PowerShell Genie

Remove-ADGroupMember

Use Remove-ADGroupMember to remove members from an Active Directory group.

Command 2 min read Windows PowerShell 5.1 and PowerShell 7

Documentation: Microsoft Learn — Remove-ADGroupMember

Written and tested by Dhrub Bharali · Updated

Syntax

1PS> Remove-ADGroupMember [-Identity] <ADGroup> [-Members] <ADPrincipal[]> [-Server <String>] [-Credential <PSCredential>] [-PassThru] [-WhatIf] [-Confirm] [<CommonParameters>]
See the command anatomy

Read the command and its supplied arguments. This example requires real PowerShell or its module; this diagram does not execute it.

Remove-ADGroupMember [-Identity] <ADGroup> [-Members] <ADPrincipal[]> [-Server <String>] [-Credential <PSCredential>] [-PassThru] [-WhatIf] [-Confirm] [<CommonParameters>]
  1. Stage 1Remove-ADGroupMember-Identity -Members -Server -Credential -PassThru -WhatIf -Confirm

    Try it

    Windows PowerShell

    PowerShell example · browser support is limited.

    Execution scope: The full example below requires PowerShell outside this browser. You can edit this runner to use the supported practice commands; unsupported syntax returns an explanation.

    Interactive simulation · fictional data

    Examples

    Remove-ADGroupMember -Identity "Sales-Read"

    1PS> Remove-ADGroupMember -Identity "Sales-Read" -Members jsmith
    Show reference output

    Sample output · fictional data, shaped like the real thing

    Name   SamAccountName objectClass
----   -------------- -----------
ajones ajones         user
mchen  mchen          user

    Remove-ADGroupMember -Identity "Sales-Read" (2)

    1PS> Remove-ADGroupMember -Identity "Sales-Read" -Members jsmith
    Show reference output

    Sample output · fictional data, shaped like the real thing

    Name  SamAccountName objectClass
----  -------------- -----------
mchen mchen          user

    Remove-ADGroupMember -Identity "App-Users"

    1PS> Remove-ADGroupMember -Identity "App-Users" -Members "Sales-Read"
    Show reference output

    Sample output · fictional data, shaped like the real thing

    Name SamAccountName objectClass
---- -------------- -----------
jdoe jdoe           user

    Parameters

    Parameter definitions:

    • -Identity
    • -Members
    • -Server
    • -Credential
    • -PassThru
    • -WhatIf
    • -Confirm

    Remove-ADGroupMember on Microsoft Learn

    Practical use and troubleshooting

    Practical scenario: Use Remove-ADGroupMember when you need to remove members from an Active Directory group. Review syntax and sample output, then try an example in the browser lab. Start with one identified target and inspect the returned values before extending the operation to a list. Keep the identity in your report so you can trace each result back to the object or path that produced it.

    Common error and fix: Removing a direct membership does not remove access granted by another nested path. Re-query the group and review nested membership before claiming the user has lost all access. In an unattended script, capture this failure with its original error record and record which target failed. An empty result and an unsuccessful query must remain distinguishable in the final report.

    See also: Add-ADGroupMember. Add-ADGroupMember adds membership links; Remove-ADGroupMember removes them. Review direct membership separately from effective access obtained through nested groups. Read the linked command before substituting it; similar names do not imply identical inputs or output.

    Remove-ADGroupMember reference on Microsoft Learn

    Recap

    Remove-ADGroupMember Use Remove-ADGroupMember to remove members from an Active Directory group.

    Next: Get-ADGroupMember
    Genie guideRemove-ADGroupMember

    Use Remove-ADGroupMember to remove members from an Active Directory group. The console below is pre-loaded — run it, then change a value and run it again.

    Explore PowerShell Genie

    Related