How to export users from Active Directory
The following is a comparison between the steps required for generating an AD user report with the Get-ADUser cmdlet of Windows PowerShell and ADManager Plus.
Steps for generating Active Directory users report using PowerShell :
- Choose which domain you want to generate the report for.
- Select the LDAP filters that you'll use as parameters for generating the report.
- Within the Properties parameter, specify additional user object properties that should appear in the report.
- Establish the format in which you want to export the report.
- Double-check that you've adhered to the appropriate syntax when writing the script.
- Use Windows PowerShell to compile and execute the script.
- To generate the report in a different format, or to add additional properties to the reports, modify the script accordingly.
Sample Windows PowerShell script:
Click to copy entire script
Get-ADUser -Filter * -SearchBase "OU=Abc, DC=example, DC=com" | Select sAMAccountName, givenName, mail, telephoneNumber | export -csv -Path c:\Scripts\Users.csv
To obtain the report:
- Select All Users in the User Reports section.
- Select the Domain and OU. Generate the report.
- Click Generate.
- Add additional properties of the users in the reports using the Add/Remove columns option. Use the Export As option to export the report in any of the following formats: CSV, PDF, XLSX, HTML, or CSVDE.
» Start 30-day Free Trial
In Active Directory (AD), the Get-ADUser cmdlet performs a domain-wide search of the AD database to retrieve users who match a specific set of conditions. However, using the Get-ADUser cmdlet to generate AD user reports can prove to be a difficult task because:
- Minute syntax errors or typographical errors can lead to execution failures.
- Adding even minor modifications to a script—such as adding additional attributes to the reports—require it to be modified and executed again, which is time-consuming.
- For each format type, a script has to be modified accordingly to export in that format, leading to increased LDAP query complexity in these scripts.
- Troubleshooting these scripts requires extensive AD and scripting expertise.
- These scripts can only be executed on computers that have Active Directory Domain Services role.
Therefore, a better and easier way to generate AD reports is by using ADManager Plus, an Active Directory management and reporting tool.
ADManager Plus is a web-based solution for all your AD, Exchange, Skype for Business, G Suite, and Office 365 management needs. It simplifies several routine tasks such as provisioning users, cleaning up dormant accounts, managing NTFS and share permissions, and more. Besides reporting, you can also build a custom workflow structure that will assist you in ticketing and compliance, automate routine AD tasks such as user provisioning and de-provisioning, and more. Download a free trial today to explore all these features.
Highlights of using ADManager Plus to generate AD reports
ADManager Plus simplifies the process of AD reporting by:
- Providing script-free reporting.
- Offering over 150 pre-packaged AD reports that cover the most important information about all AD objects.
- Allowing you to create your own report using the custom reports feature.
- Letting you automatically generate reports using the report scheduler. You can also choose to email these reports or store them at a specific location.
- Enabling on-the-fly management tasks to be performed from within those reports. For instance, perform actions like delete, disable, move, etc, on inactive users generated from the inactive users reports.