Powershell - I get difference in output returned

Question

Hi all,

I have been struggling with a Powershell script for expired passwords in my domain. I run the following script as a domain admin :

get-aduser -filter * -properties passwordlastset, passwordneverexpires |ft Name, passwordlastset, Passwordneverexpires  

On my own laptop I get a proper resonse with all the users and the information.

When I run the same script on a Domain Controller, I get different (incomplete) information:

Any idea?

Thanks in advance!

Answer 1

Hi,

Welcome to share here!
Did you login with the same user?
Please try to run the PowerShell with administrator and run the script again.
Did you get the same result on all the DCs?

Then check the passwordlastset attribute of the users with blank on DCs.
If possible, please share a screenshot here!

Best Regards,

Answer 2

Hi, thanks for your reply.

I did not login as the same user as I run Powershell as a different user. The result on both DC's is the same. Running the script on a DC as administratror (so run as admin instead of run as different user with domain admin credentials) does work.

As I want to run this script scheduled on a daily basis, I need to run this under a Service Account that we use for these kind of scheduled tasks.

Answer 3

Just give a try using the same command with selecting different DC if you have more than one dc in your environment.

get-aduser -filter * -Server DC01.domain.local -properties passwordlastset, passwordneverexpires |ft Name, passwordlastset, Passwordneverexpires

get-aduser -filter * -Server DC02.domain.local -properties passwordlastset, passwordneverexpires |ft Name, passwordlastset, Passwordneverexpires

Answer 4

Hi,

From my side i will try to:
1, Disable the UAC temporarily
2, When configure the schedule task, select the option:
Run with the highest privileges
Best Regards,