Get-ADUser and GeneralizedTime (2.5.5.11)

Helmut-72 66

Hi,

I have an attribute in AD defined as GeneralizedTime (2.5.5.11, https://ldapwiki.com/wiki/GeneralizedTime):

20301231000000.0Z

When I query that attribute with Get-ADUser I get:

31.12.0030 01:00:00

Century is missing. But even worse, if this date is in 2000 then Get-ADUser fails:

Get-ADUser : Year, Month, and Day parameters describe an un-representable DateTime.  
At line:1 char:1  
+ Get-ADUser someUser -Properties someDate  
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
    + CategoryInfo          : InvalidArgument: (someUser:ADUser) [Get-ADUser], ArgumentOutOfRangeException  
    + FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.ArgumentOutOfRangeException,Microsoft.ActiveDirectory.Management.Commands.GetADUser

startDate is "20000101000000.0Z"

Is there something wrong with the attribute or with Get-ADUser?

Thank you!

Accepted answer

Gary Reynolds 9,621

To summarize the difference between Generalized-Time and UTC-String attributes and value format required to set the attribute.

The ABNF for generalized time is - https://ldapwiki.com/wiki/GeneralizedTime

  GeneralizedTime = century year month day hour  
                       [ minute [ second / leap-second ] ]  
                       [ fraction ]  
                       g-time-zone  
  
  century = 2(%x30-39) ; "00" to "99"  
  year    = 2(%x30-39) ; "00" to "99"  
  month   =   ( %x30 %x31-39 ) ; "01" (January) to "09"  
            / ( %x31 %x30-32 ) ; "10" to "12"  
  day     =   ( %x30 %x31-39 )    ; "01" to "09"  
            / ( %x31-32 %x30-39 ) ; "10" to "29"  
            / ( %x33 %x30-31 )    ; "30" to "31"  
  hour    = ( %x30-31 %x30-39 ) / ( %x32 %x30-33 ) ; "00" to "23"  
  minute  = %x30-35 %x30-39                        ; "00" to "59"  
  
  second      = ( %x30-35 %x30-39 ) ; "00" to "59"  
  leap-second = ( %x36 %x30 )       ; "60"  
  
  fraction        = ( DOT / COMMA ) 1*(%x30-39)  
  g-time-zone     = %x5A  ; "Z"  
                    / g-differential  
  g-differential  = ( MINUS / PLUS ) hour [ minute ]  
  MINUS           = %x2D  ; minus sign ("-")

While UTCTime has the following ABNF - https://ldapwiki.com/wiki/UTCTime

UTCTime = year month day hour minute [ second ]  [ u-time-zone ]  
      u-time-zone     = %x5A  ; "Z"  
                        / u-differential  
      u-differential  = ( MINUS / PLUS ) hour minute

When setting the value of a Generalized-Time attribute in AD the format must be yyyyMMddhhmmss.fZ

When setting the value of an UTC-String attribute in AD the format must be yyMMddhhmmZ. If you specify century, or a fraction in the string the update will fail. It will also fail if you include the optional [second] of the UTC-String.

As you have found, if you set an UTC-String with a year of 2000 or 00 (000711000000Z) this will update the attribute with the correct value.

This is the update sent to the server:

  <s:Body>  
    <da:ModifyRequest Dialect="http://schemas.microsoft.com/2008/1/ActiveDirectory/Dialect/XPath-Level-1">  
      <da:Change Operation="replace">  
        <da:AttributeType>addata:meetingstarttime</da:AttributeType>  
        <da:AttributeValue>  
          <ad:value xsi:type="xsd:string">000711000000Z</ad:value>  
        </da:AttributeValue>  
      </da:Change>  
      <ad:controls>  
        <ad:control type="1.2.840.113556.1.4.1413" criticality="true">  
        </ad:control>  
        <ad:control type="1.2.840.113556.1.4.801" criticality="true">  
          <ad:controlValue xsi:type="xsd:base64Binary">MIQAAAADAgEE</ad:controlValue>  
        </ad:control>  
      </ad:controls>  
    </da:ModifyRequest>  
  </s:Body>

