Solved

Powershell-PowerGui View list of servers user can logon to

Posted on 2014-01-21
3
285 Views
Last Modified: 2014-04-01
1) I have various service accounts that I have to change the passwords for in AD.

1) They run SQL services on various SQL servers.

3) Is there a way to list the servers the account as the "logon" rights to?

I thought it was in the "TSAllowLogon" setting  by using Powergui and "get-qaduser". However the entry is blank.

The process I have to go through now is to search for the ID in ADUC -> view properties of the ID -> clck on the "Account" tab -> click on the "LogOnto" tab and then write down the list of servers.

LogOnto picture
I'd like to automate this. I'm limited to PowerShell V2 and the use of the "Quest.ActiveRoles.ADManagement" PSSnappin.

Any help would be greatly appreciated.
0
Comment
Question by:Lobsterguy
  • 2
3 Comments
 
LVL 10

Accepted Solution

by:
JoeKlimis earned 500 total points
ID: 39915270
HI

I dont have the Quest addon

but i think this may help

get-qaduser svc*@yourdomain.com -dontusedefaultincludedproperties -objectattributes @{userWorkstation='*'} | format-list LogonName,userWorkstation

Open in new window

0
 

Author Comment

by:Lobsterguy
ID: 39970434
I came up with basically the same thing back in February.

Get-QADUser $user -IncludedProperties userWorkstations | Select-Object userWorkstations

Open in new window

0
 

Author Closing Comment

by:Lobsterguy
ID: 39970438
Aside from how long it took for someone to respond, this method works as well and points are awarded.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to sign a powershell script so you can prevent tampering, and only allow users to run authorised Powershell scripts
"Migrate" an SMTP relay receive connector to a new server using info from an old server.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now