New Delhi PowerShell User Group.: Powershell and Active Directory

Tuesday, January 6, 2015

If you like, you can follow me on Twitter and Facebook. You can also check my “You Tube” channel for PowerShell video tutorials. You can download all of my scripts from “Microsoft TechNet Gallery”.

Wednesday, December 17, 2014

PowerShell and Active Directory : Get the list of Active Directory Users created of a Specific Date.

If you are an I.T or System Administrator, then you must doing one thing for sure, getting the list of Active Directory users. Getting list of Active Directory users is very easy with PowerShell.

You just need to have “Active Directory PowerShell Module” and just shoot the Get-Aduser cmdlet. Simple!

A IT guy from Egypt ( Ahmad), email me and ask me if he can get a list of Active Directory user that is created on a specific date? I said Yes, and then I think about to write this PowerShell Script function.

The usage of PowerShell function is very easy. Type the function name and in –Date parameter provide the Date on which you want to see if you have created any Active Directory user.

For example:

If you run the below code. It will give you list of all Active Directory User account those are created with-in 24 Hours of 17^th December 2014.

Get-ADUserCreated -Date 12/17/2014

Video : Video of the script usage and running.

Video of the script usage and running.

Script Download Link : https://gallery.technet.microsoft.com/Get-Active-Directory-Users-e720f7e5

Thanks for your time and reading the blog.

Regards.

Aman Dhally

If you like, you can follow me on Twitter and Facebook. You can also check my “You Tube” channel for PowerShell video tutorials. You can download all of my scripts from “Microsoft TechNet Gallery”.

Monday, December 9, 2013

PowerShell and Active Directory : Active Directory Users Password Expiry Email Reminder Script.

Are you a System Administrator and managing Active Directory too?

If Yes, then i know what is the most annoying problem we do face almost daily, that annoying problem is, when user ignore the notification that his password is going to expire soon, and he forget to reset it, and then he/she call Support and told us tgat,they are not able to login to laptop, their email is not working etc etc.

I face these kind of problem once or twice in a week.

To solve it, i decide to write a PowerShell script, which sent an email to user that his/her password is going to expire in a 7 days.

This script sent an email to user, about that his password is going to expire in 7 days, and he should change it.

Note: make sure you have RSAT tools installed before running this script.

You can download the script from below link.

Download : http://gallery.technet.microsoft.com/PowerShell-Active-7179b91d

Screenshots

Screenshot of an email, which user get.

I am pasting the code , but please download it from technet, because this code may contain some formatting issues .

#==================| Satnaam Waheguru Ji |===============================

# Author : Aman Dhally

# E-Mail : amandhally@gmail.com

# website : www.amandhally.net

# twitter : @AmanDhally

# blog : http://newdelhipowershellusergroup.blogspot.in/

# facebook: http://www.facebook.com/groups/254997707860848/

# Linkedin: http://www.linkedin.com/profile/view?id=23651495

# Creation Date : 09-12-2013

# File :

# Purpose :

# Version : 1

# My Pet Spider : /^(o.o)^\

#========================================================================

##Note ====> Before running this script, make sure you have RSAT tool installed.

#Immport Module Active Directory

Import-Module ActiveDirectory -ErrorAction 'Stop'

# Days after password expire, Change the Day's as per your Default Paaaword Expiration group Policy

[int]$totalDays = 90

# TOday

$todayDate = Get-Date

#Password expiredCollection

$passwordExpiredCollection = @()

# Email Option and Value

$smtp = "Your-ExchnageServer"

$subject = "Chnage your Password Soon"

# filtering user from AD

$adUsers = Get-ADUser -Filter {(ObjectClass -eq "user") -and (EmailAddress -ne "$null") -and (PasswordNeverExpires -eq "False")} -Properties PasswordNeverExpires,PasswordLastSet,PasswordExpired,LockedOut,EmailAddress

foreach ( $aduser in $adUsers)

{

if ($aduser.PasswordLastSet -ne $null) {

[datetime]$lastPasswordSet = $aduser.PasswordLastSet

$timeSpan = New-TimeSpan (Get-date -Date $lastPasswordSet.Date )

$expirationTime = $totalDays - $timeSpan.Days

}

Switch ($expirationTime)

{

7 {

$dateAfter7Days = (Get-Date).AddDays(7).ToShortDateString().ToString()

$passwordExpiring7Days += $aduser.Name + ";" + $aduser.EmailAddress + ";" + $expirationTime + ";" + $dateAfter7Days

}

#switch stop

# If User password is expired.

if ( $aduser.PasswordExpired -eq $true )

{

$passwordExpiredCollection += $aduser.Name + ";" + $aduser.EmailAddress + ";" + $expirationTime + "`n"

}

# Splitting

if ( $passwordExpiring7Days -ne $null ) {

foreach ( $7name in $passwordExpiring7Days ) {

$7userCollection = $7name -split ";"

$7userName = $7userCollection[0]

$7userEmail = $7userCollection[1]

$7pass = $7userCollection[2]

$7day = $7userCollection[3]

Write-Host "Dear $7userName, your emailid is $7userEmail , you password is expiring in $7pass days." -ForegroundColor Green

$body = "Dear $7userName, "

$body += " "

$body += "Your password is due to expire in $7pass days. Please ensure you have changed it before then. "

$body += " "

$body += "Regards "

$body += "I.T. Team "

$body += " "

$body += "How to change your password: "

$body += " 1. Press CTRL+ALT+DELETE, and then click Change a password. "

$body += " 2. Type your old password, type your new password, type your new password again to confirm it, and then press ENTER. "

# if you want to send an email, please un-comment the below line.

#Send-MailMessage -to $7userEmail -From "YourID@YourDomain.com" -SmtpServer $smtp -Body $body -BodyAsHtml -Subject $subject -Priority high -Encoding UTF8

}

# sending list of password expired.

$body = ""

$body += $passwordExpiredCollection

Write-Warning "Users those passwords are already expired ========"

Write-Host $passwordExpiredCollection

# if you want to send an email, please un-comment the below line.

#Send-MailMessage -to "YOURID@YourDomain.com" -SmtpServer $smtp -From "SCTIPTER@YourDomain.com" -Body $body -Subject "Password those are already expired"

Download : http://gallery.technet.microsoft.com/PowerShell-Active-7179b91d

Regards

Aman Dhally