Solved

AD Query for Users - Add line for Domain Admins

Posted on 2013-02-01

Powershell

1 solution

377 Views

Last Modified: 2013-02-08

I posted a question on here recently that was answered already for running a AD powershell query for Users and exporting to a clewan CSV shoing Title name department etc... I am wionder if it is possible to add to this cmd to also pull all Domain Admins in AD and list them in their own category on the CSV. Below is the cmd SUBSUN provided foir running the AD USer Query and below that is a Query I found for pulling the DOmain Admins. I am having trouble combining them to make one CSV.

Thanks in Advanced for your help!

COMMAND FOR AD USER QUERY:

Get-ADUser -Filter * -Properties Title,Department,LastLogonDate,whenCreated,Enabled -SearchBase "DC=ad,DC=local" |
? {$_.Name -notlike "*ConfRm*" `
-and $_.SamAccountName -notlike "*IG*" `
-and $_.SamAccountName -notlike "*Mail*" `
-and $_.SamAccountName -notlike "*QPM*" `
-and $_.DistinguishedName -notmatch 'OU=SharedMailboxes,DC=AD,DC=Local' `

-and $_.DistinguishedName -notmatch 'OU=ServiceAccounts,DC=AD,DC=Local'} |
Select Name,Title,Department,LastLogonDate,whenCreated,Enabled |
Export-Csv "C:\myscripts\ADusers.csv" –NoTypeInformation

CMD for Domain ADMIN Query:
Get-ADGroupMember 'domain admins'

Comment

Question by:Twhite0909

[X]

Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

Help others & share knowledge
Earn cash & points
Learn & ask questions

Join The Community

3 Comments

LVL 5

Expert Comment

by:coraxal

ID: 388457762013-02-01

One approach would be to use PSCustom objects to combine users from both queries

$usersCol = @()
# Get AD users
$users = Get-ADUser -Filter * -Properties Title,Department,LastLogonDate,whenCreated,Enabled -SearchBase "DC=ad,DC=local" |
? {$_.Name -notlike "*ConfRm*" `
 -and $_.SamAccountName -notlike "*IG*" `
  -and $_.SamAccountName -notlike "*Mail*" `
 -and $_.SamAccountName -notlike "*QPM*" `
     -and $_.DistinguishedName -notmatch 'OU=SharedMailboxes,DC=AD,DC=Local' `
         -and $_.DistinguishedName -notmatch 'OU=ServiceAccounts,DC=AD,DC=Local'}
# Get Domain Admins
$domainAdminUsers = Get-ADGroupMember -Identity "Domain Admins"

foreach ($user in $users)
{
	$objTemp = New-Object PSObject -Property @{            
		NAME = $user.Name
		TITLE = $user.Title
		DEPARTMENT = $user.Department
		LASTLOGONDATE = $user.LastLogonDate
		WHENCREATED = $user.WhenCreated
		ENABLED = $user.Enabled
		DOMAINADMIN = $false
	}            
	    
	$usersCol += $objTemp
}

foreach ($domainadmin in $domainAdminUsers)
{
	$adminuser = Get-ADUser -Identity $domainadmin.distinguishedName -Properties Title,Department,LastLogonDate,whenCreated,Enabled
			
	$objTemp = New-Object PSObject -Property @{            
		NAME = $adminuser.Name
		TITLE = $adminuser.Title
		DEPARTMENT = $adminuser.Department
		LASTLOGONDATE = $adminuser.LastLogonDate
		WHENCREATED = $adminuser.WhenCreated
		ENABLED = $adminuser.Enabled
		DOMAINADMIN = $true
	}

	$usersCol += $objTemp	
	
}

$usersCol | Export-Csv "C:\myscripts\ADusers.csv" -NoTypeInformation

Open in new window

Author Comment

by:Twhite0909

ID: 388513052013-02-04

Ok so now I just need to pull the name sof the current domain admins tand thats all. However when I run the following:

Get-ADGroupMember 'domain admins'

I get Name, Samaccount,name Distinguished name, SID, Object Class and Ibject GUID

How can I export to CSV but only pull the NAME and not the rest?

Thanks

LVL 40

Accepted Solution

by:Subsun

Subsun earned 500 total points

ID: 388559482013-02-05

Try..

Get-ADGroupMember 'domain admins' | Select Name | Export-Csv C:\Admins.csv -NoTypeInformation

Open in new window

Featured Post

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Nano Server Image Builder

Article by: Jinish

The Nano Server Image Builder helps you create a custom Nano Server image and bootable USB media with the aid of a graphical interface. Based on the inputs you provide, it generates images for deployment and creates reusable PowerShell scripts that …

Perpetual Logon Script using PowerShell

Article by: Greg

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.

How to change priority of transport agents in Exchange 2007/2010 using Exchange Management Shell

Video by: CodeTwo

Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

Webinar - Best Practices Migrating to Open Source Databases

Video by: Percona

This is a high-level webinar that covers the history of enterprise open source database use. It addresses both the advantages companies see in using open source database technologies, as well as the fears and reservations they might have. In this…