hat’s not a typo. Export only active Active Directory users (not disabled) into a csv file with csvde, the following should suite your needs:
1 | # Collect Internal users for your audit purposes |
2 | csvde -d "OU=Users,OU=Internal,DC=DomainName,DC=Suffix" -r "(&(objectCategory=person)(!UserAccountControl=66050)(!UserAccountControl=514))" -l SAMAccountName,name,description,UserAccountControl,logonHours -f "InternalUsers.csv" |
You can easily put this into task scheduler for automated reporting at whatever interval you like. I’m currently running this manually every 1st of the month but I will definitely be looking into automating and emailing myself, or directly to the person who needs the report. If anyone knows how to get rid of the DN field in the output, please let me know.
