1、查看指定用户信息
Get-ADUser -Identity zhangsan
# 显示
DistinguishedName : CN=zhang san,OU=SHA,DC=msh,DC=local
Enabled : True
GivenName : zhang
Name : zhang san
ObjectClass : user
ObjectGUID : 7aa0a36a-4e9f-48b8-87dd-d41606b0dbe9
SamAccountName : zhangsan
SID : S-1-5-21-1999284519-599392543-677991306-1108
Surname : san
UserPrincipalName : zhangsan@xielong.cn
2、获取指定用户的所有属性
Get-ADUser -Identity zhangsan -Properties *
3、获取指定属性:显示姓名、密码是否过期、SAN 账户名、UPN 账户名、创建时间、修改时间
Get-ADUser -Identity zhangsan -Properties * | FT Name,PasswordExpired,SamAccountName,UserPrincipalName,whenCreated,whenChanged
# 显示
Name PasswordExpired SamAccountName UserPrincipalName whenCreated whenChanged
---- --------------- -------------- ----------------- ----------- -----------
zhang san False zhangsan zhangsan@xielong.cn 2/17/2023 12:22:54 AM 2/19/2023 11:46:40 PM
4、模糊查询 li 开头的用户
Get-ADUser -Filter 'Name -like "li*"' | Format-Table Name,SamAccountName,UserPrincipalName
# 显示
Name SamAccountName UserPrincipalName
---- -------------- -----------------
li shi lishi lishi@xielong.cn
5、获取指定OU下面的所有用户
Get-ADUser -Filter * -SearchBase "OU=SHA,DC=msh,DC=local"
6、导出用户
Get-ADUser -Filter * -SearchBase "OU=SHA,DC=msh,DC=local" | ft name > member.csv
7、获取哪些用户 设置了 "密码永不过期"
Get-ADUser -Filter 'PasswordNeverExpires -eq $true' -Server DC1 | select name