AD User account information

Hi All,

I need all the information Active Directory can provide on a user account:

So far i have this code:

Get-ADUser -Filter 'Name -like "*kelly*"' | select *

Open in new window

The above code, is that all the information it can provide? is there a better code i can utilise?

thank you in advance.

Kelly GarciaSenior Systems AdministratorAsked:
Who is Participating?
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
The select * is redundant. But Get-ADUser will not retrieve all AD attributes. The following command will only get the extended attributes listed in this table:
Get-ADUser -Filter 'Name -like "*kelly*"' -properties * 

Open in new window

To get additional attributes, you will need to specify their LDAPDisplayname

Here's info on how to enumerate all the possible attributes:

But you may want to just use csvde to export the user:
CSVDE -f export.csv -r "(&(objectClass=user)(samaccountname=username))"

Open in new window

That will get the all non-null attributes.
Sean Plemons Kelly, CISSPSecurity/Information Assurance EngineerCommented:
Hello Kay,

This TechNet article outlines how to use powershell to query AD for user information.

Directly from the article: "...this article provides an introduction to the fine art of writing Active Directory search scripts using Windows PowerShell. Does this article contain everything you’ll ever need to know about writing Active Directory search scripts? Probably not. But it does include enough information to help you get started."

I hope this helps.
Ajit SinghCommented:
Get-ADUser: Getting Active Directory Users Data via Powershell
On-Demand: Securing Your Wi-Fi for Summer Travel

Traveling this summer?Check out our on-demand webinar to learn about the importance of Wi-Fi security and 3 easy measures you can start taking immediately to protect your private data while using public Wi-Fi. Follow us today to learn more!

PberSolutions ArchitectCommented:
Add a properties * to your code:

Get-ADUser -Filter 'Name -like "*kelly*"' -properties * | select *

Open in new window

Kelly GarciaSenior Systems AdministratorAuthor Commented:
is that for any powershell command, to enumerate all information available you have to do properties * ?
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
Unfortunately no. It all depends on the cmdlet.

Glad to help. :)
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.