none
Powershell Feature Request RRS feed

  • Question

  • We just had to look at all the users in AD that are disabled, and Powershell works quickly to pull the list. One attribute that would have been very helpful is a disable timestamp. We were looking for accounts disabled within a certain time period and I didn't see a way to filter on that in the Search-ADUser command.

    Thanks,

    Roy

    Wednesday, July 23, 2014 2:07 PM

Answers

  • We just had to look at all the users in AD that are disabled, and Powershell works quickly to pull the list. One attribute that would have been very helpful is a disable timestamp. We were looking for accounts disabled within a certain time period and I didn't see a way to filter on that in the Search-ADUser command.

    Thanks,

    Roy

    If you really want to place feature requests then here is  place to do just that: https://connect.microsoft.com/https://connect.microsoft.com/PowerShell


    ¯\_(ツ)_/¯


    • Edited by jrv Wednesday, July 23, 2014 2:59 PM
    • Marked as answer by ScriptingWifeModerator Tuesday, September 16, 2014 7:26 PM
    Wednesday, July 23, 2014 2:59 PM

All replies

  • Search the event log for ID 4725 on all DCs to get the disabled time.


    ¯\_(ツ)_/¯

    • Proposed as answer by jrv Wednesday, July 23, 2014 2:22 PM
    Wednesday, July 23, 2014 2:09 PM
  • Hi Roy,

    bad news: According to the AD Schema documentation, this information isn't stored in the AD (at least, I didn't find it in there. If you have better luck, please share :) ).

    Thus, this isn't a Powershell issue (never mind a Scripting one). I recommend checking activedirectory related forums to see whether there is another way to retrieve the information in question.

    I do not know whether the forums in general are a good place to place feature requests for Microsoft Products though ...

    Cheers and good luck,
    Fred


    There's no place like 127.0.0.1

    Wednesday, July 23, 2014 2:17 PM
  • What makes anyone think this isn't supported in AD.  AD supports full and detailed auditing if you want it.  Just search fro AD 2008auditing.

    The requested item has always been tracked in the event log in all versions of AD.  Versions earlier than WS2008 use ID 629I believe.


    ¯\_(ツ)_/¯

    Wednesday, July 23, 2014 2:22 PM
  • What makes anyone think this isn't supported in AD.

    Never said I thought so. Just that it's beyond the scope of the AD Cmdlets. (In case that was aimed at me)

    Thanks for the Event ID numbers though, might come in handy sometime in the future.


    There's no place like 127.0.0.1

    Wednesday, July 23, 2014 2:41 PM
  • We just had to look at all the users in AD that are disabled, and Powershell works quickly to pull the list. One attribute that would have been very helpful is a disable timestamp. We were looking for accounts disabled within a certain time period and I didn't see a way to filter on that in the Search-ADUser command.

    Thanks,

    Roy

    If you really want to place feature requests then here is  place to do just that: https://connect.microsoft.com/https://connect.microsoft.com/PowerShell


    ¯\_(ツ)_/¯


    • Edited by jrv Wednesday, July 23, 2014 2:59 PM
    • Marked as answer by ScriptingWifeModerator Tuesday, September 16, 2014 7:26 PM
    Wednesday, July 23, 2014 2:59 PM
  • The website is now broken and leads to errors after creating a profile.  Is there a new place to submit feature requests for posh?
    Wednesday, July 12, 2017 2:10 PM
  • The website is now broken and leads to errors after creating a profile.  Is there a new place to submit feature requests for posh?

    PowerShell Uservoice - https://blogs.msdn.microsoft.com/powershell/2016/05/09/understanding-the-powershell-uservoice/

    \_(ツ)_/

    Wednesday, July 12, 2017 2:56 PM
  • Thanks!
    Saturday, July 15, 2017 4:44 AM