And this is returned by the ADWS to the client (trimmed down):

  <s:Body>  
    <da:BaseObjectSearchResponse>  
      <da:PartialAttribute>  
        <addata:meetingStartTime LdapSyntax="UTCTimeString">  
          <ad:value xsi:type="xsd:string">000711000000Z</ad:value>  
        </addata:meetingStartTime>  
      </da:PartialAttribute>  
      <da:PartialAttribute>  
        <addata:whenCreated LdapSyntax="GeneralizedTimeString">  
          <ad:value xsi:type="xsd:string">20220710153856.0Z</ad:value>  
        </addata:whenCreated>  
      </da:PartialAttribute>  
    </da:BaseObjectSearchResponse>  
  </s:Body>

and year of 00 causes AD-GetObject to return an un-representable DateTime Error:

I'm not sure if there is anything that you can do to workaround the issue, Gary or Rich any ideas?

Gary.

11 additional answers

Gary Reynolds 9,621

Second attempt to capture the correct error!

PS C:\Users\administrator.W2K12> get-adobject -identity "CN=testmeeting,CN=Computers,DC=w2k12,DC=local" -properties meetingstarttime  
get-adobject : Year, Month, and Day parameters describe an un-representable DateTime.  
At line:1 char:1  
+ get-adobject -identity "CN=testmeeting,CN=Computers,DC=w2k12,DC=local ...  
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
    + CategoryInfo          : InvalidArgument: (CN=testmeeting,...=w2k12,DC=local:ADObject) [Get-ADObject], ArgumentOutOfRangeException  
    + FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.ArgumentOutOfRangeException,Microsoft.ActiveDirectory.Management.Commands.GetADObject  
  
