You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Move-ADObject cmdlet moves an object or a container of objects from one container to another or from one domain to another.
22
+
The **Move-ADObject** cmdlet moves an object or a container of objects from one container to another or from one domain to another within the same forest.
23
23
24
24
The Identity parameter specifies the Active Directory object or container to move.
25
25
You can identify an object or container by its distinguished name (DN) or GUID.
@@ -30,6 +30,8 @@ You can also use the Get-ADGroup, Get-ADUser, Get-ADComputer, Get-ADServiceAccou
30
30
The TargetPath parameter must be specified.
31
31
This parameter identifies the new location for the object or container.
32
32
33
+
The cmdlet also moves the password when a user or computer object is moved across domains within a forest.
34
+
33
35
## EXAMPLES
34
36
35
37
### -------------------------- EXAMPLE 1 --------------------------
The **Move-ADObject** cmdlet moves an object or a container of objects from one container to another or from one domain to another.
24
+
The **Move-ADObject** cmdlet moves an object or a container of objects from one container to another or from one domain to another within the same forest.
25
25
26
26
The **Identity** parameter specifies the Active Directory object or container to move.
27
27
You can identify an object or container by its distinguished name or GUID.
@@ -31,6 +31,7 @@ You can also use the Get-ADGroup, Get-ADUser, Get-ADComputer, Get-ADServiceAccou
31
31
32
32
The **TargetPath** parameter must be specified.
33
33
This parameter identifies the new location for the object or container.
34
+
The cmdlet also moves the password when a user or computer object is moved across domains within a forest.
Specifies the distinguished name of an Active Directory partition.
262
+
The distinguished name must be one of the naming contexts on the current directory server.
263
+
The cmdlet searches this partition to find the object defined by the **Identity** parameter.
262
264
263
-
A Secure Sockets Layer (SSL) connection is required for the Basic authentication method.
265
+
In many cases, a default value is used for the **Partition** parameter if no value is specified.
266
+
The rules for determining the default value are given below.
267
+
Note that rules listed first are evaluated first and once a default value can be determined, no further rules are evaluated.
268
+
269
+
In Active Directory Domain Services (AD DS) environments, a default value for **Partition** is set in the following cases:
270
+
271
+
- If the **Identity** parameter is set to a distinguished name, the default value of **Partition** is automatically generated from this distinguished name.
272
+
- If running cmdlets from an Active Directory provider drive, the default value of **Partition** is automatically generated from the current path in the drive.
273
+
- If none of the previous cases apply, the default value of **Partition** is set to the default partition or naming context of the target domain.
274
+
275
+
In Active Directory Lightweight Directory Services (AD LDS) environments, a default value for **Partition** is set in the following cases:
276
+
277
+
- If the **Identity** parameter is set to a distinguished name, the default value of **Partition** is automatically generated from this distinguished name.
278
+
- If running cmdlets from an Active Directory provider drive, the default value of **Partition** is automatically generated from the current path in the drive.
279
+
- If the target AD LDS instance has a default naming context, the default value of **Partition** is set to the default naming context.
280
+
To specify a default naming context for an AD LDS environment, set the **msDS-defaultNamingContext** property of the Active Directory directory service agent object (**nTDSDSA**) for the AD LDS instance.
281
+
- If none of the previous cases apply, the **Partition** parameter does not take any default value.
264
282
265
283
```yaml
266
284
Type: String
@@ -269,7 +287,7 @@ Aliases:
269
287
270
288
Required: False
271
289
Position: Named
272
-
Default value: None
290
+
Default value: DefaultNC; Provider: The default is to use the Partition that you are currently in. Otherwise, use DefaultNC (that is, if you are in the RootDSE)
The **Move-ADObject** cmdlet moves an object or a container of objects from one container to another or from one domain to another.
25
+
The **Move-ADObject** cmdlet moves an object or a container of objects from one container to another or from one domain to another within the same forest.
26
26
27
27
When an object is moved between domains, both the source DC and the target DC need to be the RID Master of their domains. If a different DC is being used, you will receive the following error:
28
28
@@ -37,6 +37,7 @@ You can also use the **Get-ADGroup**, **Get-ADUser**, **Get-ADComputer**, **Get-
37
37
The *TargetPath* parameter must be specified.
38
38
This parameter identifies the new location for the object or container.
39
39
40
+
The cmdlet also moves the password when a user or computer object is moved across domains within a forest.
0 commit comments