tamacase.blogg.se

$OUs = "OU=NY,DC=woshub,DC=com","OU=LA,DC=woshub,DC=com","OU=MA,DC=woshub,DC=com" If you need to select users from multiple OUs at once, use the following PowerShell script: Get-ADUser -SearchBase 'OU=London,DC=woshub,DC=loc' -filter * -properties PasswordExpired, PasswordLastSet, PasswordNeverExpires | ft Name, PasswordExpired, PasswordLastSet, PasswordNeverExpires

To display users only from a specific domain container (Organizational Unit), use the SearchBase parameter: Get-ADUser: Multiple OU’s Search with SearchBase Get-ADUser -filter * -properties PasswordExpired, PasswordLastSet, PasswordNeverExpires | ft Name, PasswordExpired, PasswordLastSet, PasswordNeverExpires To display this information in a more convenient table view and remove all unnecessary attributes use the Select-Object –Property or Format-Table: Now in the user data there is the information about the account status (Expired: True/False), the date of the last password change and the time of the last user logon to the domain (lastlogontimestamp). Get-ADUser tuser -properties PasswordExpired, PasswordLastSet, PasswordNeverExpires, lastlogontimestamp You can display several user attributes at once: Then we’ll go to the formatting of Get-ADUser output so that the necessary user attributes are displayed. The Get-ADUser cmdlet with the Properties * parameter displayed a list of all AD user attributes and their values.