One feature that PowerShell will likely be missing when it first ships is solid support for ADSI and working with Active Directory. You can use .NET DirectoryEntry objects but it feels more like programming and less like scripting. Another option for working with Active Directory in PowerShell is to use WMI. PowerShell does have a great Get-Wmiobject cmdlet. We can use it connect to the LDAP WMI namespace on a domain controller and get information.<\/p>\n
This script will prompt you, using the Read-Host cmdlet, for user credentials, domain controller and the sAMAccountname of a user object in Active Directory. With this information we use Get-Wmiobject and connect to the root\\directory\\ldap namespace. The output is filtered using Where to only return the user we're seeking. The script will then display all all the WMI properties and their values for this object. This is a handy way of learning the attribute names so you can create more refined scripts. The script will prompt you for a filename. If you specify one, then the output will also be saved to the file as well as displayed on the screen.<\/p>\n
#GetUserProperties.ps1<\/span><\/p>\n $user=read-host \"What user credentials do you want to use for\" `<\/span> $rc=read-host \"Do you also want to save output to a text file? Enter Y to save\"<\/span> Technorati Tags: One feature that PowerShell will likely be missing when it first ships is solid support for ADSI and working with Active Directory. You can use .NET DirectoryEntry objects but it feels more like programming and less like scripting. Another option for working with Active Directory in PowerShell is to use WMI. PowerShell does have a…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[4],"tags":[539],"class_list":["post-37","post","type-post","status-publish","format-standard","hentry","category-powershell","tag-active-directory"],"yoast_head":"\n
\"authentication to the \"`n\"domain controller? Use format domain\\username\" <\/span>
$cred=get-credential $user<\/span>
$server=read-host \"What domain controller do you want to connect to?\"<\/span>
$account=Read-Host \"What is the sAMAccountname you want to find?\"<\/span><\/p>\n
if ($rc -eq \"Y\") {<\/span>
$file=read-host \"Enter the filename and path\"<\/span>
write-host \"Connecting to\" $server \"as\" $user<\/span>
get-wmiobject -class ds_user -namespace root\\directory\\ldap `<\/span>
-computername $server -credential $cred `<\/span>
|where {$_.DS_sAMAccountName -eq $account} | tee-object -file $file<\/span>
}<\/span>
else {<\/span>
write-host \"Connecting to\" $server \"as\" $user<\/span>
get-wmiobject -class ds_user -namespace root\\directory\\ldap `<\/span>
-computername $server -credential $cred `<\/span>
|where {$_.DS_sAMAccountName -eq $account}<\/span>
}<\/span><\/p>\n
PowerShell<\/a>
Scripting<\/a>
WMI<\/a>
Active Directory<\/a>
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"