#useraccountcontrol

PowerShell: Find all enabled user accounts

Some time ago, I was asked to provide a list of all enabled user accounts in Active Directory. My thoughts immediately went to PowerShell, assuming that there would be tools available to achieve that task. I knew that the Get-ADUser query, combined with a parameter, would likely be the ticket.

Using the -ldapfilterparameter to only return results that had a useraccountcontrol value of 512, I…