PoshCode Archive  Artifact [949d0fb3e8]

Artifact 949d0fb3e8afe322acd71c15f60b6a51072065701dee4ef9e61b0f03d735e2ac:

• File Get-ADNonExpPass.ps1 — part of check-in [d8368ed808] at 2018-06-10 12:56:22 on branch trunk — This script will retrieve all user accounts whose passwords are set to not expire for a given LDAP path. Defaults to root of the domain. (user: unknown size: 1194)

# encoding: ascii
# api: powershell
# title: Get-ADNonExpPass
# description: This script will retrieve all user accounts whose passwords are set to not expire for a given LDAP path. Defaults to root of the domain.
# version: 0.1
# license: CC0
# x-poshcode-id: 1067
# x-archived: 2009-05-03T11:15:02
#
#

param ($LDAPPath = "", [switch]$Help)

if ($Help)
{
	""
	Write-Host "Usage: .\Get-ADNonExpPass.ps1 <LDAPPath>" -foregroundcolor Yellow
	Write-Host "Ex: .\Get-ADNonExpPass.ps1 'LDAP://ou=users,dc=domain,dc=com'" -foregroundcolor Yellow
	""
	break
}

#UAC Flag in Hex
#http://support.microsoft.com/kb/305144
$DontExpire = 0x10000

$Root = [ADSI]$LDAPPath

$Category = "user"

$Selector = New-Object DirectoryServices.DirectorySearcher
$Selector.SearchRoot = $Root 
$Selector.Filter = ("(objectCategory=$Category)")
#$Selector.pagesize = 2000

# Grab all the user objects for the OU
$Users = $Selector.findall()

foreach ($User in $Users) {

	$DN = $User.properties.distinguishedname
	$UserProp = [ADSI]"LDAP://$dn"
	
	if (($UserProp.UserAccountControl[0] -band $DontExpire) -eq 65536)
		{
		$UserProp | Select Name, UserAccountControl
		}

}