to make the connection.
Deprovision the user account JaneC in domain ss64Dom
PS C:> Deprovision-QADUser 'ss64Dom\JaneC'
PS C:> get-QADUser 'ss64Dom\JaneC' | deprovision-QADUser
“Absence diminishes mediocre passions and increases great ones,as the wind blows out candles and fans fires” ~ La Rochefoucauld
Enable-QADUser - Disable a user account
Unlock-QADUser - Unlock a user account
Disable-QADUser - Disable a user account