Support
 
Phone Live Chat
 
Support
 
US: +1 888 720 9500
US: +1 800 443 6694
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9393

 
 
 
 
 
PowerShell

PowerShell for AD user reports

Real-time insights on user account status and activity can help Active Directory (AD) administrators manage accounts better. Many administrators use Microsoft's PowerShell technology to run basic queries and pull detailed information. Below are some key PowerShell scripts and commands for generating AD user reports. Further below, you'll find a tool that makes reporting on AD users even easier by helping you generate those AD reports in a cinch with an intuitive, unified web-console.

All users reports

Get-ADUser -Filter * -Properties * | Export-csv -path "c:\testexport.csv

Disabled users report

Get-ADUser -Filter 'enabled -eq $False'| fl name,samaccountname,surname,userprincipalname

O365 All users report

Import-module msonline
# Supply the Office365 domain credentials
$username = "testuser@test.onmicrosoft.com"
$password = ConvertTo-SecureString -String "test@123" -AsPlainText -Force
$cred = New-object -typename
System.Management.Automation.PSCredential-argumentlist $username, $password
Connect-MsolService -credential $cred
Get-msoluser

O365 licensed users report

Get-ADUser -Filter * -Properties * | Export-csv -path "c:\testexport.csv

OU specific reports

Get-ADOrganizationalUnit -Filter * | fl name,DistinguishedName

Account status reports

Get-ADUser -Filter * | fl name,enabled

PowerShell searching

Get-ADUser -Filter 'SearchQuery', For example "Get-ADUser -Filter 'enabled -eq $

The ADManager Plus way

In organizations, it's a rarity that we come across such simple straightforward scenarios like the ones listed above. Real-life use cases involve a multitude of things. Often, administrators need to program extensively in PowerShell, research syntax, and iterate multiple times for correctness; all these tasks can turn into a nightmare for administrators. PowerShell sure is empowering, but at what cost? Often, the cost of extensive scripting is prolonged work hours.

The biggest limitation to PowerShell reports is that they aren't actionable. AD admins need to get work done from a single window without having to toggle between multiple consoles.

Here's how you can save yourself from the burden and monotony of creating, testing and executing unending lines of PowerShell scripts to generate reports on AD user accounts.

User reports from ADManager Plus give complete insight into the Windows Active Directory domain. ADManager Plus makes generating reports a breeze, even for organizations with multiple Organizational Units (OU) and numerous users.

ADManager Plus offers a comprehensive list of pre-built Active Directory user reports, for efficient, trouble-free management and reporting on user accounts. Other key advantages include:

  • Fully web-based, intuitive UI that lets you customize required reporting fields
  • Option to schedule reports and automate report generation
  • OU specific report generation
  • Export reports in various formats: CSV, Excel, PDF, HTML, and CSVDE
  • Compliance-based reports (SOX, HIPAA, etc)

User reports are important to get vital information, including which users have remote user logon permissions or are enabled by mailbox or OMA/OWA. ADManager Plus features over 25 schedulable reports on user objects, categorized into General User Reports, User Account Status Reports, User Logon Reports, and Nested Users Reports.

User Logon Reports maintain a history of user login Information. AD admins can generate reports on inactive users (users who have not logged on for a certain period), users who have logged on recently, users who have never logged on, and enabled users. The logon hour based report shows which users have logged on in a specified time frame.

Admins can decipher fine-grained group membership information from the Nested Users Report. These reports display detailed information about users in a particular group and the multiple groups a user belongs to.

Actionable User Reports

Say you are planning to delete inactive accounts from a specific department. If you are planning to get this done using native Active Directory tools and PowerShell, this could take you a day or more. After multiple iterations, you might be able to finally script what you need.

On the other hand, ADManager Plus gives you the liberty of carrying out the same task with just a few clicks. Run the Inactive users report, specify the desired OU using the smart filter, and delete inactive users all from the same screen.

Thus ADManager Plus rightly fills the void left behind by PowerShell.

ADManager Plus can help you meet your compliance audit requirements. Generate a whole set of must-have reports and use them as a key resource when facing compliance audits. You can find a list of active directory reports that are relevant to SOX compliance in the SOX Compliance section.

Featured links

ADManager Plus Trusted By

The one-stop solution to Active Directory Management and Reporting