Active Directory and powershell - Notify change passsword

spiceuser-pdenz · 2023-03-08T18:24:53.000Z

Function Get-UAC($uac)
{
$flags=@()
if ((65536 -band $uac) -ne "0"){$flags+="DONT_EXPIRE_PASSWORD"}
return $flags
}
Function enviar-mail($mail,$body)
{
$subject="Recordatorio cambio de contraseña"
$smtpServer = "correo365.pichincha.fin.ec"
$emailFrom = "sistemas365@pichincha.fin.ec"
$smtp = new-object Net.Mail.SmtpClient($smtpServer,587)
$mailAuthentication = new-object System.Net.NetworkCredential("unlockda", "Unl0ckD4")
$smtp.UseDefaultCredentials = $False
$smtp.Credentials =$mailAuthentication
$MailMessage = new-object Net.Mail.MailMessage($emailFrom, $mail, $subject, $body)
$MailMessage.IsBodyHtml = $true
$smtp.Send($MailMessage)
}
##### main #####
out-file "C:\Bats\mailing_caducidad_contraseñas_08032023.csv" -input "usuario;ultimocambio;fechacaducidad;dias;avisado"
$SECS_IN_A_DAY = new-object DirectoryServices.DirectorySearcher([adsi]"")
$SECS_IN_A_DAY=86400
$domain = [ADSI]"WinNT://$env:userdomain"
$intMaxPwdAge =($domain.maxpasswordage.value)/$SECS_IN_A_DAY
$ahora=get-date

#lista los datos de todos los usuarios del dominio
$searcher = New-Object DirectoryServices.DirectorySearcher([adsi]"")
$searcher.filter = "(&(objectclass=user)(objectcategory=person)(mail=*)(!userAccountControl:1.2.840.113556.1.4.803:=2))"
$users = $searcher.findall()

Foreach($user in $users)
{
$TheUser = new-object DirectoryServices.DirectorySearcher([adsi]"")
$TheUser=$user.GetDirectoryEntry()

$usuario=$theuser.samaccountname
$nombre=$theuser.givenname
$apellidos=$theuser.sn
$mail=$theuser.mail
$uac=$theUser.userAccountControl
$flags=Get-Uac("$uac")
if ($flags -notcontains "DONT_EXPIRE_PASSWORD")
{
$PasswordLastChanged =$theuser.PasswordLastChanged
$intTimeInterval = [int32]($ahora - $PasswordLastChanged).days
If ($intTimeInterval -ge $intMaxPwdAge)
{
$strExpiringDays="CADUCADA"
$avisar=0
}
else
{
$ExpiringDate = $PasswordLastChanged.addDays($intMaxPwdAge)
$fechacaducidad=$Expiringdate.toString("dd/MM/yyyy")
$ExpiringDays = [int32]($ExpiringDate - $ahora).days
$strExpiringDays= "$ExpiringDays dias"
#Avisar con 4 dias de antelacion
if ($ExpiringDays -le 4)
{
$avisar=1
$body= "Estimad@ <br> <br>

$nombre $apellidos, su usuario de red <b>$usuario</b>, va a caducar dentro de " + $ExpiringDays + " días (" + $fechacaducidad + ").<br>
Por favor, desde su computador cambiar la contraseña presionando <b> CTL + ALT + SUPR </b>, seleccionar la opción <b>Cambiar la Contraseña</b>, luego:<br><br>

Validar <b>Nombre de usuario.</b><br>
Colocar la <b>contraseña actual.</b><br>
Colocar la <b>contraseña Nueva.</b><br>
Volver a ingresar la <b>contraseña Nueva.</b><br>
Finalmente, proceder a aceptar.<br> <br>

Para desbloquear su usuario o cambiar contraseña lo puede hacer desde la Intranet Institucional en el botón <b>Desbloqueo de usuario de red.</b><br>

