8,330 questions
If you use the -PasswordExpired switch you cannot use the -DateTime parameter. The password has either expired or it hasn't. Perhaps you're reading the -PasswordexpirED as if it were -PasswordExpirING?
Question on Search-ADAccount
Mikhail Firsov
1,881
Reputation points
Hello!
On more question on quering AD in PS, please:
According to Search-ADAccount the -DateTime parameter can be used for both -AccountExpiring and -PasswordExpired, but the -DateTime + -PasswordExpired would always raise the error, both in AD2008R2 and AD2022 - is it a bug in Search-ADAccount or incorrect documentation?
Thank you in advance,
Michael
Windows for business | Windows Server | User experience | PowerShell
Accepted answer
2 additional answers
Sort by: Most helpful
-
Mikhail Firsov 1,881 Reputation points
2022-06-06T12:58:07.373+00:00 "Perhaps you're reading the -PasswordexpirED as if it were -PasswordExpirING?" - the ability to use the -DateTime along with -PasswordexpirED does realy turn "-PasswordexpirED" into "-PasswordExpirING" and I would have never thought about it if I hadn't seen the documentation above.
"The password has either expired or it hasn't. " - agree.
"If you use the -PasswordExpired switch you cannot use the -DateTime parameter." - as you see the article Search-ADAccount says you can.
Am I getting it right that "If you use the -PasswordExpired switch you cannot use the -DateTime parameter. means documentation error?
Regards,
Michael-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 74%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Rich Matheisen 47,901 Reputation points2022-06-06T14:35:44.887+00:00 That's correct. If you look at the help for the cmdlet you'll see that when the -PasswordExpired parameter is used there's no mention of the -DateTime parameter.
The cmdlet has several parameter sets, as do many other cmdlets. The error you received says that the Parameter SET could not be resolved.
Search-ADAccount [-AuthType <ADAuthType>] [-ComputersOnly] [-Credential <PSCredential>] [-PasswordExpired] [-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-SearchBase <String>] [-SearchScope <ADSearchScope>] [-Server <String>] [-UsersOnly] [<CommonParameters>]
Sign in to comment -
-
Mikhail Firsov 1,881 Reputation points
2022-06-07T10:28:35.757+00:00 The set you mentioned is correct, but I referenced this:
"-DateTime
Specifies a distinct time value for Search-ADAccount parameters such as AccountExpiring, AccountInactive, and PasswordExpired."- and this obviously is not correct :(
Thank you for the help!
Regards,
Michael-
Rich Matheisen 47,901 Reputation points
2022-06-07T14:27:27.503+00:00 That's not the first documentation error I've seen. You can usually report them yourself by using the "Feedback" link at the bottom of the web page. I've reported the problem here: 2992
-
Mikhail Firsov 1,881 Reputation points
2022-06-08T12:02:29.123+00:00 RichMatheisen-8856, thank you very much for your help!
Regards,
Michael
Sign in to comment