How do I manage QAS' users with QAS Power shell?
Quest Authentication Services includes PowerShell modules which provide a "scriptable" interface to many QAS management tasks.
Using QAS PowerShell commands you can Unix-enable, Unix-disable, modify, report on, and clear Unix attributes of Active Directory users.
Note: You can access a customized PowerShell console from the QAS Control Center Tools navigation link. To add QAS cmdlets to an existing PowerShell session run Import-Module
To disable a user for Unix access use the Disable-QasUnixUser command: Disable-QasUnixUser -Identity <domain>\bsmith
To set a particular Unix attribute use the Set-QasUnixUser command. The following command sets the Comment(GECOS) field of the bsmith user to Bob Smith: Set-QasUnixUser -Identity <domain>\bsmith -Gecos "Bob Smith"
To report on a user, use the Get-QASUnixUser command. The following command shows all users that start with "bsm": Get-QasUnixUser -Identity bsm
The QAS PowerShell commands are designed to work with the Active Directory commands from Microsoft(Get-ADUser) and Quest (Get-QADUser). You can pipe the output of these commands to any of the PowerShell commands that operate on users. For example, the following command clears the Unix attributes fromthe bsmith user: Get-QADUser -Identity <domain>\bsmith | Clear-QasUnixUser
The QAS PowerShell commands are aware of the options and schema settings configured in QAS Control Center. Scripts written using the QAS PowerShell commands work without modification in any QAS environment.
Quest Authentication Services supports the flexible scripting capabilities of PowerShell to automate administrative, installation, and configuration tasks. A wide range of new PowerShell cmdlets are included. Please see Chapter 4 – Identity Management section of the AuthenticationServices_4.0_AdminGuide.pdf for further information.