Mastering Active Directory

Finding objects using PowerShell

In the previous section, we learned about the Get-ADUser and Get-ADComputer cmdlets and how they can be used with other commands to filter out objects from Active Directory and perform administrative tasks. They can also be used to retrieve specific attribute values from filtered objects:

Get-ADUser -Identity user1 -Properties *

The preceding command will list down all the attributes and values associated with user1. This helps us find the exact attribute names and common values, which be can used for further filtering.

I need to know the values for Name, UserPrincipalName, and Modified for all the users. The following command will create a table with attributes and their values:

Get-ADUser -Filter * -Properties ...