A Windows administrator wants to automate local and remote management tasks in Active Directory. Which tool is most appropriate for this?

IPsec is a network-layer security protocol for encrypting and authenticating IP traffic and has no capability to manage Active Directory or automate administrative tasks.

Visual Basic is a general-purpose programming language and is not a built-in Windows administration tool with native Active Directory management capabilities.

PowerShell includes the ActiveDirectory module with purpose-built cmdlets (such as Get-ADUser, New-ADGroup, Set-ADObject) that enable scripted, repeatable management of AD objects at scale. It also supports PowerShell Remoting via WinRM, allowing administrators to execute commands on remote systems without requiring a GUI, making it the definitive tool for Windows and AD automation.

Netsh is a command-line utility limited to configuring network interfaces and related settings, and cannot interact with Active Directory.

Ipconfig is a read-only diagnostic tool for displaying IP configuration and provides no scripting, remoting, or Active Directory management functionality.