Disable-User cmdlet disables user in Active Directory.

This cmdlet supports risk-mitigation parameters.  

Input parameters

#
Parameter
Type

Mandatory (R/O)

Description
Restrictions/Valid Values
1  Authentication information (all parameters)    
2

Identity

(aliases: GUID, DistinguishedName)

string O* A property that is used for managing the user

Value of one of these parameters can be used as Identity:

#ParameterDescription
1 GUID Globally Unique Identifier (ObjectGuid)
2 DistinguishedName Unique name of the object in Active Directory
3 OriginatingServer string O

Address of the server (domain name), where the object physically exists.

Note: It is recommended to use this parameter as input to guarantee execution of operation with actual data. To get this parameter use Get-User cmdlet.

Max length is 255 symbols
4 UserPrincipalName string O*

Primary Email address (Login)

Max length is 1024 symbols

Note: O* - the request must contain at least one of these parameters (Identity, UserPrincipalName) or both of them. If both parameters are specified, Identity is a priority parameter.

Output parameters

No parameters

Example of using Disable-User cmdlet

Disable-User -Identity "98A44562-5649-4044-93A7-EACB86A69538"