Agradecemos su colaboración.<br> <br>

Atentamente<br>
<b>Service Desk.</b>"
enviar-mail $mail $body
}
else
{
$avisar=0
}#fin de if 4 dias
}#fin de if caducada
write-host "$usuario - $PasswordLastChanged - $strExpiringDays ($avisar)" -fore cyan
out-file "C:\Bats\mailing_caducidad_contraseñas_08032023.csv" -input "$usuario;$PasswordLastChanged;$fechacaducidad;$strExpiringDays;$avisar" -append

}#fin de flags uac validos

}#fin foreach

But, errors:

Cannot find an overload for “op_Subtraction” and the argument count: “2”.
At line:47 char:1

$intTimeInterval = [int32]($ahora - $PasswordLastChanged).days
CategoryInfo : NotSpecified: ( , MethodException
FullyQualifiedErrorId : MethodCountCouldNotFindBest

Method invocation failed because [System.Management.Automation.PSMethod] does not contain a method named ‘addDays’.
At line:55 char:1

$ExpiringDate = $PasswordLastChanged.addDays($intMaxPwdAge)
CategoryInfo : InvalidOperation: ( , RuntimeException
FullyQualifiedErrorId : MethodNotFound

Exception calling “Send” with “1” argument(s): “Failure sending mail.”
At line:18 char:1

$smtp.Send($MailMessage)
CategoryInfo : NotSpecified: ( , MethodInvocationException
FullyQualifiedErrorId : SmtpException

Cannot convert value to type System.String.
At line:87 char:1

write-host "$usuario - $PasswordLastChanged - $strExpiringDays ($avis …
CategoryInfo : InvalidArgument: ( , RuntimeException
FullyQualifiedErrorId : InvalidCastFromAnyTypeToString

Cannot convert value to type System.String.
At line:88 char:1

out-file “C:\Bats\mailing_caducidad_contraseñas_08032023.csv” -input …
CategoryInfo : InvalidArgument: ( , RuntimeException
FullyQualifiedErrorId : InvalidCastFromAnyTypeToString

Please help me!!!

Neally · 2023-03-08T18:47:13.000Z

Welcome.
We’re happy to help but not a script writing service.
If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don't say "Need help" or "PowerShell Help", actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy, past…

192033ab-bb8f-4032-88a5-8e2313af0344-codebutton_small.png

adminofthings · 2023-03-08T18:47:51.000Z

The first two errors are because $PasswordLastChanged is not a datetime object. You can potentially cast this provided it is a supported format by your system:

[datetime]$PasswordLastChanged = $theuser.PasswordLastChanged

d

Evan7191 · 2023-03-08T18:51:34.000Z

Welcome to the community. Please read this link below about how to make a good post:

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…

For the error on line 47, this line:

$intTimeInterval = [int32]($ahora - $PasswordLastChanged).days

should be like this:

$intTimeInterval = [int32]($ahora.days - $PasswordLastChanged.days)

The error on line 55 is caused by trying to call the AddDays() method on a timestamp from ActiveDirectory. AddDays is for DateTime objects, but Active Directory does not return DateTime objects in its attributes.

Instead of this:

$ExpiringDate = $PasswordLastChanged.addDays($intMaxPwdAge)

you can do something like this:

$ExpiringDate = (Get-Date -Format $PasswordLastChanged).addDays($intMaxPwdAge)

spiceuser-pdenz · 2023-03-08T19:03:58.000Z

Thanks.
This errors??
The following exception occurred while retrieving the string representation for method “PasswordLastChanged”: “Object reference not set to an instance of an object.”
At line:46 char:1

[datetime]$PasswordLastChanged =$theuser.PasswordLastChanged
CategoryInfo : NotSpecified: ( , ExtendedTypeSystemException
FullyQualifiedErrorId : CatchFromBaseMethodToString

Method invocation failed because [System.String] does not contain a method named ‘addDays’.
At line:55 char:1

