Set-ComputerProperty

Computers: Sets the properties of an Active Directory computer

Script

param(
	[Parameter(Mandatory = $true, ParameterSetName = "Local or Remote DC")]
	[Parameter(Mandatory = $true, ParameterSetName = "Remote Jumphost")]
	[string]$OUPath,

	[Parameter(Mandatory = $true, ParameterSetName = "Local or Remote DC")]
	[Parameter(Mandatory = $true, ParameterSetName = "Remote Jumphost")]
	[string]$Computername,

	[Parameter(Mandatory = $true, ParameterSetName = "Remote Jumphost")]
	[PSCredential]$DomainAccount,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[string]$DNSHostName,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[string]$Location,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[string]$Description,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[string]$OperatingSystem,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[string]$OSServicePack,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[string]$OSVersion,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[switch]$TrustedForDelegation,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[switch]$AllowDialin,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[switch]$EnableCallback,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[string]$CallbackNumber,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[string]$NewSAMAccountName,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[string]$DomainName,

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[ValidateSet('Base', 'OneLevel', 'SubTree')]
	[string]$SearchScope = 'SubTree',

	[Parameter(ParameterSetName = "Local or Remote DC")]
	[Parameter(ParameterSetName = "Remote Jumphost")]
	[ValidateSet('Basic', 'Negotiate')]
	[string]$AuthType = "Negotiate"
)

try {
	Import-Module ActiveDirectory -ErrorAction Stop

	$sam = $Computername
	if (-not $sam.EndsWith('$')) {
		$sam += '$'
	}

	[hashtable]$cmdArgs = @{
		'ErrorAction' = 'Stop'
		'AuthType'    = $AuthType
	}
	if ($null -ne $DomainAccount) {
		$cmdArgs.Add("Credential", $DomainAccount)
	}
	if ([System.String]::IsNullOrWhiteSpace($DomainName)) {
		$cmdArgs.Add("Current", 'LocalComputer')
	} else {
		$cmdArgs.Add("Identity", $DomainName)
	}
	$Domain = Get-ADDomain @cmdArgs

	$getArgs = @{
		'ErrorAction' = 'Stop'
		'AuthType'    = $AuthType
		'Filter'      = "(SamAccountName -eq '$sam') -or (DNSHostName -eq '$Computername') -or (DistinguishedName -eq '$Computername')"
		'Server'      = $Domain.PDCEmulator
		'SearchBase'  = $OUPath
		'SearchScope' = $SearchScope
		'Properties'  = '*'
	}
	if ($null -ne $DomainAccount) {
		$getArgs.Add("Credential", $DomainAccount)
	}

	$cmp = Get-ADComputer @getArgs

	if ($null -ne $cmp) {
		if (-not [string]::IsNullOrWhiteSpace($DNSHostName)) { $cmp.DNSHostName = $DNSHostName }
		if (-not [string]::IsNullOrWhiteSpace($Location)) { $cmp.Location = $Location }
		if (-not [string]::IsNullOrWhiteSpace($Description)) { $cmp.Description = $Description }
		if (-not [string]::IsNullOrWhiteSpace($OperatingSystem)) { $cmp.OperatingSystem = $OperatingSystem }
		if (-not [string]::IsNullOrWhiteSpace($OSServicePack)) { $cmp.OperatingSystemServicePack = $OSServicePack }
		if (-not [string]::IsNullOrWhiteSpace($OSVersion)) { $cmp.OperatingSystemVersion = $OSVersion }
		if ($PSBoundParameters.ContainsKey('TrustedForDelegation')) { $cmp.TrustedForDelegation = $TrustedForDelegation }
		
		$setArgs = @{
			'ErrorAction' = 'Stop'
			'AuthType'    = $AuthType
			'Server'      = $Domain.PDCEmulator
		}
		if ($null -ne $DomainAccount) {
			$setArgs.Add("Credential", $DomainAccount)
		}

		Set-ADComputer @setArgs -Instance $cmp
		
		$identArgs = $setArgs.Clone()
		$identArgs['Identity'] = $cmp.SamAccountName

		if ($PSBoundParameters.ContainsKey('AllowDialin')) {
			Set-ADComputer @identArgs -Replace @{msnpallowdialin = $AllowDialin}
		}
		if ($PSBoundParameters.ContainsKey('EnableCallback')) {
			if ($EnableCallback) {
				Set-ADComputer @identArgs -Replace @{msRADIUSServiceType = 4}
			} else {
				Set-ADComputer @identArgs -Remove @{msRADIUSServiceType = 4}
			}
		}
		if (-not [string]::IsNullOrWhiteSpace($CallbackNumber)) {
			Set-ADComputer @identArgs -Replace @{'msRADIUSCallbackNumber' = $CallbackNumber; 'msRADIUSServiceType' = 4}
		}
		if (-not [string]::IsNullOrWhiteSpace($NewSAMAccountName)) {
			Set-ADComputer @identArgs -Replace @{'SAMAccountName' = $NewSAMAccountName}
		}

		Write-Output "Properties for computer '$Computername' updated successfully."
	} else {
		throw "Computer '$Computername' not found in OU '$OUPath'"
	}
} catch {
	Write-Error $_
	exit 1
}

Customize

OUPath string

Specifies the Active Directory path (OU).

Computername string

DistinguishedName, DNSHostName or SamAccountName of the computer.

DomainAccount PSCredential

Active Directory Credential for remote execution on jumphost without CredSSP.

DNSHostName string

Specifies the fully qualified domain name (FQDN) of the computer.

Location string

Specifies the location of the computer.

Description string

Specifies a description of the computer.

OperatingSystem string

Specifies an operating system name.

OSServicePack string

Specifies the name of an operating system service pack.

OSVersion string

Specifies an operating system version.

TrustedForDelegation switch

Off

Specifies whether an account is trusted for Kerberos delegation.

AllowDialin switch

Off

Specifies the network access permission (Allow Dial-in).

EnableCallback switch

Off

Specifies the Callback options.

CallbackNumber string

Specifies the Callback number.

NewSAMAccountName string

The new SAMAccountName of the computer.

DomainName string

Name of the Active Directory Domain.

SearchScope string

Specifies the scope of the search (Base, OneLevel, SubTree).

AuthType string

Specifies the authentication method to use (Basic or Negotiate).