The ObjectGUID property of an AD object is weird. I tried using -Expand and foreach{$_.ObjectGUID} to extract the value, but neither did quite what I expected. Here’s how I was able to get the value of that property into a string variable that I could then use for something useful. $uGuid = (Get-ADUser <username> | Select -Expand ObjectGUID).toString() The value of $uGuid will be the […]
I use Group Policy Objects to manage the local Administrators groups in various departments/Organizational Unites in my Active Directory domain. I recently encountered a problem in which the policy was not applying to the computers in a single OU. I verified that the settings in the GPO were correct and that “Authenticated Users” had “apply” permission. I removed the entries from “Local Users and Groups” […]
You never know when you need odd little tidbits of information out of Active Directory. Here’s a quick script you can run using the Active Directory Module for PowerShell to get a count of users in each of your OUs. Just replace “ou=Employees,dc=domain,dc=com” with the CN path to OU you use for all user accounts. $BaseOU = “ou=Employees,dc=domain,dc=com” $DNs = (Get-ADOrganizationalUnit -Filter * –SearchBase […]
I use this cmdlet for periodic auditing of Group Policies: Get-GPO -All | select DisplayName, ID, Description, CreationTime, ModificationTime | Export-Csv c:\temp\GPOs.csv -NoTypeInformation This produces a CSV file with the following information: Default Domain Policy xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx Created with AD installation 9/1/2009 15:31 12/12/2012 19:05 Another Group Policy xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx Description for GPO 2 10/3/2009 17:45 10/4/2009 9:23 Policy Three xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx Description for GPO 3 4/16/2010 20:01 […]
Say you want a spreadsheet of all users in the default Users OU. Easy. You open the Active Directory Module for Windows PowerShell and enter this cmdlet: Get-ADUser -Filter * -SearchBase “OU=Users,DC=domain,DC=com” -Properties “Description” | fl Name, SamAccountName, Enabled, Description And you get this error: Get-ADUser : Directory object not found At line:1 char:1 + Get-ADUser -SearchBase “OU=Users,DC=domain,DC=com” -Filter * -Properties … + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ […]
This is a quick and dirty PowerShell script to retrieve the user statistics that I need most frequently. It works great for my help desk too. # Filename : get_status.ps1 # Purpose : Queries basic account status info. # # Requires the following applications to be installed: # Quest ActiveRoles AD Management Snapin # # Modified : 2013.03.05 Jay Carper; Created # Param([string]$Username) # If […]