AD - Query to find disabled users

You can use powershell to accomplish this..Use the below command...

Import-Module activedirectory

Then run the below command...

get-aduser -Filter * | Where-Object {$_.enabled -eq $false} | select Name, sAMAccountName, Enabled

Will.

Odd, your query worked for me, can you try refining it a bit

(&(objectCategory=person)(objectclass=user)(userAccountControl:1.2.840.113556.1.4.803:=2))

Powershell above is also great,  Adfind is a free lightweight tool that has a great shortcut

http://www.joeware.net/freetools/tools/adfind/

adfind -sc users_disabled

Thanks

Mike

The query worked me I was just saying that it pulled back alot of accounts that are NOT disabled as well as accounts that are.  Im looking to take out the accounts that are active from the list.

The Powershell command does the same.

 I need to get only DISABLED accounts.  I am getting back all of My conference rooms, accountspayable, exec accounts et... all of these are ACTIVE and these commands and queries are pulling them in with this disabled user account list

When I ran it it only returned disabled accounts,   You are seeing enabled accounts too?  Do those accounts have anything else set on the account options.

Can you download adfind and run

adfind -sc users_disabled name

Thanks


Mike