Remove-ADUser when object is a tree
hi,
i have problem ad user objects.
if ad users have activesync device registered in exchange, user object "tree" object rather "leaf" object.
therefore, when try delete such ad user object, error below:
+ $users | % {remove-aduser -identity $_.distinguishedname}
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ categoryinfo : notspecified: (cn=john doe...c=acme,dc=local:aduser) [remove-aduser], adexception
+ fullyqualifiederrorid : directory service can perform requested operation on leaf object,microsoft.activedirectory.management.comm
ands.removeaduser
my solution use gui (dsa.msc) , delete users 1 one there. gui shows warning, continuing on warning gets job done. so, have 3 questions.
1. how can test if object leaf?
2. how can test if object tree?
3. how can delete ad user in powershell when user object tree?
thanks in advance,
les
hi les,
take @ remove-adobject instead:
http://ss64.com/ps/remove-adobject.html
there's -recursive switch can use.
don't retire technet! - (don't give yet - 13,085+ strong , growing)
Windows Server > Windows PowerShell
Comments
Post a Comment