ADServices

Author: Pxtl

.github/workflows/validate-powershell.yml

@@ -1,10 +1,5 @@
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-#
-# https://github.com/microsoft/action-psscriptanalyzer
-# For more information on PSScriptAnalyzer in general, see
+# this workflow uses https://github.com/microsoft/action-psscriptanalyzer . For
+# more information on PSScriptAnalyzer in general, see
 # https://github.com/PowerShell/PSScriptAnalyzer
 
 name: Powershell CI
@@ -56,13 +51,12 @@ jobs:
         with:
           sarif_file: results.sarif
 
-      # Run the tests
       - name: Install Pester
         shell: powershell
         run: |
           Install-Module -Name Pester -Force -Scope CurrentUser
 
-      - name: Run Pester Tests
+      - name: Run Pester Unit Tests
         shell: powershell
         run: |
           $modules = Get-ChildItem -Directory -Path ./src
@@ -74,4 +68,24 @@ jobs:
             } else {
               "No tests found for module: $($module.Name). Skipping."
             }
-          }
+          }
+
+      - name: docker compose smblds
+        uses: hoverkraft-tech/[email protected]
+        with:
+          compose-file: "./src/ADServices/Tests/Integration/adservices-testdocker/docker-compose.yml"
+          services: smblds
+          up-flags: wait
+
+      - name: Run Pester ADServices Integration Tests
+        shell: powershell
+        run: |
+          $Server = 'localhost:389'
+          $PSCredential = [PSCredential]::new('Administrator', (ConvertTo-SecureString 'Passw0rd' -AsPlainText -Force))
+
+          Invoke-Pester -Container (New-PesterContainer -ScriptBlock {
+            $testsPath = '.\src\ADServices\Tests\Integration'
+            ForEach ($testPath in Get-ChildItem $testsPath -Filter "*.tests.ps1") {
+              & $testPath.FullName -Server $Server -PSCredential $PSCredential
+            }
+          })

.vscode/settings.json

@@ -0,0 +1,13 @@
+{
+    "cSpell.words": [
+        "bitfield",
+        "bitmask",
+        "pcgeek",
+        "psscriptanalyzer",
+        "pwsh",
+        "RSAT",
+        "samdom",
+        "sarif",
+        "smblds"
+    ]
+}

src/ADServices/ADAccount.psm1

@@ -0,0 +1,65 @@
+Import-Module "$PSScriptRoot\Shared\SharedMetaModule.psm1" -Verbose:$false
+Set-StrictMode -Version Latest
+$ErrorActionPreference = [Management.Automation.ActionPreference]::Stop
+
+
+function Enable-ADAccount {
+    [CmdletBinding(SupportsShouldProcess)]
+    param (
+        [Parameter(Mandatory, ValueFromPipeline)]
+        [string] $Identity,
+        [string] $Server,
+        [PSCredential] $Credential,
+        [switch] $PassThru
+    )
+    process {
+        $entry = Get-ADUser -Server $Server -Credential $Credential -Identity $Identity
+        if ($entry) {
+            if ($PSCmdlet.ShouldProcess($Identity, "Enable-ADAccount")) {
+                Write-Verbose "Enabling user account '$Identity'."
+                Set-DirectoryEntryFlag $entry userAccountControl $UserAccountControl_ACCOUNT_DISABLED $false -Verbose:$VerbosePreference
+                $entry.CommitChanges()
+            }
+            if ($PassThru) {
+                Update-ADUserEntry $entry
+
+                # output
+                $entry
+            }
+        } else {
+            Write-Error "Account not found: $Identity"
+        }
+    }
+}
+
+
+function Disable-ADAccount {
+    [CmdletBinding(SupportsShouldProcess)]
+    param (
+        [Parameter(Mandatory, ValueFromPipeline)]
+        [string] $Identity,
+        [string] $Server,
+        [PSCredential] $Credential,
+        [switch] $PassThru
+    )
+    process {
+        $entry = Get-ADUser -Server $Server -Credential $Credential -Identity $Identity
+        if ($entry) {
+            if ($PSCmdlet.ShouldProcess($Identity, "Disable-ADAccount")) {
+                Write-Verbose "Disabling user account '$Identity'."
+                Set-DirectoryEntryFlag $entry userAccountControl $UserAccountControl_ACCOUNT_DISABLED $true -Verbose:$VerbosePreference
+                $entry.CommitChanges()
+            }
+            if ($PassThru) {
+                Update-ADUserEntry $entry
+
+                # output
+                $entry
+            }
+        } else {
+            Write-Error "Account not found: $Identity"
+        }
+    }
+}
+
+Export-ModuleMember -Function *-ADAccount