Tag Archive: ADSI

Aug 11

Gathering AD Data with the Active Directory PowerShell Module

Categories:

Microsoft provided several Active Directory PowerShell cmdlets with Windows Server 2008 R2 (and newer) which greatly simplify tasks which previously required putting together lengthy lines of code involving ADSI. On a Windows client, install the Remote Sever Administration Tools (RSAT) and ensure the Active Directory PowerShell module is installed. On a Windows server (2008 R2 …

Tags: Active Directory PowerShell Module, Active Directory Trusts, AD cmdlets, AD PowerShell cmdlets, Add-WindowsFeature RSAT-AD-PowerShell, ADSI, Backup domain GPOs, Enumerate Domain Trusts, Find AD Kerberos Service Accounts, Finding Active Directory Flexible Master Single Operation (FSMO) Roles, Get AD site information., Get-ADComputer, Get-ADDomain, Get-ADDomainController, Get-ADForest, Get-ADGroup, Get-ADGroupMember, Get-ADReplicationPartnerFailure, Get-ADReplicationPartnerMetadata, Get-ADReplicationUptodatenessVectorTable, Get-ADUser, Get-Command -module ActiveDirectory, Get-Module -ListAvailable, Get-RootDSE, Import-Module ServerManager, Inventory Domain Controllers, PowerShell, PowerShell Find inactive computers, PowerShell Find inactive users

3 comments

Nov 16

PowerShell: Find All Users in Active Directory the Optimal Way

Categories:

PowerShell, Technical Reference

by Sean Metcalf

Today I Learned (TIL) that the best way to find all users in Active Directory via LDAP query is to search for: (samAccountType=805306368) and NOT: (&(objectClass=user)(objectCategory=person)) Reference: http://www.selfadsi.org/extended-ad/search-user-accounts.htm

Tags: ADSI, FindAllADUsers, PowerShell

Nov 03

PowerShell Code: ADSI Convert Domain Distinguished Name to Fully Qualified Domain Name

Categories:

PowerShell

by Sean Metcalf

Convert Domain Distinguished Name to Fully Qualified Domain Name: $ADObjectDN = “CN=Object1,OU=OrgUnit1,DC=child,DC=domain,DC=com” [array]$ADObjectDNArray = $ADObjectDN -Split(“,DC=”) [int]$DomainNameFECount = 0 ForEach ($ADObjectDNArrayItem in $ADObjectDNArray) { IF ($DomainNameFECount -gt 0) …

Tags: ADSI, DomainDistinguishedName, DomainFQDN, PowerShellCode, PowerShellConvert

Copyright

Content Disclaimer: This blog and its contents are provided "AS IS" with no warranties, and they confer no rights. Script samples are provided for informational purposes only and no guarantee is provided as to functionality or suitability. The views shared on this blog reflect those of the authors and do not represent the views of any companies mentioned. Content Ownership: All content posted here is intellectual work and under the current law, the poster owns the copyright of the article. Terms of Use Copyright © 2011 - 2017.

Active Directory Security

Active Directory & Enterprise Security, Methods to Secure Active Directory, Attack Methods & Effective Defenses, PowerShell, Tech Notes, & Geek Trivia…

Tag Archive: ADSI

Gathering AD Data with the Active Directory PowerShell Module

PowerShell: Find All Users in Active Directory the Optimal Way

PowerShell Code: ADSI Convert Domain Distinguished Name to Fully Qualified Domain Name

Recent Posts

Trimarc Active Directory Security Services

Popular Posts

Categories

Copyright

Copyright