Request ActiveRoles Server to deprovision a user account. This removes all its rights and permissions without actually removing it.
Syntax
Deprovision-QADUser [[-Identity] IdentityParameter]
[-ReportFile <String>] [-Xml]
[-WhatIf] [-Confirm] Advanced_Options
Key
-identity The Distinguished Name (DN), Canonical Name, GUID or, where applicable,
the Domain\Name, UPN or SID of the user object you wish to disable.
-ReportFile Save a report on the deprovisioning results to a file
in HTML or XML format.
-Xml Save in XML format.
-WhatIf Describe what would happen if you executed the command,
without actually executing the command.
-Confirm Prompt for confirmation before executing the command.
Advanced_Options:
[-UseGlobalCatalog] [-Proxy] [-Service String]
[-ConnectionAccount String] [-ConnectionPassword SecureString]
[-Credential PSCredential] [-Connection ArsConnection]
Notes:
By default Unlock-QADUser will connect to any available domain controller with the credentials of the locally logged on user, to connect to a specific domain controller using a specific account, either use the advanced options (-Proxy/-Service/-ConnectionAccount) or use the Connect-QADService cmdlet to make the connection.
Example
Deprovision the user account JaneC in domain ss64Dom
PS C:> Deprovision-QADUser 'ss64Dom\JaneC'
PS C:> get-QADUser 'ss64Dom\JaneC' | deprovision-QADUser
“Absence diminishes mediocre passions and increases great ones,as the wind blows out candles and fans fires” ~ La Rochefoucauld
Related:
Enable-QADUser - Disable a user account
Unlock-QADUser - Unlock a user account
Disable-QADUser - Disable a user account
Quest cmdlets
© Copyright SS64.com 1999-2013
Some rights reserved