Home > front end >  Password change notification problem exclude OU powershell
Password change notification problem exclude OU powershell

Time:12-31

We are using a good script that we would like to extend to search for users everywhere except one OU. How can I do this?

Thanks in advance for your help!

PasswordChangeNotification

How to instert this code?

Get-ADOrganizationalUnit -filter * -SearchBase 'OU=test,DC=test,DC=com' | foreach {

    if($_.distinguishedname -ne "OU=not,OU=that,OU=orgUnit,OU=test,DC=test,DC=com"){

        $users=Get-ADUser -filter * -searchbase $_.distinguishedname -ResultPageSize 2000 -resultSetSize 500 -searchscope Onelevel | where-object enabled -eq true 
        $total=($users | measure-object).count
        New-Object psobject -Property @{
            OU=$_.Name;
            A=$Total
        }
    }
}

CodePudding user response:

On line 132 of the file you've linked to, you'll find the statement that actually queries Active Directory for the users:

$users = get-aduser -filter {(Enabled -eq $true) -and (PasswordNeverExpires -eq $false)} -properties Name, PasswordNeverExpires, PasswordExpired, PasswordLastSet, EmailAddress | where { $_.passwordexpired -eq $false }

Add the following statement to the next line:

$users = $users |Where-Object distinguishedname -notlike "*,OU=not,OU=that,OU=orgUnit,OU=test,DC=test,DC=com"

... and leave the rest of the script as-is

  • Related