I'm still trying to get the hang of this. Here's what I need - a
report of all user accounts that are in just certain OUs. Specifically
- we have an OU called "Disabled" where we put disabled user accounts.
There are 4 sub-OUs - Q1, Q2, etc. And what I want is only the
accounts in Q2 and Q3. HOWEVER, when a user is on a leave of absence,
we disable their accoutn, but do NOT move it into the "Disabled" OU.

I know I can use
Get-QADUser -Disabled -SearchRoot "OU=Disabled in
Q3,OU=DISABLED,DC=...DC=...,DC=...,DC=...,DC=..."

Which gives me that one sub-OU. Will I just have to repeat it for just Q2?

OR ... is there some way I can search the DISABLED OU, and just filter
out Q1 and Q4?

Also: there doesn't seem to be an entry for "DisabledDate", I only see
last modification date (which ideally will work out to be the same
thing as disabled date). It's not critical for me, but is there a way
to list date the account was disabled?

I plan to write all this out into an Excel spreadsheet, which I've done before.

Any advice gratefully appreciated.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to