lastlogontimestamp

1. Use PowerShell query to specify the creation time of all accounts in the OU \sid\ last modified password time \ Last logon time:Get-aduser-searchbase ' ou=ll,dc=ll,dc=com '-filter *-properties * | Select-object Name,sid, created,passwordlastset,@{n= "lastlogondate"; e={[datetime]::fromfiletime($_.lastlogontimestamp)}} | Export-csv zuihoudenglu.csv-notypeinformation-encoding UTF82. Query ad, default password policy (password complexity to note, lock

1. Use PowerShell query to specify the creation time of all accounts in the OU \sid\ last modified password time \ Last logon time:Get-aduser-searchbase ' ou=ll,dc=ll,dc=com '-filter *-properties * | Select-object Name,sid, created,passwordlastset,@{n= "lastlogondate"; e={[datetime]::fromfiletime($_.lastlogontimestamp)}} | Export-csv zuihoudenglu.csv-notypeinformation-encoding UTF82. Query ad, default password policy (password complexity to note, lock

-----provide ad\exchange\lync\sharepoint\crm\sc\o365 and other Microsoft product implementation and outsourcing, qq:185426445. Phone 18666943750Today, I heard a friend in the group asking to inquire about an ad account that has not been logged in for the last 1 months, we can do this via PowerShell:Requirement 1, query creation time of all accounts in OU \sid\ last modified password time \ Last Login timePowerShell query Specifies the creation time for all accounts in the OU \sid\ last modified

. tostring (). trim () {return "";} string strtime = time. tostring (). trim (); If (strtime. indexof (". ")! =-1) {strtime = strtime. substring (0, strtime. indexof (". ");} Long longtime = long. valueof (strtime); gregoriancalendar win32epoch = new gregoriancalendar (1601, calendar. january, 1); win32epoch. settimezone (timezone. gettimezone ("China"); Date win32epochdate = win32epoch. gettime (); long timesincewin32epoch = longtime/10000 + win32epochdate. gettime (); Date lastlogon = new date

-date). AddDays (-30)). date# Get account information not logged in within 90 days $users=get-aduser-filter{(lastlogontimestamp-like ' * ') -and (emailaddress-like ' * ')}-properties*|selectname, Lastlogontimestamp,@{n= "Logon";E={[datetime]::fromfiletime ($_.lastlogontimestamp.tostring ())}}|where-object{$_. logon-lt $when 1} #获取其中30天未登录邮箱的账号信息foreach ($user in $users) {if ($a =get-mailbox $user. name-err

One: Query the creation date of all users in this ad domainGet-aduser-filter *-properties * | Select-object Name,sid, created,passwordlastset,@{n= "Lastlogondate"; E={[datetime]::fromfiletime ($_. lastLogonTimestamp)}} | Export-csv accountlist.csv-notypeinformation-encoding UTF8File Save Address:The effect export file for CSV format requires an Excel table to open the displaySecond, query the user's creation date under the specified OU: This feature c

("Othermobile")For each Item in StrothermobileSTRKEYNUM1 = ItemStrleftstr = Left (strkeynum1,2)If strleftstr = "AI" ThenStrkeynum = Strkeynum1Exit forEnd IfNextItem = NullStrothermobile = NullSTRKEYNUM1 = Null' ==============================Strbus = Member.othertelephoneIntuac = member. Get ("userAccountControl")If Intuac and Ads_uf_accountdisable ThenStraccountstate = "Disable"ElseStraccountstate= "Enable"End IfStrdes = Member.descriptionStrtitle = Member.get ("title")Striphone = Member.ipphon

. (table header is user)$Line = $Contents. Length #获取行数 (People 0 start)for ($i =0; $i-lt $Line; $i + +) {$User = $Contents. user[$i] #表头为UserWrite-output "The User is $User" #打印当前用户#最后登陆时间戳 $Stamp =get-aduser-identity $User. data-properties * | Select-object name,distinguishedname,@{name= "Stamp"; Expression={[system.datetime]::fromfiletime ($_.lastlogontimestamp)}} #获取当前用户最后登陆时间Write-output $Stamp >> c:\result.csv #导出为csv}　　=====================

Homemdb Distinguishedname Countrycode CN Lastlogoff Mailnickname Dscorepropagationdata Msexchhomeservername Msexchmailboxsecuritydescriptor Msexchalobjectversion Usncreated Objectguid Whenchanged Memberof Msexchuseraccountcontrol Accountexpires Displayname Primarygroupid Badpwdcount Objectclass Instancetype Objectcategory Samaccounttype Whencreated Lastlogon Useraccountcontrol Physicaldeliveryofficename Samaccountname Usercertificate Givenname Mail Userparameters Adspath Homemta Msexchmailboxgui

If you want to know the account usage in the AD, such as when to create, the last logon time is the time, the last password change, and other information, these can be achieved by using PowerShell. In PowerShell, Get-AdUser can query a lot of information. For more information, see the following article: Http://social.technet.microsoft.com/wiki/contents/articles/12037.active-directory-get-aduser-default-and-extended-properties.aspx The following describes how to use PowerShell to query the creati

DemandNeeds to clean up the ad expired accounts, the intention is to clean 90 days not logged in the account can be, the result of leadership and worry if some long-term travel outside of the staff, so add a 30 days after the mailbox decision, if this person 90 days not logged in the domain, and 30 days not logged in the mailbox, it should be clearOperationDirectly on the text, with comments inside#加域AD模块Import-module ActiveDirectory#加载Exchange模块Add-pssnapin Microsoft.Exchange.Management.Powersh

Use the PowerShell command to query Active Directory for a long time without logging on to the computer account. This article takes 60 days as an example, you can modify as needed.The following script is given:# this PowerShell Command would query Active Directory and return the computer accounts which has not logged for the past# days. can easily change the number of days from the number of your choosing. Lastlogondate is a Human# Readable conversion of the

achieved. PowerShell in the Get-aduser can query a lot of information can refer to the following article: http://social.technet.microsoft.com/wiki/contents/articles/12037. Active-directory-get-aduser-default-and-extended-properties.aspx The following describes using PowerShell queries to specify the creation time of all accounts in the OU \sid\ last modified password time \ Last logon time, cmdlet as follows:Get-aduser-searchbase ' ou=user,ou=compay1,dc=domain,dc=com '-filter *-properties *

2003 and Windows NT4. There is no domain-wide activation capability within this level. This mode is only used when the NT4 domain control is upgraded to a Windows2003 domain control 4:windows Server 2003 mode. All domain controllers in the domain can be Windows 2003 and Windows2008 only. The features supported include: Netdom.exe the domain controller rename feature provided by the Updates the logon timestamp. The lastLogonTimestamp property is up