Request ActiveRoles Server to deprovision a user account. This removes all its rights and permissions without actually removing it.

      Deprovision-QADUser [[-Identity] IdentityParameter]
         [-ReportFile <String>] [-Xml]
            [-WhatIf] [-Confirm] Advanced_Options


   -identity    The Distinguished Name (DN), Canonical Name, GUID or, where applicable,
                the Domain\Name, UPN or SID of the user object you wish to disable. 

   -ReportFile  Save a report on the deprovisioning results to a file
                in HTML or XML format.

   -Xml         Save in XML format. 

   -WhatIf      Describe what would happen if you executed the command,
                without actually executing the command.

   -Confirm     Prompt for confirmation before executing the command.

                [-UseGlobalCatalog] [-Proxy] [-Service String]
                [-ConnectionAccount String] [-ConnectionPassword SecureString]
                [-Credential PSCredential] [-Connection ArsConnection]

By default Unlock-QADUser will connect to any available domain controller with the credentials of the locally logged on user, to connect to a specific domain controller using a specific account, either use the advanced options (-Proxy/-Service/-ConnectionAccount) or use the Connect-QADService cmdlet to make the connection.


Deprovision the user account JaneC in domain ss64Dom

PS C:> Deprovision-QADUser 'ss64Dom\JaneC'

PS C:> get-QADUser 'ss64Dom\JaneC' | deprovision-QADUser

“Absence diminishes mediocre passions and increases great ones,as the wind blows out candles and fans fires” ~ La Rochefoucauld


Enable-QADUser - Disable a user account
Unlock-QADUser - Unlock a user account
Disable-QADUser - Disable a user account
Quest cmdlets

Copyright © 1999-2017
Some rights reserved