#get-aduser

PowerShell: Find all groups containing a specific string

Sometimes, you need a list of all groups whose name contain a specific string, whether that is in the beginning, middle, or end of the group name. As we’ve seen previously, looking up groups in PowerShell is done with the Get-ADGroup command. Adding the -filter parameter allows us to find groups that satisfy our needs. Using asterisks as wildcards, we can specify whether the string should be at…

PowerShell: Getting properties for all user objects in a given OU

Two weeks ago, I showed you how I got some specific properties for a specific user. Perhaps unsurprisingly, the next request from my customer was a similar dump from a specific OU. While the Identity parameter works well when you’re dealing with a specific user, it doesn’t help when you want all users.

Furthermore, they requested an overview showing only users in a specific OU, For this, we…

I was asked to provide an overview of all available properties in an Active Directory user object for an upcoming project. As it turns out, that is very easily accomplished. Unsurprisingly, PowerShell has an applet for this. We use the Get-ADUser applet, with the parameters Identity to identify the user in question and Properties with a wildcard to return all properties.

The query looks…

A few weeks ago, I showed you how to get a list of all enabled user accounts in PowerShell. Perhaps unsurprisingly, after having presented this to my customer, it transpired that what they really wanted, was to know how many enabled user accounts existed in Active Directory.

Once more, my Google-fu put me on the right track, as I found this article, which gave me the solution right out of the…

PowerShell: Find all users in a specific OU

One of my customers asked for an overview of the UPNs of all users in a specific OU. Having become fairly familiar with the Get-ADUser command, I decided to see if I couldn’t make it do this, too.

I knew that I would need to filter the results of the command on OU, and found that the -filter parameter, combined with -SearchBasewould give me what I wanted. To this end, I ran the following…

PowerShell: Find all enabled user accounts

Some time ago, I was asked to provide a list of all enabled user accounts in Active Directory. My thoughts immediately went to PowerShell, assuming that there would be tools available to achieve that task. I knew that the Get-ADUser query, combined with a parameter, would likely be the ticket.

Using the -ldapfilterparameter to only return results that had a useraccountcontrol value of 512, I…

Building a script to find all members of a given group

Some time ago, I was asked to provide a list of everyone with access to a specific system. After communicating with the client, it transpired that they were particularly interested in knowing who were the members of a set of Active Directory groups. While this can be done manually, I wanted to try my hand at building a PowerShell-script that returned the information the client was asking for, and…

Get-AdUser: A Cmdlet a Day

Get-AdUser is our first PowerShell cmdlet for the day! If you’re in IT, chances are you’ve got some implementation of Microsoft’s Active Directory (AD). A huge part of AD is users. Users are what gets assigned to individual employees, service accounts, etc. Get-AdUser is a cmdlet inside of the freely available Remote Server Administration Tools (RSAT) package.

Once you have the ActiveDirectory…