Share via

How to pull Temporary Response changes on Defender tab for all users using powershell

M Huddleston 1 Reputation point
2022-10-12T15:44:41.85+00:00

I am needing to audit AD to determine if users have changed the temporary response settings on the Defender tab in AD. I am wanting to pull the Expires value as well as if they have checked the "Allow response to be used multiple times" and the Response.

I ran Get-ADUser username -properties * | select * but I am not seeing the values with this command.

How can I pull these attributes?

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | User experience | PowerShell
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.