list of all disabled users in Active directory 2008

Use the below command...

Import-module activedirectory
Get-aduser -filter * -searchbase "ou=myou,dc=domain,dc=com" -properties displayname, samaccountname, primarysmtpaddress |
? {$_.Enabled -eq $false} |
select displayname, samaccountname, primarysmtpaddress, Enabled
Export-csv "c:\resutls.csv" -nti

Select allOpen in new window

You cannot determine when the account was disabled using a script. You would have to reference the security logs on the domain controller and also requires having auditing enabled.

Will.

Hi Will ,

Thanks for you quick response , is any way I can find how can I get to "ou=myou,dc=domain,dc=com" , where I can copy and past the structure of our AD object

Thanks
rabih

Hi Will ,

Not sure if my  is incorrect
please see the below script after I ran  it

"cmdlet Export-Csv at command pipeline position 1
Supply values for the following parameters:
InputObject: ^Z
[PS] H:\> " 

please advise

Thanks
Rabih

Sorry I forgot the Pipe command at the end of line 4. I have corrected this below.

Import-module activedirectory
Get-aduser -filter * -searchbase "ou=myou,dc=domain,dc=com" -properties displayname, samaccountname, primarysmtpaddress |
? {$_.Enabled -eq $false} |
select displayname, samaccountname, primarysmtpaddress, Enabled |
Export-csv "c:\resutls.csv" -nti

Select allOpen in new window

Will.

is any way I can find how can I get to "ou=myou,dc=domain,dc=com" , where I can copy and past the structure of our AD object

This is just the path to where your OU is in AD.
Post a screenshot of your AD structure and I will tell you what is it. If this is a sub OU then post the entire structure.

Will.

Hi Will
please see the below ou folders
domain.local>user Accounts and every folders under user Accounts

Thanks
Rabih

I got it working ,  can I get also which OU this user are seating in .
or can I run it like -properties * and where I can add in the script


Thanks
Rabih

I have modified the script below to add the DistinguishedName

Import-module activedirectory
Get-aduser -filter * -searchbase "ou=myou,dc=domain,dc=com" -properties displayname, samaccountname, primarysmtpaddress, DistinguishedName, Enabled |
? {$_.Enabled -eq $false} |
select displayname, samaccountname, primarysmtpaddress, DistinguishedName, Enabled |
Export-csv "c:\resutls.csv" -nti

Select allOpen in new window

Will.

Thanks , how about if I need to know what OU are they seating on Please

The Distinguished Name shows the entire path where the user is located.

Will.

Hi Will , nearly getting there

please see the blew error
[PS] H:\>.\resultdisabled.ps1
Get-ADUser : One or more properties are invalid.
Parameter name: primarysmtpaddress
At H:\resultdisabled.ps1:2 char:11
+ Get-aduser <<<<  -filter * -searchbase "OU=User Accounts,DC=?????,DC=local" -properties displayname, samaccountname,
primarysmtpaddress, DistinguishedName, Enabled |
    + CategoryInfo          : InvalidArgument: (:) [Get-ADUser], ArgumentException
    + FullyQualifiedErrorId : One or more properties are invalid.
Parameter name: primarysmtpaddress,Microsoft.ActiveDirectory.Management.Commands.GetADUser

[PS] H:\>

Please help

thanks

Ahhh...I have modified below...

Import-module activedirectory
Get-aduser -filter * -searchbase "ou=myou,dc=domain,dc=com" -properties displayname, samaccountname, mail, DistinguishedName, Enabled |
? {$_.Enabled -eq $false} |
select displayname, samaccountname, mail, DistinguishedName, Enabled |
Export-csv "c:\resutls.csv" -nti

Select allOpen in new window

Will.

mate you did it and it is working . how can I give you a full points and grade is the higher  A,B or C

I tried to add to the script  Logon Name, but gave me an error  

what is  Attr LDAP Name for USER LOGON NAME in AD , need to get users UPN also please with the above script

Thanks
Rabih

Quick response and excellent help

are you able to look at the other question I have on this site
list of all network access and pritners for user in Active directory 2008

not sure if I have explain much

thanks
Rabih