Active Directory : OU(組織単位)を追加する (CUI)2019/02/25

# 現在の OU リストを表示
PS C:\Users\Administrator> dsquery ou -name * 
"OU=Domain Controllers,DC=srv,DC=world"

# 例として OU [Hiroshima] をルートドメイン直下に追加
PS C:\Users\Administrator> dsadd ou OU=Hiroshima,DC=srv,DC=world 
dsadd succeeded:OU=Hiroshima,DC=srv,DC=world

PS C:\Users\Administrator> dsquery ou -name Hiroshima 
"OU=Hiroshima,DC=srv,DC=world"

# OU の配下に新規 OU を追加する場合は以下
# OU [Hiroshima] の配下に OU [Development01] を追加
PS C:\Users\Administrator> dsadd ou OU=Development01,OU=Hiroshima,DC=srv,DC=world 
dsadd succeeded:OU=Development01,OU=Hiroshima,DC=srv,DC=world


# [dsadd ou] オプション一覧
PS C:\Users\Administrator> dsadd ou /? 

Description:  Adds an organizational unit to the directory

Syntax:  dsadd ou <OrganizationalUnitDN> [-desc <Description>]
        [{-s <Server> | -d <Domain>}] [-u <UserName>]
        [-p {<Password> | *}] [-q] [{-uc | -uco | -uci}]

.....
.....

# 例として OU [Development01] 削除
PS C:\Users\Administrator> dsquery ou -name Development01 
"OU=Development01,OU=Hiroshima,DC=srv,DC=world"

PS C:\Users\Administrator> dsrm "OU=Development01,OU=Hiroshima,DC=srv,DC=world" 
Are you sure you wish to delete OU=Development01,OU=Hiroshima,DC=srv,DC=world (Y/N)? y
dsrm succeeded:OU=Development01,OU=Hiroshima,DC=srv,DC=world

# 現在の OU リストを表示
PS C:\Users\Administrator> Get-ADOrganizationalUnit -Filter * | Format-Table DistinguishedName 

DistinguishedName
-----------------
OU=Domain Controllers,DC=srv,DC=world
OU=Hiroshima,DC=srv,DC=world

# 例として [Hiroshima] の配下に [Development01] を追加
PS C:\Users\Administrator> New-ADOrganizationalUnit Development01 `
-Path "OU=Hiroshima,DC=srv,DC=world" `
-ProtectedFromAccidentalDeletion $True 

# 確認
PS C:\Users\Administrator> Get-ADOrganizationalUnit -Filter * | Format-Table DistinguishedName 

DistinguishedName
-----------------
OU=Domain Controllers,DC=srv,DC=world
OU=Hiroshima,DC=srv,DC=world
OU=Development01,OU=Hiroshima,DC=srv,DC=world


# [ProtectedFromAccidentalDeletion $True] で登録した OU を削除する場合は以下
# (GUI 上の [誤って削除されないようにオブジェクトを保護する] オプションが有効)
# 一旦、無効化した後に削除する
PS C:\Users\Administrator> Set-ADOrganizationalUnit `
-Identity "OU=Development01,OU=Hiroshima,DC=srv,DC=world" `
-ProtectedFromAccidentalDeletion $false 

PS C:\Users\Administrator> Remove-ADOrganizationalUnit -Identity "OU=Development01,OU=Hiroshima,DC=srv,DC=world" 

Confirm
Are you sure you want to perform this action?
Performing the operation "Remove" on target "OU=Development01,OU=Hiroshima,DC=srv,DC=world".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): Y


# [New-ADOrganizationalUnit] オプション一覧
PS C:\Users\Administrator> Get-Help New-ADOrganizationalUnit 

NAME
    New-ADOrganizationalUnit

SYNOPSIS
    Creates a new Active Directory organizational unit.


SYNTAX
    New-ADOrganizationalUnit [-Name] <String> [-AuthType {Negotiate | Basic}] [-City <String>] [-Country <String>] [-Cr
    edential <PSCredential>] [-Description <String>] [-DisplayName <String>] [-Instance <ADOrganizationalUnit>] [-Manag
    edBy <ADPrincipal>] [-OtherAttributes <Hashtable>] [-PassThru] [-Path <String>] [-PostalCode <String>] [-ProtectedF
    romAccidentalDeletion <Boolean>] [-Server <String>] [-State <String>] [-StreetAddress <String>] [-Confirm] [-WhatIf
    ] [<CommonParameters>]

.....
.....