The latest version of Quest’s free AD cmdlets (aka QAD cmdlets) are finally available for download.
In addition to numerous bugfixes improvements based on community feedback, there are quite a few new features and cmdlets, including:
Get-QADMemberOf– Retrieve group memberships of a particular object in Active Directory. Supported are both Active Directory Domain Services (AD DS) and Active Directory Lightweight Directory Services (AD LDS).- Get-QADPasswordSettingsObjectAppliesTo – Retrieve Password Settings objects that match the specified conditions. Active Directory version of Windows Server 2008 or later is required.
-Tombstoneparameter for Get-QAD* cmdlets to let you find deleted objects.Restore-QADDeletedObject- Undelete objects in Active Directory by restoring tombstones back into normal objects. This cmdlet requires an Active Directory domain controller running Windows Server 2003 or later.Get-QAD*cmdlets’ new parameters to filter objects by their modification or creation date.- New parameters for
Get-QADGroupMember to search by type, name, display name, description (!), or any custom attributes. - New parameters for any
Get-QAD*cmdlets to search by group membership. - Strongly typed parameters for
Get-QADPasswordSettingObject.
For the happy users of our commercial ActiveRoles Server platform there are additional features providing for convenient work with AD change history and approvals:
Get-QARSOperation– Retrieve operation records from ActiveRoles Server. Each operation record represents a certain change request, whether pending or completed, in ActiveRoles Server.Get-QARSApprovalTask– Retrieve approval task records from ActiveRoles Server. Each approval task record represents a task,whether pending or completed, to approve or reject a certain change request in ActiveRoles Server.Approve-QARSApprovalTask– Apply the Approve resolution on approval tasks for which you are assigned to the Approver role in
ActiveRoles Server.Reject-QARSApprovalTask– Apply the Reject resolution on approval tasks for which you are assigned to the Approver role in ActiveRoles Server.
I will probably spend next couple of weeks going into these exciting new features in detail – but for now the administrator’s guide and get-help are your friends.
Download the new AD cmdlets and let us know what you think!
Tags: AD, AD cmdlets, Active Directory, ActiveRoles Server, PowerGUI, PowerShell, Release, cmdlets
Subscribe by email




Get-QADUser -AccountNeverExpires [boolean]
Seems 1.2 does not accept the boolean argument after the -AccountNeverExpires flag.. I used this in the past to report on accounts that expire by using the $false argument.. My report no longer works… Any ideas?
Bryan,
-AccountNeverExpires is a switch parameter (not boolean) see the wiki description – http://wiki.powergui.org/index.php/Get-QADUser – or the tooltip in the PowerGUI Script Editor’s intellisense.
To provide a boolean value to a switch you can use : between them:
Get-QADUser -AccountNeverExpires:[boolean variable/value]
Also, check out our AD PowerShell forum at http://powergui.org/forum.jspa?forumID=173 where you can get expert help from other AD cmdlets users and the dev team.
Dmitry