Shulou(Shulou.com)06/03 Report--

Working with scen

Based on IT compliance or daily AD administrative maintenance requirements, verify domain user accounts that are set to never expire passwords through the Powershell command.

Operation steps

Change DC hostname to the hostname of the DC that runs the command for your domain.

Check the entire AD

Get-ADUser-Filter 'PasswordNeverExpires-eq $true'-Server DCHostname | select name)

Check the specified OU. Take OU iTop as an example:

Get-ADUser-searchbase 'OU=iTop,DC=Pushits,DC=COM'-Filter 'PasswordNeverExpires-eq $true'-Server DC01 | select name

Audit the specified OU and then export

Get-ADUser-searchbase 'OU=iTop,DC=Pushits,DC=COM'-Filter 'PasswordNeverExpires-eq $true'-Server DC01 | select name | Export-Csv c:\ PasswordNeverExpiresList.csv-NoTypeInformation-Encoding UTF8

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.