$ExpiringDate = (Get-Date -Format $PasswordLastChanged).addDays($intM …
CategoryInfo : InvalidOperation: ( , RuntimeException
FullyQualifiedErrorId : MethodNotFound

Exception calling “Send” with “1” argument(s): “Failure sending mail.”
At line:18 char:1

$smtp.Send($MailMessage)
CategoryInfo : NotSpecified: ( , MethodInvocationException
FullyQualifiedErrorId : SmtpException

Ans the filename result:
vmogrovejo;02/28/2023 12:51:20;10/03/2023;1 dias;1
rsisalima;02/28/2023 08:42:54;10/03/2023;1 dias;1
grequelme;02/17/2023 09:52:34;10/03/2023;1 dias;1
proveeduria;02/17/2023 09:52:34;10/03/2023;1 dias;1
yramos;02/07/2023 08:42:25;10/03/2023;1 dias;1
eseguridad;02/07/2023 09:37:37;10/03/2023;1 dias;1
jarmijos;03/01/2023 12:20:13;10/03/2023;1 dias;1
hdesk;03/01/2023 12:20:13;10/03/2023;1 dias;1
Sistemas;03/01/2023 12:20:13;10/03/2023;1 dias;1
fcarranza;03/01/2023 12:20:13;10/03/2023;1 dias;1

This date is incorrect and this date is iqual for everybody
Thnks

Neally · 2023-03-08T19:08:45.000Z

bcolojabpgc2009:

Please help me!!!

There seem to be various errors, can you go through it one by one?

Rather than the entire script, post the parts of code that are throwing the errors?

Cannot find an overload for "op_Subtraction" and the argument count: "2".
At line:47 char:1
+ $intTimeInterval = [int32]($ahora - $PasswordLastChanged).days

Look at the code.
Where did you get this code from?

What type is $ahora? how about $passwordLastChanged?
$ahora is a datetimeobject so if you want to

spiceuser-pdenz · 2023-03-08T20:17:21.000Z

At line:18 char:1

$smtp.Send($MailMessage)

Exception calling “Send” with “1” argument(s): “Failure sending mail.”
At line:18 char:1

$smtp.Send($MailMessage)
CategoryInfo : NotSpecified: ( , MethodInvocationException
FullyQualifiedErrorId : SmtpException

At line:55 char:1

$ExpiringDate = (Get-Date -Format $PasswordLastChanged).addDays($intMaxPwdAge)

Method invocation failed because [System.String] does not contain a method named ‘addDays’.
At line:55 char:1

$ExpiringDate = (Get-Date -Format $PasswordLastChanged).addDays($intM …
CategoryInfo : InvalidOperation: ( , RuntimeException
FullyQualifiedErrorId : MethodNotFound

At line:46 char:1

[datetime]$PasswordLastChanged =$theuser.PasswordLastChanged

The following exception occurred while retrieving the string representation for method “PasswordLastChanged”: “Object reference not set to an instance of an object.”
At line:46 char:1

[datetime]$PasswordLastChanged =$theuser.PasswordLastChanged
CategoryInfo : NotSpecified: ( , ExtendedTypeSystemException
FullyQualifiedErrorId : CatchFromBaseMethodToString

