# global catalog port
`-server dc01.contoso.com:3268`

# set extension attr
`Set-ADUser -replace @{extensionAttribute15='f'}`

# pw never expires
`Get-AdUser -filter { passwordNeverExpires -eq $true  -and enabled -eq $true } | Select Name, DistinguishedName`

# get user by SID
`get-aduser -Identity "S-1-5-21-" -server dc01.contoso.com:3268`

# force pw reset
`get-aduser -filter * -SearchBase 'OU=Users,DC=Contoso,DC=com' | set-aduser -ChangePasswordAtLogon $true`

# submit CSR to CA
`certreq -submit -attrib "CertificateTemplate:Webserver Version3" docs_req.req`