{"id":170,"date":"2018-02-26T20:03:53","date_gmt":"2018-02-26T20:03:53","guid":{"rendered":"http:\/\/107.181.191.134\/?p=170"},"modified":"2018-02-26T20:03:53","modified_gmt":"2018-02-26T20:03:53","slug":"managing-adsi-users-with-powershell","status":"publish","type":"post","link":"https:\/\/certcent.io\/index.php\/2018\/02\/26\/managing-adsi-users-with-powershell\/","title":{"rendered":"Managing ADSI Users with PowerShell"},"content":{"rendered":"

Platform: Windows 2012
\nModule Required: activedirectory
\nHere are some quick and dirty ways to find locked out, disabled, expired, expiring, inactive, locked out, password expired, password never expires.
\n Using Get-Aduser with a little more scripting <\/strong>
\nget-aduser -filter * -properties * | select-object name, @{name=”lastlogon”;expression={[datetime]::fromfiletime($_.lastlogon)}} | s
\nort-object lastlogon
\nThe rest of the examples are from Search-ADAccount get-help -examples
\nSearch-ADAccount<\/strong> -parameter
\nHere are some examples from the help:
\n Gets Active Directory user, computer, or service accounts.
\n C:\\PS>Search-ADAccount -AccountDisabled | FT Name,ObjectClass -A
\n Name ObjectClass
\n —- ———–
\n Guest user
\n krbtgt user
\n krbtgt_51399 user
\n AmyAl-LPTOP computer
\n DeepakAn-DSKTOP computer
\n C:\\PS>Search-AdAccount -AccountDisabled -SearchBase “DC=AppNC” -Server “FABRIKAM-SRV1:60000”
\n Enabled : False
\n Name : SanjayPatel
\n UserPrincipalName :
\n PasswordNeverExpires :
\n LockedOut : False
\n ObjectGUID : d671de28-6e40-42a7-b32c-63d336de296d
\n ObjectClass : user
\n SID : S-1-510474493-936115905-2231798853-1260534229-4171027843-767619944
\n PasswordExpired : False
\n LastLogonDate :
\n DistinguishedName : CN=SanjayPatel,OU=AccountDeptOU,DC=AppNC
\n AccountExpirationDate :
\n Description
\n ———–
\n Returns all users, computers and service accounts that are disabled in the LDS instance: “FABRIKAM-SRV1:60000”.
\n C:\\PS>Search-ADAccount -AccountExpiring -DateTime “3\/18\/2009” | FT Name,ObjectClass -A
\n Name ObjectClass
\n —- ———–
\n Anders Riis user
\n Description
\n ———–
\n Returns all accounts which expire on the 18th of March, 2009.
\nC:\\PS>Search-ADAccount -LockedOut | FT Name,ObjectClass -A
\n Name ObjectClass
\n —- ———–
\n Toni Poe user
\n Description
\n ———–
\n Returns all accounts that have been locked out.
\nC:\\PS>Search-ADAccount -PasswordNeverExpires | FT Name,ObjectClass -A
\n Name ObjectClass
\n —- ———–
\n Guest user
\n Toni Poe user
\n Anders Riis user
\n Fabien Hernoux user
\n Description
\n ———–
\n Returns all accounts with a password that will never expire.<\/p>\n","protected":false},"excerpt":{"rendered":"

Platform: Windows 2012 Module Required: activedirectory Here are some quick and dirty ways to find locked out, disabled, expired, expiring, inactive, locked out, password expired, password never expires. Using Get-Aduser with a little more scripting get-aduser -filter * -properties * | select-object name, @{name=”lastlogon”;expression={[datetime]::fromfiletime($_.lastlogon)}} | s ort-object lastlogon The rest of the examples are from… Continue reading Managing ADSI Users with PowerShell<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/certcent.io\/index.php\/wp-json\/wp\/v2\/posts\/170"}],"collection":[{"href":"https:\/\/certcent.io\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/certcent.io\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/certcent.io\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/certcent.io\/index.php\/wp-json\/wp\/v2\/comments?post=170"}],"version-history":[{"count":0,"href":"https:\/\/certcent.io\/index.php\/wp-json\/wp\/v2\/posts\/170\/revisions"}],"wp:attachment":[{"href":"https:\/\/certcent.io\/index.php\/wp-json\/wp\/v2\/media?parent=170"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/certcent.io\/index.php\/wp-json\/wp\/v2\/categories?post=170"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/certcent.io\/index.php\/wp-json\/wp\/v2\/tags?post=170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}