PS C:\Users\administrator.W2K12> $Error.Exception.StackTrace  
   at System.DateTime.DateToTicks(Int32 year, Int32 month, Int32 day)  
   at System.DateTime..ctor(Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, DateTimeKind kind)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ParseDateTimeValue(String value, ADAttributeSyntax syntax)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ConvertFromRaw(String propertyName, ADPropertyValueCollection propertyValues)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.CreateRichADObject(ADObject resultEntry)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.PagedSearch(Object& pageCookie, Boolean& hasSizeLimitExceeded, Int32 pageSize, Int32 sizeLimit)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearchResultEnumerator.System.Collections.IEnumerator.MoveNext()  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.FindOne(Boolean& foundMoreThanOneResult)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactoryUtil.GetObjectFromIdentitySearcher(ADObjectSearcher searcher, ADEntity identityObj, String searchRoot, AttributeSetRequest attrs, CmdletSessionInfo cmdletSessionInfo, String[]& warningMessages)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted, Boolean showLinkTtl)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted)  
   at Microsoft.ActiveDirectory.Management.Commands.ADGetCmdletBase`3.ADGetCmdletBaseProcessCSRoutine()  
   at Microsoft.ActiveDirectory.Management.CmdletSubroutinePipeline.Invoke()  
   at Microsoft.ActiveDirectory.Management.Commands.ADCmdletBase`1.ProcessRecord()  
   at System.Management.Automation.CmdletParameterBinderController.VerifyArgumentsProcessed(ParameterBindingException originalBindingException)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParametersNoValidation(Collection`1 arguments)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParameters(Collection`1 arguments)  
   at System.Management.Automation.CommandProcessor.BindCommandLineParameters()  
   at System.Management.Automation.CommandProcessor.Prepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.CommandProcessorBase.DoPrepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.Internal.PipelineProcessor.Start(Boolean incomingStream)  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
--- End of stack trace from previous location where exception was thrown ---  
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CommandDiscovery.LookupCommandInfo(String commandName, CommandTypes commandTypes, SearchResolutionOptions searchResolutionOptions, CommandOrigin commandOrigin, ExecutionContext context)  
   at System.Management.Automation.CommandDiscovery.LookupCommandProcessor(String commandName, CommandOrigin commandOrigin, Nullable`1 useLocalScope)  
   at System.Management.Automation.ExecutionContext.CreateCommand(String command, Boolean dotSource)  
   at System.Management.Automation.PipelineOps.AddCommand(PipelineProcessor pipe, CommandParameterInternal[] commandElements, CommandBaseAst commandBaseAst, CommandRedirection[] redirections, ExecutionContext context)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CmdletParameterBinderController.VerifyArgumentsProcessed(ParameterBindingException originalBindingException)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParametersNoValidation(Collection`1 arguments)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParameters(Collection`1 arguments)  
   at System.Management.Automation.CommandProcessor.BindCommandLineParameters()  
   at System.Management.Automation.CommandProcessor.Prepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.CommandProcessorBase.DoPrepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.Internal.PipelineProcessor.Start(Boolean incomingStream)  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
--- End of stack trace from previous location where exception was thrown ---  
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CmdletParameterBinderController.VerifyArgumentsProcessed(ParameterBindingException originalBindingException)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParametersNoValidation(Collection`1 arguments)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParameters(Collection`1 arguments)  
   at System.Management.Automation.CommandProcessor.BindCommandLineParameters()  
   at System.Management.Automation.CommandProcessor.Prepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.CommandProcessorBase.DoPrepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.Internal.PipelineProcessor.Start(Boolean incomingStream)  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
--- End of stack trace from previous location where exception was thrown ---  
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.Management.Automation.CmdletParameterBinderController.VerifyArgumentsProcessed(ParameterBindingException originalBindingException)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParametersNoValidation(Collection`1 arguments)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParameters(Collection`1 arguments)  
   at System.Management.Automation.CommandProcessor.BindCommandLineParameters()  
   at System.Management.Automation.CommandProcessor.Prepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.CommandProcessorBase.DoPrepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.Internal.PipelineProcessor.Start(Boolean incomingStream)  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
--- End of stack trace from previous location where exception was thrown ---  
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)  
   at System.DateTime.DateToTicks(Int32 year, Int32 month, Int32 day)  
   at System.DateTime..ctor(Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, DateTimeKind kind)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ParseDateTimeValue(String value, ADAttributeSyntax syntax)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ConvertFromRaw(String propertyName, ADPropertyValueCollection propertyValues)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.CreateRichADObject(ADObject resultEntry)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.PagedSearch(Object& pageCookie, Boolean& hasSizeLimitExceeded, Int32 pageSize, Int32 sizeLimit)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearchResultEnumerator.System.Collections.IEnumerator.MoveNext()  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.FindOne(Boolean& foundMoreThanOneResult)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactoryUtil.GetObjectFromIdentitySearcher(ADObjectSearcher searcher, ADEntity identityObj, String searchRoot, AttributeSetRequest attrs, CmdletSessionInfo cmdletSessionInfo, String[]& warningMessages)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted, Boolean showLinkTtl)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted)  
   at Microsoft.ActiveDirectory.Management.Commands.ADGetCmdletBase`3.ADGetCmdletBaseProcessCSRoutine()  
   at Microsoft.ActiveDirectory.Management.CmdletSubroutinePipeline.Invoke()  
   at Microsoft.ActiveDirectory.Management.Commands.ADCmdletBase`1.ProcessRecord()  
   at System.Management.Automation.CmdletParameterBinderController.VerifyArgumentsProcessed(ParameterBindingException originalBindingException)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParametersNoValidation(Collection`1 arguments)  
   at System.Management.Automation.CmdletParameterBinderController.BindCommandLineParameters(Collection`1 arguments)  
   at System.Management.Automation.CommandProcessor.BindCommandLineParameters()  
   at System.Management.Automation.CommandProcessor.Prepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.CommandProcessorBase.DoPrepare(IDictionary psDefaultParameterValues)  
   at System.Management.Automation.Internal.PipelineProcessor.Start(Boolean incomingStream)  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
--- End of stack trace from previous location where exception was thrown ---  
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()  
   at System.Management.Automation.Internal.PipelineProcessor.SynchronousExecuteEnumerate(Object input)  
   at System.Management.Automation.PipelineOps.InvokePipeline(Object input, Boolean ignoreInput, CommandParameterInternal[][] pipeElements, CommandBaseAst[] pipeElementAsts, CommandRedirection[][] commandRedirections, FunctionContext funcContext)  
   at System.Management.Automation.Interpreter.ActionCallInstruction`6.Run(InterpretedFrame frame)  
   at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)

