New-ADUser and Set-ADUser in PowerShell - Practice Problems & Coding Challenges

Challenge - 5 Problems

💻 Command Output

intermediate

What is the output of this New-ADUser command?

You run this PowerShell command to create a new Active Directory user:

New-ADUser -Name "John Doe" -GivenName "John" -Surname "Doe" -SamAccountName "jdoe" -AccountPassword (ConvertTo-SecureString "P@ssw0rd" -AsPlainText -Force) -Enabled $true -PassThru

What does the command output?

PowerShell

New-ADUser -Name "John Doe" -GivenName "John" -Surname "Doe" -SamAccountName "jdoe" -AccountPassword (ConvertTo-SecureString "P@ssw0rd" -AsPlainText -Force) -Enabled $true -PassThru

A An error message about missing required parameters

B No output is shown because New-ADUser does not return anything by default

C A confirmation message: "User John Doe created successfully"

D An object representing the newly created user with properties like Name, SamAccountName, and DistinguishedName

💡 Hint

The -PassThru parameter makes the command output the created user object.

By default, New-ADUser does not output anything. Using -PassThru returns the user object created, showing details like Name and SamAccountName.

💻 Command Output

intermediate

What happens when you run this Set-ADUser command?

You want to update the title of an existing user with SamAccountName 'jdoe'. You run:

Set-ADUser -Identity jdoe -Title "Senior Developer"

What is the output of this command?

PowerShell

Set-ADUser -Identity jdoe -Title "Senior Developer"

A No output is shown; the user's Title attribute is updated silently

B The updated user object is returned showing the new Title

C An error saying the Title parameter is invalid

D A confirmation message: "User jdoe updated successfully"

💡 Hint

Set-ADUser updates attributes silently unless you request output.

Set-ADUser does not output anything by default. It updates the user attribute silently.

📝 Syntax

advanced

Which option correctly creates a new AD user with a secure password?

You want to create a new AD user with username 'asmith' and password 'Secret123!'. Which command is syntactically correct?

A New-ADUser -Name "Alice Smith" -SamAccountName "asmith" -AccountPassword ConvertTo-SecureString "Secret123!" -AsPlainText -Force -Enabled $true

B New-ADUser -Name "Alice Smith" -SamAccountName "asmith" -AccountPassword (ConvertTo-SecureString "Secret123!" -AsPlainText -Force) -Enabled $true

C New-ADUser -Name "Alice Smith" -SamAccountName "asmith" -AccountPassword "Secret123!" -Enabled $true

D New-ADUser -Name "Alice Smith" -SamAccountName "asmith" -AccountPassword ConvertTo-SecureString("Secret123!", -AsPlainText, -Force) -Enabled $true

💡 Hint

AccountPassword expects a secure string, so use parentheses to convert the plain text password.

Option B correctly uses parentheses to convert the plain text password to a secure string. Option B misses parentheses, causing a syntax error. Option B passes a plain string, which is invalid. Option B uses incorrect syntax for the ConvertTo-SecureString cmdlet.

🚀 Application

advanced

How to change multiple attributes of an AD user in one command?

You want to update the user 'jdoe' to have Title 'Manager' and Office 'HQ-101'. Which command achieves this?

A Set-ADUser -Identity jdoe -Title "Manager" -Office "HQ-101"

B Set-ADUser -Identity jdoe -Title "Manager"; Set-ADUser -Identity jdoe -Office "HQ-101"

C Set-ADUser -Identity jdoe -Replace @{Title="Manager"; Office="HQ-101"}

D Set-ADUser -Identity jdoe -Add @{Title="Manager"; Office="HQ-101"}

💡 Hint

Set-ADUser supports multiple attribute parameters directly.

Option A correctly updates multiple attributes in one command. Option A works but uses two commands, not one. Option A uses -Replace which is valid but less straightforward here. Option A uses -Add which is for multi-valued attributes and will cause an error for single-valued attributes.

🔧 Debug

expert

Why does this New-ADUser command fail with an error?

You run:

New-ADUser -Name "Bob Lee" -SamAccountName "blee" -AccountPassword (ConvertTo-SecureString "Pass123" -AsPlainText) -Enabled $true

and get an error about missing parameters. What is the cause?

PowerShell

New-ADUser -Name "Bob Lee" -SamAccountName "blee" -AccountPassword (ConvertTo-SecureString "Pass123" -AsPlainText) -Enabled $true

A The SamAccountName must be the same as the Name parameter

B The -Enabled parameter cannot be used with New-ADUser

C The ConvertTo-SecureString command is missing the -Force parameter, causing an error

D The AccountPassword parameter must be a plain string, not a secure string

💡 Hint

ConvertTo-SecureString requires -Force when using -AsPlainText.

Without the -Force flag, ConvertTo-SecureString with -AsPlainText throws an error. This causes New-ADUser to fail because the password is not properly converted.