List all users who can disable / enable user accounts

Question

Hi,
I want a powershell command that list all users who has permission to disable / enable user accounts in Active Directory.

Thanks

Answer 1

You can use this as a template: how_to_get_ad_user_permissions_report.html

The permissions you'd look for are Read userAccountControl and Write userAccountControl