User Account Settings:
-enableaccount
Enable the user account.
-disableaccount
Disable the user account.
-passwordnotrequired yes|no
Whether to set the password not required option.
-passwordneverexpires yes|no
Whether to check or uncheck the "Password Never Expires" box.
-mustchangepassword yes|no
Whether to check or uncheck the "User Must Change Password at
Next Logon" box.
-cannotchangepassword yes|no
Whether to check or uncheck "User Cannot Change Password"
-usereversibleencryption yes|no
Whether to check or uncheck the "Store Password Using
Reversible Encryption" box.
-smartcardrequired yes|no
Whether to check or uncheckthe "Smart Card is Required
for Interactive Logon" box.
-cannotbedelegated yes|no
Whether to check or uncheck the "Account is Sensitive and Cannot
be Delegated" box.
-usedesencryption yes|no
Whether to check or uncheck the "Use DES Encryption Types for This
Account" box.
-donotrequirekerberospreauth yes|no
Whether to check or uncheck the "Do Not Require Kerberos
Preauthentication" box.
-addtogroup DNOfGroup
Add the user to the specified group.
-removefromgroup DNOfGroup
Remove the user from the specified group.
-allowinheritable yes|no
Whether to check or uncheck the "Allow inheritable permissions to
propagate to this object" box.
-modrdn NewRDN
Change the users Relative Distinguished Name (CN).
Variable usage is required.
To change an RDN to LastName, FirstName
use the following syntax:
-modrdn "%'sn'%, %'givenName'%"
“Learning music by reading about it is like making love by mail” - Luciano Pavarotti
Related:
ADmodcmd - Active Directory Bulk Modify Tool.
Terminal Server Attributes | Exchange Related Attributes | Mailbox Rights | Custom Attributes