Gary Nebbett 6,216 Reputation points

2022-07-11T08:44:55.12+00:00

Hello Gary,

Wow - that is a deep stack! It was worth it though: I think that I have the explanation; I should/could have seen/noticed it yesterday :-(

The routine Microsoft.ActiveDirectory.Management.ADTypeConverter.ParseDateTimeValue is correctly "parsing" the UTCTime string (identifying year, month, etc.) but it is not performing the "sliding window" inference of the century - it is just passing the "year" to the DateTime(int year, int month, int day, int hour, int minute, int second, DateTimeKind kind) constructor "as is" and that constructor throws an exception for years outside the range 1 to 9999.

Without a modification to the ActiveDirectory module, I don't think that it can be used with objects that have a UTCTime value starting with "00" and can only be used with "support" routines to handle date conversions for other UTCTime values.

If possible, it would probably be better to use other PowerShell cmdlets that use LDAP directly to work with objects containing such attributes.

Gary

Helmut-72 66

Something like this?

PS C:\Windows\system32> $user = (New-Object DirectoryServices.DirectorySearcher "SamAccountName=<IDENTITY>").FindAll()  
PS C:\Windows\system32> $user.Properties['startDate']  
  
Samstag, 1. Januar 2000 01:00:00  
  
PS C:\Windows\system32> $user.Properties['endDate']  
  
Dienstag, 31. Dezember 2030 00:00:00  
  
PS C:\Windows\system32>

Or are there better / more performant / ... ways to do so?

Gary Nebbett 6,216 Reputation points

2022-07-11T10:07:51.163+00:00

Hello Helmut,

It is difficult to know "all" of the ways of doing something. I thought that there were more PowerShell modules that "bundled" Active Directory and LADP functionality, but a quick web search did not return what I was looking for.

Using the .NET System.DirectoryServices or System.DirectoryServices.Protocols namespaces/classes is one option (that you have found already).

I don't think that performance (or any other type of being "better") is important here (the .NET classes are "performant") - I would think that "fitting in" with your existing practices would be more important.

You can avoid Get-ADUser et al returning "bad" (year 0) UTCTime attributes "accidently" by always specifying what properties you actually want/need and you can work with other UTCTime attributes by performing the "sliding window" adjustments to the date yourself. Unless the year "2000" is still common/important to/for you, then that is probably what I would do.

Gary

Helmut-72 66

Yes, that's what I'm doing now.

$ldapAttributes = @(badBoys)  
  
foreach ($searchBase in $searchBases) {  
	$users += Get-ADUser -Filter * -SearchBase $searchBase -Properties $attributes | Sort | Select-Object $attributes  
}  
  
foreach ($user in $users) {  
    $userSamAccountName = $user.SamAccountName  
    [array]$ldapAttributeValues = (New-Object DirectoryServices.DirectorySearcher "SamAccountName=$userSamAccountName").FindAll().Properties[$ldapAttributes]  
    $users[$count] | Add-Member -MemberType NoteProperty -Name $($ldapAttributes[0]) -Value $($ldapAttributeValues[0])  
    $users[$count] | Add-Member -MemberType NoteProperty -Name $($ldapAttributes[1]) -Value $($ldapAttributeValues[1])  
	$count++  
}

Thank you so much for your support, everyone who helped to sort this one out!!

