Solved

AD Users With Expiration

Posted on 2016-08-09
9
68 Views
Last Modified: 2016-08-10
Hi,
      I am using ADFind to list my AD users. I would like to add the account expirations if possible. Here is the current script that gives me all the users with their names:

adfind -default -f "&(objectcategory=person)(objectclass=user)" samaccountname displayname -csv > c:\users.csv
Is this possible?

Thank you
0
Comment
Question by:daskas27
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 1

Expert Comment

by:SquigglyMonkey
ID: 41749681
Do you want to continue using adfind, or powershell?
0
 
LVL 1

Expert Comment

by:SquigglyMonkey
ID: 41749722
Use to luv me some joeware!!
adfind -default -f "&(objectcategory=person)(objectclass=user)" samaccountname displayname accountexpires -csv > c:\users.csv

Open in new window


You prolly can't really read it though, cause it is in MS speak....
0
 
LVL 1

Author Comment

by:daskas27
ID: 41750159
Me love joeware too! However the dates came back as: 9.22337E+18

Thank you
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 1

Accepted Solution

by:
SquigglyMonkey earned 500 total points
ID: 41750281
That's what I said. I don't think you can use that particular Joeware tool for that, not natively anyway.
open an elevated powershell session and try this:
import-module activedirectory
Get-AdUser -Filter * -Properties * | Select SAMAccountname, DisplayName, AccountExpirationDate | Export-CSV -Path C:\path\to\folder\file.csv

Open in new window

Change the path to wherever you need the exported file.
0
 
LVL 1

Author Comment

by:daskas27
ID: 41750335
I ran the last script in the elevated powershell as directed. It returned the names but no expiration dates. The column was there but they were all blank.
0
 
LVL 1

Expert Comment

by:SquigglyMonkey
ID: 41750374
Are the accounts set to "not expire"? Spot check and see if an account actually has an expiration date.
0
 
LVL 1

Author Comment

by:daskas27
ID: 41750406
Ah ha! That is it. Hey, thanks for your help. Would you want to throw in a lookup for expiring passwords?
0
 
LVL 1

Expert Comment

by:SquigglyMonkey
ID: 41750440
How about this,
get-aduser your-user-name -properties *

Open in new window


This will give you all the properties for your AD account, then find the one(s) you want and add it to the command I gave you above. :)
0
 
LVL 1

Author Closing Comment

by:daskas27
ID: 41750459
Thanks again
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question