PowerShell Script to find all AD users who have the “cannot change password” box checked in a specific OU

01/08/2018

PowerShell Script to find all AD users who have the “cannot change password” box checked in a specific OU

By Steve in Microsoft, Microsoft Server 2016, Microsoft Windows Server 2012, Powershell Tag Active Directory, CannotChangePassword, DistinguishedName, Get-ADUser, PowerShell

# script to find all AD users who have the “cannot change password” box checked in a specific OU

# Windows Server 2016

# Powershell

Get-ADUser -Filter * -Properties CannotChangePassword -SearchBase “OU=specificOU,DC=TEST,DC=com” | where { $_.CannotChangePassword -eq “true” } | Format-Table Name, DistinguishedName

Steve

Comments are closed.