Helmut-72 66

PS C:\Windows\system32> Get-ADUser <IDENTITY> -Properties startDate  
Get-ADUser : Year, Month, and Day parameters describe an un-representable DateTime.  
At line:1 char:1  
+ Get-ADUser <IDENTITY> -Properties startDate  
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
    + CategoryInfo          : InvalidArgument: (<IDENTITY>:ADUser) [Get-ADUser], ArgumentOutOfRangeException  
    + FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.ArgumentOutOfRangeException,Microsoft.ActiveDirectory.Manag  
   ement.Commands.GetADUser  
PS C:\Windows\system32>  

PS C:\Windows\system32> $Error.Exception.StackTrace  
   at System.DateTime.DateToTicks(Int32 year, Int32 month, Int32 day)  
   at System.DateTime..ctor(Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, DateTimeKind kind)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ParseDateTimeValue(String value, ADAttributeSyntax syntax)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ConvertFromRaw(String propertyName, ADPropertyValueCollection propertyValues)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.CreateRichADObject(ADObject resultEntry)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.PagedSearch(Object& pageCookie, Boolean& hasSizeLimitExceeded, Int32 pageSize, Int32 sizeLimit)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearchResultEnumerator.System.Collections.IEnumerator.MoveNext()  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.FindOne(Boolean& foundMoreThanOneResult)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactoryUtil.GetObjectFromIdentitySearcher(ADObjectSearcher searcher, ADEntity identityObj, String searchRoot, AttributeSetRequest attrs, CmdletSessionInfo cmdletSessionInfo, String[]& warningMessages)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted, Boolean showLinkTtl)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted)  
   at Microsoft.ActiveDirectory.Management.Commands.ADGetCmdletBase`3.ADGetCmdletBaseProcessCSRoutine()  
   at Microsoft.ActiveDirectory.Management.CmdletSubroutinePipeline.Invoke()  
   at Microsoft.ActiveDirectory.Management.Commands.ADCmdletBase`1.ProcessRecord()  
PS C:\Windows\system32>  

PS C:\Windows\system32> Set-ADUser <IDENTITY> -Replace @{startDate="000711000000Z"}  
PS C:\Windows\system32> Get-ADUser <IDENTITY> -Properties startDate  
Get-ADUser : Year, Month, and Day parameters describe an un-representable DateTime.  
At line:1 char:1  
+ Get-ADUser <IDENTITY> -Properties startDate  
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
    + CategoryInfo          : InvalidArgument: (<IDENTITY>:ADUser) [Get-ADUser], ArgumentOutOfRangeException  
    + FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.ArgumentOutOfRangeException,Microsoft.ActiveDirectory.Manag  
   ement.Commands.GetADUser  
PS C:\Windows\system32>  

