When using QAS PowerShell - the enable-qasunixuser or disable-qasunixgroup cmdlet's all users and groups matching the pattern are unix (dis)enabled.
i.e.
Enable-qasunixuser test
This enables users test, test1, test2 and test3
Is this normal behavior?
This occurs because the search being used is an "ANR" or Ambigous Name Resolution search algorithm and is expected.
There is more information is the full help pages for the PowerShell commands
get-help enable-qasunixuser -full
-Identity <String[]>
Use this parameter to identify the user to operate on. The value for this parameter is resolved using ANR sear
ch unless it is specified in NT account format (DOMAIN\samaccountname).
To avoid enabling all groups or users and in reverse disabling all group or users use the users fully qualified name.
username@example.com or example\username
For more information concerning ANR searches please see this microsoft article.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center