Group management in PowerShell - Practice Problems & Coding Challenges

Challenge - 5 Problems

💻 Command Output

intermediate

What is the output of this PowerShell command?

Consider the following command that lists all members of the group 'HRTeam'. What will be the output if the group has exactly two members: Alice and Bob?

PowerShell

Get-ADGroupMember -Identity HRTeam | Select-Object -ExpandProperty Name

A

Alice
Bob

B

Name
Alice
Bob

C

ObjectGUID
Name
SamAccountName

D Error: The term 'Get-ADGroupMember' is not recognized

💡 Hint

The command lists members and selects only their names.

Get-ADGroupMember returns objects representing group members. Using Select-Object -ExpandProperty Name extracts just the names, outputting them as plain strings, one per line.

📝 Syntax

intermediate

Which command correctly adds a user to a group?

You want to add the user 'jdoe' to the group 'FinanceTeam'. Which of the following commands will do this correctly?

A Add-ADGroupMember FinanceTeam jdoe

B Add-ADGroupMember -Group FinanceTeam -User jdoe

C Add-ADGroupMember -Identity FinanceTeam -Members jdoe

D Add-ADGroupMember -Identity jdoe -Members FinanceTeam

💡 Hint

Check the parameter names for the Add-ADGroupMember cmdlet.

The correct syntax uses -Identity for the group and -Members for the user(s) to add. Option C matches this syntax exactly.

🔧 Debug

advanced

Why does this script fail to remove a user from a group?

This script is intended to remove user 'jdoe' from group 'SalesTeam', but it fails with an error. What is the cause? Remove-ADGroupMember -Identity SalesTeam -Members jdoe Error: "Cannot find an object with identity: 'jdoe'"

A The Remove-ADGroupMember cmdlet requires the -Recursive switch.

B The command requires the -Confirm parameter to proceed.

C The user 'jdoe' must be specified with the full distinguished name or objectGUID.

D The user 'jdoe' does not exist in Active Directory.

💡 Hint

The error says it cannot find the object 'jdoe'.

The error indicates that the user 'jdoe' does not exist or cannot be found. The cmdlet accepts samAccountName, but if the user is missing or misspelled, it fails.

🚀 Application

advanced

How to list all groups a user belongs to?

You want to find all groups that the user 'maria' is a member of. Which command will correctly list these groups?

A Get-ADUser -Identity maria -Properties MemberOf | Select-Object -ExpandProperty MemberOf

B Get-ADGroup -Filter {Members -eq 'maria'}

C Get-ADGroupMember -Identity maria

D Get-ADUser -Identity maria | Get-ADGroupMember

💡 Hint

User objects have a MemberOf property listing their groups.

The MemberOf property of a user object contains the distinguished names of groups the user belongs to. Option A extracts this property correctly.

🧠 Conceptual

expert

What is the effect of the -Recursive switch in Get-ADGroupMember?

When using Get-ADGroupMember with the -Recursive switch, what is the expected behavior?

A It lists only direct members of the group, ignoring nested groups.

B It lists all members of the group including members of nested groups recursively.

C It removes all members from the group recursively.

D It adds members to the group recursively.

💡 Hint

Think about nested groups inside a group.

The -Recursive switch causes the command to return all members including those inside nested groups, traversing the group membership tree.