PS C:\Windows\system32> $Error.Exception.StackTrace  
   at System.DateTime.DateToTicks(Int32 year, Int32 month, Int32 day)  
   at System.DateTime..ctor(Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, DateTimeKind kind)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ParseDateTimeValue(String value, ADAttributeSyntax syntax)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ConvertFromRaw(String propertyName, ADPropertyValueCollection propertyValues)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.CreateRichADObject(ADObject resultEntry)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.PagedSearch(Object& pageCookie, Boolean& hasSizeLimitExceeded, Int32 pageSize, Int32 sizeLimit)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearchResultEnumerator.System.Collections.IEnumerator.MoveNext()  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.FindOne(Boolean& foundMoreThanOneResult)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactoryUtil.GetObjectFromIdentitySearcher(ADObjectSearcher searcher, ADEntity identityObj, String searchRoot, AttributeSetRequest attrs, CmdletSessionInfo cmdletSessionInfo, String[]& warningMessages)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted, Boolean showLinkTtl)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted)  
   at Microsoft.ActiveDirectory.Management.Commands.ADGetCmdletBase`3.ADGetCmdletBaseProcessCSRoutine()  
   at Microsoft.ActiveDirectory.Management.CmdletSubroutinePipeline.Invoke()  
   at Microsoft.ActiveDirectory.Management.Commands.ADCmdletBase`1.ProcessRecord()  
   at Microsoft.ActiveDirectory.Management.AdwsConnection.ThrowExceptionForExtendedError(String extendedErrorMessage, Exception innerException)  
   at Microsoft.ActiveDirectory.Management.AdwsConnection.ThrowExceptionForErrorCode(String message, String errorCode, String extendedErrorMessage, Exception innerException)  
   at Microsoft.ActiveDirectory.Management.AdwsConnection.ThrowExceptionForFaultDetail(FaultDetail faultDetail, FaultException faultException)  
   at Microsoft.ActiveDirectory.Management.AdwsConnection.ThrowException(AdwsFault adwsFault, FaultException faultException)  
   at Microsoft.ActiveDirectory.Management.AdwsConnection.Modify(ADModifyRequest request)  
   at Microsoft.ActiveDirectory.Management.ADWebServiceStoreAccess.Microsoft.ActiveDirectory.Management.IADSyncOperations.Modify(ADSessionHandle handle, ADModifyRequest request)  
   at Microsoft.ActiveDirectory.Management.ADActiveObject.Update()  
   at Microsoft.ActiveDirectory.Management.Commands.ADSetCmdletBase`3.SetFromIdentity(O identity)  
   at Microsoft.ActiveDirectory.Management.Commands.ADSetCmdletBase`3.ADSetCmdletBaseProcessCSRoutine()  
   at Microsoft.ActiveDirectory.Management.CmdletSubroutinePipeline.Invoke()  
   at Microsoft.ActiveDirectory.Management.Commands.ADCmdletBase`1.ProcessRecord()  
   at System.DateTime.DateToTicks(Int32 year, Int32 month, Int32 day)  
   at System.DateTime..ctor(Int32 year, Int32 month, Int32 day, Int32 hour, Int32 minute, Int32 second, DateTimeKind kind)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ParseDateTimeValue(String value, ADAttributeSyntax syntax)  
   at Microsoft.ActiveDirectory.Management.ADTypeConverter.ConvertFromRaw(String propertyName, ADPropertyValueCollection propertyValues)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.CreateRichADObject(ADObject resultEntry)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.PagedSearch(Object& pageCookie, Boolean& hasSizeLimitExceeded, Int32 pageSize, Int32 sizeLimit)  
   at Microsoft.ActiveDirectory.Management.ADObjectSearchResultEnumerator.System.Collections.IEnumerator.MoveNext()  
   at Microsoft.ActiveDirectory.Management.ADObjectSearcher.FindOne(Boolean& foundMoreThanOneResult)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactoryUtil.GetObjectFromIdentitySearcher(ADObjectSearcher searcher, ADEntity identityObj, String searchRoot, AttributeSetRequest attrs, CmdletSessionInfo cmdletSessionInfo, String[]& warningMessages)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted, Boolean showLinkTtl)  
   at Microsoft.ActiveDirectory.Management.Commands.ADFactory`1.GetExtendedObjectFromIdentity(T identityObj, String identityQueryPath, ICollection`1 propertiesToFetch, Boolean showDeleted)  
   at Microsoft.ActiveDirectory.Management.Commands.ADGetCmdletBase`3.ADGetCmdletBaseProcessCSRoutine()  
   at Microsoft.ActiveDirectory.Management.CmdletSubroutinePipeline.Invoke()  
   at Microsoft.ActiveDirectory.Management.Commands.ADCmdletBase`1.ProcessRecord()  
PS C:\Windows\system32>

Helmut-72 66 Reputation points

2022-07-11T11:35:53.237+00:00

A big shout out to everyone who helped to sort this one out, very much appreciated!
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Get-ADUser and GeneralizedTime (2.5.5.11)

11 additional answers

Your answer