You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This command gets all enabled user accounts in Active Directory using an LDAP filter.
109
+
103
110
## PARAMETERS
104
111
105
112
### -AuthType
@@ -116,7 +123,7 @@ A Secure Sockets Layer (SSL) connection is required for the Basic authentication
116
123
```yaml
117
124
Type: ADAuthType
118
125
Parameter Sets: (All)
119
-
Aliases:
126
+
Aliases:
120
127
Accepted values: Negotiate, Basic
121
128
122
129
Required: False
@@ -142,7 +149,7 @@ If the acting credentials do not have directory-level permission to perform the
142
149
```yaml
143
150
Type: PSCredential
144
151
Parameter Sets: (All)
145
-
Aliases:
152
+
Aliases:
146
153
147
154
Required: False
148
155
Position: Named
@@ -190,7 +197,7 @@ Note: To query using LDAP query strings, use the *LDAPFilter* parameter.
190
197
```yaml
191
198
Type: String
192
199
Parameter Sets: Filter
193
-
Aliases:
200
+
Aliases:
194
201
195
202
Required: True
196
203
Position: Named
@@ -205,8 +212,8 @@ The identifier in parentheses is the LDAP display name for the attribute.
205
212
The acceptable values for this parameter are:
206
213
207
214
- A distinguished name
208
-
- A GUID (objectGUID)
209
-
- A security identifier (objectSid)
215
+
- A GUID (objectGUID)
216
+
- A security identifier (objectSid)
210
217
- A SAM account name (sAMAccountName)
211
218
212
219
The cmdlet searches the default naming context or partition to find the object.
@@ -217,7 +224,7 @@ This parameter can also get this object through the pipeline or you can set this
217
224
```yaml
218
225
Type: ADUser
219
226
Parameter Sets: Identity
220
-
Aliases:
227
+
Aliases:
221
228
222
229
Required: True
223
230
Position: 0
@@ -235,7 +242,7 @@ For more information, see the *Filter* parameter description or type `Get-Help a
235
242
```yaml
236
243
Type: String
237
244
Parameter Sets: LdapFilter
238
-
Aliases:
245
+
Aliases:
239
246
240
247
Required: True
241
248
Position: Named
@@ -251,26 +258,26 @@ The cmdlet searches this partition to find the object defined by the *Identity*
251
258
252
259
In many cases, a default value is used for the *Partition* parameter if no value is specified.
253
260
The rules for determining the default value are given below.
254
-
Note that rules listed first are evaluated first and when a default value can be determined, no further rules are evaluated.
261
+
Note that rules listed first are evaluated first, and when a default value can be determined, no further rules are evaluated.
255
262
256
-
In AD DS environments, a default value for *Partition* are set in the following cases:
263
+
In AD DS environments, a default value for *Partition* is set in the following cases:
257
264
258
265
- If the *Identity* parameter is set to a distinguished name, the default value of *Partition* is automatically generated from this distinguished name.
259
-
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
266
+
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
260
267
- If none of the previous cases apply, the default value of *Partition* is set to the default partition or naming context of the target domain.
261
268
262
-
In AD LDS environments, a default value for *Partition* will be set in the following cases:
269
+
In AD LDS environments, a default value for *Partition* is set in the following cases:
263
270
264
-
- If the *Identity* parameter is set to a distinguished name, the default value of *Partition* is automatically generated from this distinguished name.
265
-
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
271
+
- If the *Identity* parameter is set to a distinguished name, the default value of *Partition* is automatically generated from this distinguished name.
272
+
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
266
273
- If the target AD LDS instance has a default naming context, the default value of *Partition* is set to the default naming context.
267
-
To specify a default naming context for an AD LDS environment, set the **msDS-defaultNamingContext** property of the Active Directory directory service agent object (**nTDSDSA**) for the AD LDS instance.
274
+
To specify a default naming context for an AD LDS environment, set the **msDS-defaultNamingContext** property of the Active Directory directory service agent object (**nTDSDSA**) for the AD LDS instance.
268
275
- If none of the previous cases apply, the *Partition* parameter does not take any default value.
269
276
270
277
```yaml
271
278
Type: String
272
279
Parameter Sets: Identity
273
-
Aliases:
280
+
Aliases:
274
281
275
282
Required: False
276
283
Position: Named
@@ -311,7 +318,7 @@ The default is 256 objects per page.
311
318
```yaml
312
319
Type: Int32
313
320
Parameter Sets: Filter, LdapFilter
314
-
Aliases:
321
+
Aliases:
315
322
316
323
Required: False
317
324
Position: Named
@@ -330,7 +337,7 @@ The default is $Null.
