Script to disable a user account on AD, AAD, Exchange

 [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

Install-Module -Name AzureAD

Install-Module -Name ExchangeOnlineManagement

Import-Module  AzureAD

Import-Module ActiveDirectory

$msgWelcome = "Script to disable an user account of AD and AAD Services..."

$msgInitProcessAzure = "Connecting to Azure AD..."

$msgInitProcessExchange = "Connecting to Exchange Online..."

$msgInitProcessActiveDirectory = "Connecting to Active Directory..."

$msgInitProcessSyncAAD = "Syncing Azure AD..."

$msgInitProcessRemoveAAD = "Removing group membership of Azure AD..."

$msgInitProcessRenameAndMove = "Renaming and moving the AD's username..."

$msgFinish = "The process is finished..."

$name = ""

$surname = ""

$username = ""

$email = ""

$parameterRename = "z_archive"

$msgWelcome

$name = Read-Host 'Enter the name of the user (For example James)'

$surname = Read-Host 'Enter the surname of the user (For example )'

$username = Read-Host 'Enter the username (For example James)'

$email = Read-Host 'Enter the email (For example james@)'

$msgInitProcessAzure

Connect-AzureAD

Set-AzureADUser -ObjectID $email -AccountEnabled $false

$msgInitProcessExchange

Connect-ExchangeOnline

Set-Mailbox -Identity $email -Type Shared

$msgInitProcessActiveDirectory

Disable-ADAccount -Identity $username

$adGroupsOfUser = Get-ADPrincipalGroupMembership -Identity  $username | where {$_.Name -ne “Domain Users”}

# Removing group membership.

Remove-ADPrincipalGroupMembership -Identity  $username -MemberOf $adGroupsOfUser -Confirm:$false -verbose

$msgInitProcessSyncAAD

Invoke-Command MK-AZUREAD-W19V -Credential BWSRVR.CORP\AdXXX { Start-ADSyncSyncCycle -PolicyType Delta }

Start-Sleep -Seconds 60

$msgInitProcessRemoveAAD

$aadUser = Get-AzureADUser -ObjectId $email

$aadGroupsOfUser = Get-AzureADUserMembership -ObjectId $email | where {$_.DisplayName -ne “All Users”}

foreach($group in $aadGroupsOfUser.ObjectId){

    Remove-AzureADGroupMember -ObjectId $group -MemberId $aadUser.ObjectId

}

$msgInitProcessRenameAndMove

Set-ADUser -Identity $username -DisplayName "z_archive $name $surname" -EmailAddress "z_archive.$email" -UserPrincipalName "z_archive.$username"  -SamAccountName "z_archive.$name"

Get-ADUser "z_archive.$name"| Move-ADObject -TargetPath 'OU=Archived Mailboxes,OU=Users,OU=SIT,DC=B,DC=CORP'

Get-ADUser "z_archive.$name"| Rename-ADObject -NewName "z_archive $name $surname"

$msgFinish

How to install DAX 2009 script

 start /wait C:\Dax\DynamicsAX2009\setup.exe LogDir=C:\Dax HideUI=1 AcceptLicenseTerms=1 BypassWarnings=0 RunMode=Custom InstallClientUI=1 ConfigurePrerequisites=1 InstallPath="C:\Program Files\Microsoft Dynamics AX\50" InstallPath32Bit="C:\Program Files (x86)\Microsoft Dynamics AX\50" ClientLanguage=EN-AU ClientHelpLanguages=EN-AU ClientAosServer=Axapta AosInstanceName= AosPort=2712 InstallNetBusinessConnector=1

start /wait C:\Dax\DynamicsAX2009SP1\axupdate.exe LogDir=C:\Dax HideUI=1 AcceptLicenseTerms=1 InstallComponents=1 SetupLanguage=EN InstallPath="C:\Program Files\Microsoft Dynamics AX\50" InstallPath32Bit="C:\Program Files (x86)\Microsoft Dynamics AX\50"

start /wait C:\Dax\SQLServerClientTools\SQLSysClrTypes\SQLSysClrTypes2012_x64.msi /qn /l* "%temp%\MicrosoftSystemCLRTypesforSQLServer2012_x64.txt" /norestart ALLUSERS=2

start /wait C:\Dax\SQLServerClientTools\MicrosoftReportViewer\ReportViewer2005.exe /Q /C:"install.exe /q /l ""%temp%\MicrosoftReportViewerRedistributable2005.txt"""

start /wait C:\Dax\SQLServerClientTools\MicrosoftReportViewer\ReportViewer2008SP1.exe /q /l "%temp%\MicrosoftReportViewerRedistributable2008SP1.txt"

start /wait C:\Dax\SQLServerClientTools\MicrosoftReportViewer\ReportViewer2010SP1.exe /q /norestart /log "%temp%\MicrosoftReportViewer2010SP1.txt"

start /wait C:\Dax\SQLServerClientTools\MicrosoftReportViewer\ReportViewer2012.msi /qn /l* "%temp%\MicrosoftReportViewer2012.txt" /norestart ALLUSERS=2

How to add automatically enrolled devices to an azure ad group

 

(device.devicePhysicalIDs -any (_ -contains "[ZTDId]"))