Exporting List of Active Directory Users and other information

jdouthit
jdouthit used Ask the Experts™
on
Per our auditors' request I need to export a list of all users within our Active Directory 2008.  They have asked for the following.

System generated list of users on Active Directory showing user ids, name, status (active, inactive), last login, last password change date.

Is there an easy way to perform this task?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Sandesh DubeyTechnical Lead
Top Expert 2011

Commented:
You can use third party software True Last Logon 2.9.You can export the file in excel for report creation.You can use the trial version this will achieve what you are looking for.

True Last Logon displays the following Active Directory information:
--Users real name and logon name
--Detailed account status
--Last Logon Date & Time
--Last Logon Timestamp (Replicated value)
--Account Expiry Date & Time
--Enabled or Disabled Account
--Locked Accounts
--Password Expires
--Password Last Set Date & Time
--Logon Count
--Bad Password Count
--Expiry Date
--You can also query for any other attribute (Example: Description, telephone Number, custom attibutes etc)

Refer the below link for trial version:
http://www.dovestones.com/products/True_Last_Logon.asp
Commented:
I would use the quest ad cmdlets, this is not tested and some


get-qaduser -sizelimit 0 | Select Name, samaccountname, AccountIsDisabled, lastlogontimestamp, passwordlastset | export-csv c:\temp\users.csv


Bill PrewTest your restores, not your backups...
Top Expert 2016

Commented:
A pretty good free command line tool for this here.  If you google for "adfind examples" you will find several places with example commands.

http://www.joeware.net/freetools/tools/adfind/index.htm

~bp
Second vote for Quest AD commands, you can do quite a lot with the QAD cmdlets! :)

Author

Commented:
I'm not quite sure how to run the QAD cmdlets.  I'm not very familiar with powershell.  Is there a recommended tutorial that will hold my hand through the process?
Commented:
Download the PDFs from Quest

http://www.quest.com/powershell/activeroles-server.aspx


Then use help within powershell for some examples

help get-qaduser
help set-qaduser

Author

Commented:
Command posted by KenMcF worked.  Link provided by KenMcF also helped me download the software and the admin guide.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial