Group management in PowerShell - Cheat Sheet & Quick Revision

Recall & Review

beginner

What cmdlet is used to create a new local group in PowerShell?

The cmdlet <code>New-LocalGroup</code> is used to create a new local group on a Windows machine.

beginner

How do you add a user to a local group using PowerShell?

Use Add-LocalGroupMember -Group <GroupName> -Member <UserName> to add a user to a local group.

beginner

What cmdlet lists all members of a local group?

The cmdlet <code>Get-LocalGroupMember -Group &lt;GroupName&gt;</code> lists all members of the specified local group.

beginner

How can you remove a user from a local group in PowerShell?

Use Remove-LocalGroupMember -Group <GroupName> -Member <UserName> to remove a user from a local group.

intermediate

What is the difference between a local group and a domain group?

A local group exists only on a single computer and manages permissions on that machine. A domain group is managed centrally in Active Directory and can control access across multiple computers in a network.

Which cmdlet creates a new local group in PowerShell?

A New-LocalGroup

B Add-LocalGroupMember

C Get-LocalGroupMember

D Remove-LocalGroupMember

New-LocalGroup creates a new local group. The others manage members.

How do you add a user named 'Alice' to a group named 'Admins'?

A New-LocalGroup -Group Admins -Member Alice

B Add-LocalGroupMember -Group Admins -Member Alice

C Get-LocalGroupMember -Group Admins -Member Alice

D Remove-LocalGroupMember -Group Admins -Member Alice

Add-LocalGroupMember adds a user to a group.

Which cmdlet shows all members of a local group?

A Get-LocalGroupMember

B Add-LocalGroupMember

C New-LocalGroup

D Remove-LocalGroupMember

Get-LocalGroupMember lists group members.

What cmdlet removes a user from a local group?

A Add-LocalGroupMember

B Get-LocalGroupMember

C New-LocalGroup

D Remove-LocalGroupMember

Remove-LocalGroupMember removes a user from a group.

Which statement is true about domain groups?

A They cannot be managed with PowerShell.

B They exist only on a single computer.

C They manage permissions across multiple computers in a network.

D They are the same as local groups.

Domain groups control access across many computers in a network.

Explain how to create a local group and add a user to it using PowerShell.

Think about the cmdlets that manage groups and members separately.

Describe the difference between local groups and domain groups.

Consider where the groups are managed and their scope.

Practice

1. Which PowerShell cmdlet is used to create a new local group on a Windows machine?

easy

A. Add-LocalGroupMember

B. Get-LocalGroupMember

C. New-LocalGroup

D. Remove-LocalGroup

Solution

1. Step 1: Understand the purpose of each cmdlet

   New-LocalGroup creates a new group, Add-LocalGroupMember adds users to a group, Get-LocalGroupMember lists members, Remove-LocalGroup deletes a group.

2. Step 2: Identify the cmdlet for creating groups

   Only New-LocalGroup is used to create a new local group.

3. Final Answer:

   New-LocalGroup -> Option C

4. Quick Check:

   Create group cmdlet = New-LocalGroup [OK]

Hint: Remember: 'New' starts creation commands [OK]

Common Mistakes:

• Confusing Add-LocalGroupMember as group creation
• Using Get-LocalGroupMember to create groups
• Trying Remove-LocalGroup to create groups

2. Which of the following is the correct syntax to add a user named 'Alice' to a local group called 'Developers'?

easy

A. Add-LocalGroupMember -Group 'Developers' -Member 'Alice'

B. Add-LocalGroupMember -Member 'Developers' -Group 'Alice'

C. New-LocalGroup -Group 'Developers' -Member 'Alice'

D. Get-LocalGroupMember -Group 'Developers' -Member 'Alice'

Solution

1. Step 1: Identify the cmdlet to add members

   Add-LocalGroupMember is used to add users to groups.

2. Step 2: Check parameter order and names

   The correct syntax uses -Group for the group name and -Member for the user name.

