This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 67%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJH%3C/text%3E%3C/svg%3E)
This script works fine against the entire directory -
Get-ADUser -filter * -properties * | select-object DisplayName, Mail, Created, lastlogonDate | sort Name | export-csv C:\temp\Accounts.csv -NoTypeInformation But, when I filter an OU it does not pull the same information - any ideas?
get-aduser -filter * -searchbase "OU=IBM Users,OU=Users,DC=IBM,DC=com" -Properties * | select-object DisplayName, mail, created, lastlogondate | sort Name | export-csv C:\temp\Accounts.csv -NoTypeInformation
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 74%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Your first example is getting all AD users in a DOMAIN. Your second example is getting all AD users in an organizational unit named "IBM Users" (and any of its child OUs).
If you want to ignore the contents of "IBM User"s child OUs, add -SearchScope Onelevel to the Get-ADUsers cmdlet in the second example.
Thanks Richard. It seems that the script just doesn't pull any data beyond the display name when I specify an OU. Specifying the root domain works fine. I created a test OU on the root that doesn't work as well. It seems these 4 fields are not happy to be pulled together from an OU directly. I'm stumped. All I need are DisplayName, Mail, Created, LastLogonDate - it seems like something is unique about these attributes that fails when pulled from an OU.
I find that hard to believe since you haven't included the displayName property in the Select-Object cmdlet! Are you confusing the "Name" property with the "displayName" property?
Try starting the PowerShell session using "Run as Administrator".
Richard - I've seen your posts for the past 20 years. :) So I am very appreciative to have your help. I cannot believe it was this simple - it works fine when I run as admin. I guess those additional attributes need that added elevation to read. Thanks
26 years, actually. I started answering questions about Exchange server (when version 5.0 was released) for Microsoft back in 1997. :-)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 21%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBV%3C/text%3E%3C/svg%3E)
Hello,
Your second script should work correctly if you've specified the correct search base.
Can you please make sure you've entered the correct DN for the OU, it seems really weird to have twice Users and IBM in there, i think you mean :
"OU=Users,DC=IBM,DC=com".
If that was usefull please mark the answer as accepted for other users to find this topic.
Regards
The OU structure is correct. They have a root OU, and then a sub OU. So,
IBM.COM
Parent OU---IBM Users
Child OU------------Users
Thanks for your reply. It seems no matter what I try this doesn't pull the data beyond user names.
Also, I'm using IBM as an example, this is not for IBM. :)
Also trying this one with no success - Get-ADUser -filter * -properties * | mail -like '*.IBM.com'| select-object Name, Mail, Created, lastlogonDate | sort Name | export-csv C:\temp\Accounts.csv -NoTypeInformation