This is the built-in help made by Microsoft for the command 'Remove-ADGroupMember', in PowerShell version 5 - as retrieved from
Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.
For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.
Removes one or more members from an Active Directory group.
Remove-ADGroupMember [-Identity] <ADGroup> [-Members] <ADPrincipal[]> [-AuthType {Negotiate | Basic}] [-Credential <PSCredential>] [-Partition <String>] [-PassThru] [-Server
<String>] [-Confirm] [-WhatIf] [<CommonParameters>]
The Remove-ADGroupMember cmdlet removes one or more users, groups, service accounts, or computers from an Active Directory group.
The Identity parameter specifies the Active Directory group that contains the members to remove. You can identify a group by its distinguished name (DN), GUID, security
identifier (SID), or Security Accounts Manager (SAM) account name. You can also specify a group object variable, such as $<localGroupObject>, or pass a group object through
the pipeline to the Identity parameter. For example, you can use the Get-ADGroup cmdlet to retrieve a group object and then pass the object through the pipeline to the
Remove-ADGroupMember cmdlet.
The Members parameter specifies the users, computers and groups to remove from the group specified by the Identity parameter. You can identify a user, computer or group by
its distinguished name (DN), GUID, security identifier (SID), or Security Accounts Manager (SAM) account name. You can also specify user, computer, and group object
variables, such as $<localUserObject>. If you are specifying more than one new member, use a comma-separated list. You cannot pass user, computer, or group objects through
the pipeline to this cmdlet. To remove user, computer, or group objects from a group by using the pipeline, use the Remove-ADPrincipalGroupMembership cmdlet.
For AD LDS environments, the Partition parameter must be specified except in the following two conditions:
-- The cmdlet is run from an Active Directory provider drive.
-- A default naming context or partition is defined for the AD LDS environment. To specify a default naming context for an AD LDS environment, set the
msDS-defaultNamingContext property of the Active Directory directory service agent (DSA) object (nTDSDSA) for the AD LDS instance.
<
Online Version: http://go.microsoft.com/fwlink/p/?linkid=291089
Add-ADGroupMember
Add-ADPrincipalGroupMembership
Get-ADGroup
Get-ADGroupMember
Get-ADPrincipalGroupMembership
Remove-ADPrincipalGroupMembership
<
-------------------------- EXAMPLE 1 --------------------------
PS C:\>Remove-ADGroupMember -Identity "DocumentReaders" -Members "WilsonPais"
Confirm
Are you sure you want to perform this action?
Performing operation "Set" on Target "CN=DocumentReaders,CN=Users,DC=Fabrikam,DC=com".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"):
This command removes the user with samAccountName WilsonPais from the group DocumentReaders.
-------------------------- EXAMPLE 2 --------------------------
PS C:\>Remove-ADGroupMember -Identity "DocumentReaders" -Members "administrator","Wilson Pais"
This command removes the users with samAccountNames administrator and WilsonPais from the group DocumentReaders.
-------------------------- EXAMPLE 3 --------------------------
PS C:\>Get-ADGroup -Server localhost:60000 -Identity "CN=AccessControl,DC=AppNC" | Remove-ADGroupMember -Members "CN=GlenJohns,DC=AppNC"
Confirm
Are you sure you want to perform this action?
Performing operation "Set" on Target "CN=AccessControl,DC=AppNC".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"):
This command removes the user with DistinguishedName CN=GlenJohns,DC=AppNC from the AccessControl group on an AD LDS instance using the pipeline.