3. Final Answer:

   Add-LocalGroupMember -Group 'Developers' -Member 'Alice' -> Option A

4. Quick Check:

   Add user syntax = Add-LocalGroupMember -Group -Member [OK]

Hint: Group comes before Member in Add-LocalGroupMember [OK]

Common Mistakes:

• Swapping -Group and -Member parameters
• Using New-LocalGroup to add members
• Using Get-LocalGroupMember to add members

3. What will be the output of this PowerShell command if the 'TestGroup' has members 'Bob' and 'Carol'?

Get-LocalGroupMember -Group 'TestGroup' | Select-Object -ExpandProperty Name

medium

A. Bob
Carol

B. Name
Bob
Carol

C. TestGroup

D. Error: Group not found

Solution

1. Step 1: Understand Get-LocalGroupMember output

   This cmdlet lists members of the specified group with properties like Name.

2. Step 2: Effect of Select-Object -ExpandProperty Name

   This extracts only the Name property values, outputting member names as plain strings.

3. Final Answer:

   Bob Carol -> Option A

4. Quick Check:

   Extracted names list = Bob and Carol [OK]

Hint: Select -ExpandProperty outputs only the property values [OK]

Common Mistakes:

• Expecting property headers in output
• Confusing group name with member names
• Assuming error if group exists

4. You run this command but get an error: Add-LocalGroupMember -Group 'Admins' -Member 'John'. What is the most likely cause?

medium

A. The syntax is incorrect

B. The 'Admins' group does not exist

C. The 'John' user is already a member

D. You are not running PowerShell as administrator

Solution

1. Step 1: Check permissions needed for group changes

   Modifying local groups requires administrator privileges in PowerShell.

2. Step 2: Analyze error cause

   If the group exists and syntax is correct, lack of admin rights causes permission errors.

3. Final Answer:

   You are not running PowerShell as administrator -> Option D

4. Quick Check:

   Admin rights needed for group changes [OK]

Hint: Always run PowerShell as admin for group management [OK]

Common Mistakes:

• Assuming syntax error without checking permissions
• Ignoring admin rights requirement
• Thinking user membership causes error

5. You want to create a new local group named 'ProjectTeam' and add multiple users: 'Alice', 'Bob', and 'Carol'. Which script correctly does this in PowerShell?

hard

A. Add-LocalGroupMember -Group 'ProjectTeam' -Member 'Alice'; Add-LocalGroupMember -Group 'ProjectTeam' -Member 'Bob'; Add-LocalGroupMember -Group 'ProjectTeam' -Member 'Carol'

B. New-LocalGroup -Name 'ProjectTeam'; Add-LocalGroupMember -Group 'ProjectTeam' -Member 'Alice','Bob','Carol'

C. New-LocalGroup -Name 'ProjectTeam' -Member 'Alice','Bob','Carol'

D. New-LocalGroup -Group 'ProjectTeam'; Add-LocalGroupMember -Member 'Alice','Bob','Carol'

Solution

1. Step 1: Create the group first

   Use New-LocalGroup with -Name to create 'ProjectTeam'.

2. Step 2: Add multiple members in one command

   Add-LocalGroupMember accepts multiple members as a comma-separated list.

3. Step 3: Verify syntax correctness

   New-LocalGroup -Name 'ProjectTeam'; Add-LocalGroupMember -Group 'ProjectTeam' -Member 'Alice','Bob','Carol' correctly creates the group then adds all members in one command.

4. Final Answer:

   New-LocalGroup -Name 'ProjectTeam'; Add-LocalGroupMember -Group 'ProjectTeam' -Member 'Alice','Bob','Carol' -> Option B

5. Quick Check:

   Create group then add members list [OK]

Hint: Create group first, then add all members together [OK]

Common Mistakes:

• Trying to add members during group creation
• Using wrong parameter names
• Adding members before group exists