While it ain't Powershell, you can use Zetetic.Events Shell to get an answer. Download: http://zetetic.net/products/events Then, in an elevated command window: ZeShell -q 629,4725,since=24-jan-2012 -f report.txt
Put whatever date you like for the 'since=' argument, provided it contains no commas and the .NET BCL can understand it as a DateTime. I wrote this tool -- feedback appreciated... --Steve On Wed, Jan 25, 2012 at 10:33 AM, Kelsey, John <[email protected]> wrote: > Anybody have a down and dirty Powershell script that shows all AD accounts > disabled within the last x amount of hours? > > > > Thanks all! > > > > ************************************* > John C. Kelsey > DuBois Regional Medical Center > (: 814.375.3073 > 2 : 814.375.4005 > *: [email protected] > ************************************* ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