330
337
```yaml
331
338
Type: Int32
332
339
Parameter Sets: Filter, LdapFilter
333
-
Aliases:
340
+
Aliases:
334
341
335
342
Required: False
336
343
Position: Named
@@ -349,13 +356,13 @@ When you run a cmdlet outside of an Active Directory provider drive against an A
349
356
When you run a cmdlet outside of an Active Directory provider drive against an AD LDS target, the default value is the default naming context of the target LDS instance if one has been specified by setting the **msDS-defaultNamingContext** property of the Active Directory directory service agent (DSA) object (**nTDSDSA**) for the AD LDS instance.
350
357
If no default naming context has been specified for the target AD LDS instance, then this parameter has no default value.
351
358
352
-
When the value of the *SearchBase* parameter is set to an empty string and you are connected to a GC port, all partitions will be searched.
353
-
If the value of the *SearchBase* parameter is set to an empty string and you are not connected to a GC port, an error will be thrown.
359
+
When the value of the *SearchBase* parameter is set to an empty string and you are connected to a GC port, all partitions are searched.
360
+
If the value of the *SearchBase* parameter is set to an empty string and you are not connected to a GC port, an error is thrown.
354
361
355
362
```yaml
356
363
Type: String
357
364
Parameter Sets: Filter, LdapFilter
358
-
Aliases:
365
+
Aliases:
359
366
360
367
Required: False
361
368
Position: Named
@@ -380,7 +387,7 @@ A Subtree query searches the current path or object and all children of that pat
380
387
```yaml
381
388
Type: ADSearchScope
382
389
Parameter Sets: Filter, LdapFilter
383
-
Aliases:
390
+
Aliases:
384
391
Accepted values: Base, OneLevel, Subtree
385
392
386
393
Required: False
@@ -407,14 +414,14 @@ Directory server values:
407
414
408
415
The default value for the *Server* parameter is determined by one of the following methods in the order that they are listed:
409
416
410
-
- By using *Server* value from objects passed through the pipeline.
411
-
- By using the server information associated with the Active Directory PowerShell provider drive, when running under that drive.
417
+
- By using *Server* value from objects passed through the pipeline.
418
+
- By using the server information associated with the Active Directory PowerShell provider drive, when running under that drive.
412
419
- By using the domain of the computer running PowerShell.
This command gets all enabled user accounts in Active Directory using an LDAP filter.
104
111
105
112
## PARAMETERS
106
113
@@ -118,7 +125,7 @@ A Secure Sockets Layer (SSL) connection is required for the Basic authentication
118
125
```yaml
119
126
Type: ADAuthType
120
127
Parameter Sets: (All)
121
-
Aliases:
128
+
Aliases:
122
129
Accepted values: Negotiate, Basic
123
130
124
131
Required: False
@@ -144,7 +151,7 @@ If the acting credentials do not have directory-level permission to perform the
144
151
```yaml
145
152
Type: PSCredential
146
153
Parameter Sets: (All)
147
-
Aliases:
154
+
Aliases:
148
155
149
156
Required: False
150
157
Position: Named
@@ -192,7 +199,7 @@ Note: To query using LDAP query strings, use the *LDAPFilter* parameter.
192
199
```yaml
193
200
Type: String
194
201
Parameter Sets: Filter
195
-
Aliases:
202
+
Aliases:
196
203
197
204
Required: True
198
205
Position: Named
@@ -207,8 +214,8 @@ The identifier in parentheses is the LDAP display name for the attribute.
207
214
The acceptable values for this parameter are:
208
215
209
216
- A distinguished name
210
-
- A GUID (objectGUID)
211
-
- A security identifier (objectSid)
217
+
- A GUID (objectGUID)
218
+
- A security identifier (objectSid)
212
219
- A SAM account name (sAMAccountName)
213
220
214
221
The cmdlet searches the default naming context or partition to find the object.
@@ -219,7 +226,7 @@ This parameter can also get this object through the pipeline or you can set this
219
226
```yaml
220
227
Type: ADUser
221
228
Parameter Sets: Identity
222
-
Aliases:
229
+
Aliases:
223
230
224
231
Required: True
225
232
Position: 0
@@ -237,7 +244,7 @@ For more information, see the *Filter* parameter description or type `Get-Help a
237
244
```yaml
238
245
Type: String
239
246
Parameter Sets: LdapFilter
240
-
Aliases:
247
+
Aliases:
241
248
242
249
Required: True
243
250
Position: Named
@@ -253,26 +260,26 @@ The cmdlet searches this partition to find the object defined by the *Identity*
253
260
254
261
In many cases, a default value is used for the *Partition* parameter if no value is specified.
