Organizational unit operations in PowerShell - Practice Problems & Coding Challenges

Challenge - 5 Problems

💻 Command Output

intermediate

Output of Creating a New OU

What is the output of this PowerShell command when creating a new Organizational Unit (OU) named 'Sales' in the domain 'example.com'?

PowerShell

New-ADOrganizationalUnit -Name "Sales" -Path "DC=example,DC=com"

A

DistinguishedName : OU=Sales,DC=example,DC=com
Name              : Sales
ObjectClass       : organizationalUnit

B New-ADOrganizationalUnit : Access is denied.

C The term 'New-ADOrganizationalUnit' is not recognized as the name of a cmdlet.

D OU 'Sales' created successfully with no output.

💡 Hint

Think about what the cmdlet returns when it successfully creates an OU.

The New-ADOrganizationalUnit cmdlet returns an object representing the new OU, including its DistinguishedName, Name, and ObjectClass properties.

💻 Command Output

intermediate

Result of Removing an OU with Child Objects

What happens when you run this command to remove an OU that contains child objects without using the -Recursive flag?

PowerShell

Remove-ADOrganizationalUnit -Identity "OU=Marketing,DC=example,DC=com"

A The command runs silently with no output.

B OU 'Marketing' and all child objects removed successfully.

C OU 'Marketing' removed successfully, child objects moved to parent OU.

D Remove-ADOrganizationalUnit : Cannot delete object because it has child objects.

💡 Hint

Think about how Active Directory handles deletion of containers with children.

Without the -Recursive flag, Remove-ADOrganizationalUnit cannot delete an OU that contains child objects and throws an error.

🔧 Debug

advanced

Identify the Error in OU Move Script

This script attempts to move an OU named 'HR' to a new parent OU 'Departments'. What error will it produce?

PowerShell

Move-ADObject -Identity "OU=HR,DC=example,DC=com" -TargetPath "OU=Departments,DC=example,DC=com"

A The OU 'HR' is moved successfully with no output.

B Move-ADObject : Access is denied.

C Move-ADObject : The specified target path is invalid or does not exist.

D Move-ADObject : The identity parameter is missing or invalid.

💡 Hint

Check if the parameters are correctly specified and the target OU exists.

If the target OU exists and the user has permissions, Move-ADObject moves the OU without output.

📝 Syntax

advanced

Syntax Error in OU Creation Script

Which option contains a syntax error when creating an OU named 'Finance'?

A New-ADOrganizationalUnit -Name "Finance" -Path "DC=example,DC=com"

B New-ADOrganizationalUnit -Name Finance -Path DC=example,DC=com

C New-ADOrganizationalUnit -Name "Finance" -Path "DC=example,DC=com" -Description "Finance OU"

D New-ADOrganizationalUnit -Name "Finance" -Path "DC=example,DC=com" -ProtectedFromAccidentalDeletion $true

💡 Hint

Look for missing quotes or incorrect parameter formats.

Option B lacks quotes around the Path parameter value, causing a syntax error.

🚀 Application

expert

Script to List All OUs Recursively

Which script correctly lists all Organizational Units recursively under the domain 'example.com'?

A Get-ADOrganizationalUnit -Filter * -SearchBase "DC=example,DC=com"

B Get-ADOrganizationalUnit -Filter * -SearchBase "DC=example,DC=com" -SearchScope OneLevel

C Get-ADOrganizationalUnit -Filter * -SearchBase "DC=example,DC=com" -SearchScope Subtree

D Get-ADOrganizationalUnit -Filter * -SearchBase "OU=example,DC=com" -SearchScope Subtree

💡 Hint

Consider the SearchScope parameter to include all nested OUs.

SearchScope Subtree includes the base and all child OUs recursively. OneLevel only includes immediate children.