Exclude disabled users

Question

I'm using the following but need to excluded disabled users please:

Get-ADGroupMember -server 'domain.com' -identity MyTestGrp | Select SamAccountName,name | Export-csv -path C:\temp\MyTestGrp.csv -NoTypeInformatio

Answer 1

Hi @Crod ,

here is the previous example with the export to CSV:

 $Users = Get-ADGroupMember -Identity MyTestGrp| ? {$_.objectclass -eq "user"}  
 $AllUsers = foreach ($ActiveUser in $Users)   
 { Get-ADUser -Identity $Activeuser | ? {$_.enabled -eq $true} | select Name, SamAccountName, UserPrincipalName, Enabled }   
 $AllUsers | Export-Csv -Path C:\Temp\USers.csv -NoTypeInformation -Encoding UTF8  

----------

(If the reply was helpful please don't forget to upvote or accept as answer, thank you)
Regards,
Stoyan

Answer 2

Maybe this is helpful:

$users = Get-ADGroupMember -Server 'domain.com' -Identity MyTestGrp| where {$_.objectclass -eq "user"}

foreach ($activeUser in $users) { Get-ADUser -Identity $activeUser | where {$_.enabled -eq $true} | select SamAccountName, name}

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 3

Hi @Crod ,

you are getting groups, so you will have to go through all group membersand filter users by the "disabled" flag. So it should look more like this:

$Users = Get-ADGroupMember -Identity MyTestGrp | ? {$_.objectclass -eq "user"}  
foreach ($ActiveUser in $Users) { Get-ADUser -Identity $Activeuser | ? {$_.enabled -eq $true} | select Name, SamAccountName, UserPrincipalName, Enabled }  

Haven't tested it, but should do the job. Will update the thread as soon as I have tested it :)

----------

(If the reply was helpful please don't forget to upvote or accept as answer, thank you)
Regards,
Stoyan

Answer 4

Here's another take on a way to accomplish this. This is untested:

Get-ADGroupMember -Server 'domain.com' -Identity MyTestGrp |
    ForEach-Object{
        Get-ADObject -Filter {distinguishedName -eq $_.distinguishedName -and objectClass -eq 'user' -and Enabled -eq $true} |
            Select-Object SamAccountName, Name
    }

Answer 5

How can I export it?