255
262
The rules for determining the default value are given below.
256
-
Note that rules listed first are evaluated first and when a default value can be determined, no further rules are evaluated.
263
+
Note that rules listed first are evaluated first, and when a default value can be determined, no further rules are evaluated.
257
264
258
-
In AD DS environments, a default value for *Partition* is set in the following cases:
265
+
In AD DS environments, a default value for *Partition* is set in the following cases:
259
266
260
267
- If the *Identity* parameter is set to a distinguished name, the default value of *Partition* is automatically generated from this distinguished name.
261
-
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
268
+
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
262
269
- If none of the previous cases apply, the default value of *Partition* is set to the default partition or naming context of the target domain.
263
270
264
-
In AD LDS environments, a default value for *Partition* will be set in the following cases:
271
+
In AD LDS environments, a default value for *Partition* is set in the following cases:
265
272
266
-
- If the *Identity* parameter is set to a distinguished name, the default value of *Partition* is automatically generated from this distinguished name.
267
-
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
273
+
- If the *Identity* parameter is set to a distinguished name, the default value of *Partition* is automatically generated from this distinguished name.
274
+
- If running cmdlets from an Active Directory provider drive, the default value of *Partition* is automatically generated from the current path in the drive.
268
275
- If the target AD LDS instance has a default naming context, the default value of *Partition* is set to the default naming context.
269
-
To specify a default naming context for an AD LDS environment, set the **msDS-defaultNamingContext** property of the Active Directory directory service agent object (**nTDSDSA**) for the AD LDS instance.
276
+
To specify a default naming context for an AD LDS environment, set the **msDS-defaultNamingContext** property of the Active Directory directory service agent object (**nTDSDSA**) for the AD LDS instance.
270
277
- If none of the previous cases apply, the *Partition* parameter does not take any default value.
271
278
272
279
```yaml
273
280
Type: String
274
281
Parameter Sets: Identity
275
-
Aliases:
282
+
Aliases:
276
283
277
284
Required: False
278
285
Position: Named
@@ -313,7 +320,7 @@ The default is 256 objects per page.
313
320
```yaml
314
321
Type: Int32
315
322
Parameter Sets: Filter, LdapFilter
316
-
Aliases:
323
+
Aliases:
317
324
318
325
Required: False
319
326
Position: Named
@@ -332,7 +339,7 @@ The default is $Null.
332
339
```yaml
333
340
Type: Int32
334
341
Parameter Sets: Filter, LdapFilter
335
-
Aliases:
342
+
Aliases:
336
343
337
344
Required: False
338
345
Position: Named
@@ -351,13 +358,13 @@ When you run a cmdlet outside of an Active Directory provider drive against an A
351
358
When you run a cmdlet outside of an Active Directory provider drive against an AD LDS target, the default value is the default naming context of the target LDS instance if one has been specified by setting the **msDS-defaultNamingContext** property of the Active Directory directory service agent (DSA) object (**nTDSDSA**) for the AD LDS instance.
352
359
If no default naming context has been specified for the target AD LDS instance, then this parameter has no default value.
353
360
354
-
When the value of the *SearchBase* parameter is set to an empty string and you are connected to a GC port, all partitions will be searched.
355
-
If the value of the *SearchBase* parameter is set to an empty string and you are not connected to a GC port, an error will be thrown.
361
+
When the value of the *SearchBase* parameter is set to an empty string and you are connected to a GC port, all partitions are searched.
362
+
If the value of the *SearchBase* parameter is set to an empty string and you are not connected to a GC port, an error is thrown.
356
363
357
364
```yaml
358
365
Type: String
359
366
Parameter Sets: Filter, LdapFilter
360
-
Aliases:
367
+
Aliases:
361
368
362
369
Required: False
363
370
Position: Named
@@ -381,7 +388,7 @@ A Subtree query searches the current path or object and all children of that pat
381
388
```yaml
382
389
Type: ADSearchScope
383
390
Parameter Sets: Filter, LdapFilter
384
-
Aliases:
391
+
Aliases:
385
392
Accepted values: Base, OneLevel, Subtree
386
393
387
394
Required: False
@@ -408,14 +415,14 @@ Directory server values:
408
415
409
416
The default value for the *Server* parameter is determined by one of the following methods in the order that they are listed:
410
417
411
-
- By using *Server* value from objects passed through the pipeline.
412
-
- By using the server information associated with the Active Directory PowerShell provider drive, when running under that drive.
418
+
- By using *Server* value from objects passed through the pipeline.
419
+
- By using the server information associated with the Active Directory PowerShell provider drive, when running under that drive.
413
420
- By using the domain of the computer running PowerShell.
0 commit comments