spiceuser-pdenz · 2023-03-08T20:18:38.000Z

$ahora=get-date

spiceuser-pdenz · 2023-03-08T22:17:07.000Z

Now I have only 2 errors

Function Get-UAC($uac)
{
$flags=@()
if ((65536 -band $uac) -ne "0"){$flags+="DONT_EXPIRE_PASSWORD"}
return $flags
}
Function enviar-mail($mail,$body)
{
$subject="Recordatorio cambio de contraseña"
$smtpServer = "correo23.pichincha.fin.ec"
$emailFrom = "sistemas365@pichincha.fin.ec"
$smtp = new-object Net.Mail.SmtpClient($smtpServer,587)
$mailAuthentication = new-object System.Net.NetworkCredential("desbloqueoda", "R%not1da19")
$smtp.UseDefaultCredentials = $False
$smtp.Credentials =$mailAuthentication
$MailMessage = new-object Net.Mail.MailMessage($emailFrom, $mail, $subject, $body)
$MailMessage.IsBodyHtml = $true
$smtp.Send($MailMessage)
}
##### main #####
out-file "C:\Bats\mailing_caducidad_contraseñas_P.csv" -input "usuario;ultimocambio;fechacaducidad;dias;avisado"
$SECS_IN_A_DAY=86400
$domain = [ADSI]"WinNT://$env:userdomain"
$intMaxPwdAge =($domain.maxpasswordage.value)/$SECS_IN_A_DAY
$ahora=get-date

#lista los datos de todos los usuarios del dominio
$searcher = New-Object DirectoryServices.DirectorySearcher([adsi]"")
$searcher.filter = "(&(objectclass=user)(objectcategory=person)(mail=*)(!userAccountControl:1.2.840.113556.1.4.803:=2))"
$users = $searcher.findall()  

Foreach($user in $users) 
{
$TheUser=$user.GetDirectoryEntry() 

$usuario=$theuser.samaccountname
$nombre=$theuser.givenname
$apellidos=$theuser.sn
$mail=$theuser.mail
$uac=$theUser.userAccountControl
$flags=Get-Uac("$uac") 
if ($flags -notcontains "DONT_EXPIRE_PASSWORD") 
{
[datetime]$PasswordLastChanged =$theuser.PasswordLastChanged
#$PasswordLastChanged =$theuser.PasswordLastChanged 
$intTimeInterval = [int32]($ahora.days - $PasswordLastChanged.days)  
If ($intTimeInterval -ge $intMaxPwdAge)  
{  
$strExpiringDays="CADUCADA"  
$avisar=0  
}  
else  
{  
$ExpiringDate = $PasswordLastChanged.addDays($intMaxPwdAge)  
$fechacaducidad=$Expiringdate.toString("dd/MM/yyyy")  
$ExpiringDays = [int32]($ExpiringDate - $ahora).days   
$strExpiringDays= "$ExpiringDays dias"
#Avisar con 4 dias de antelacion   
if ($ExpiringDays -le 4)   
{   
$avisar=1   
$body= "Estimad@ <br> <br>

$nombre $apellidos, su usuario de red <b>$usuario</b>, va a caducar dentro de " +  $ExpiringDays + " días (" + $fechacaducidad + ").<br>
Por favor, desde su computador cambiar la contraseña presionando <b> CTL + ALT + SUPR </b>, seleccionar la opción <b>Cambiar la Contraseña</b>, luego:<br><br>

Validar <b>Nombre de usuario.</b><br>
Colocar la <b>contraseña actual.</b><br>
Colocar la <b>contraseña Nueva.</b><br>
Volver a ingresar la <b>contraseña Nueva.</b><br>
Finalmente, proceder a aceptar.<br> <br>

Para desbloquear su usuario o cambiar contraseña lo puede hacer desde la Intranet Institucional en el botón <b>Desbloqueo de usuario de red.</b><br>

Agradecemos su colaboración.<br> <br>

Atentamente<br>
<b>Service Desk.</b>"   
enviar-mail $mail $body   
}   
else   
{   
$avisar=0   
}#fin de if 4 dias  
}#fin de if caducada 
write-host "$usuario - $PasswordLastChanged - $strExpiringDays ($avisar)" -fore cyan 
out-file "C:\Bats\mailing_caducidad_contraseñas_P.csv" -input "$usuario;$PasswordLastChanged;$fechacaducidad;$strExpiringDays;$avisar" -append   

}#fin de flags uac validos 

}#fin foreach

ERROR 1

[datetime]$PasswordLastChanged =$theuser.PasswordLastChanged

The following exception occurred while retrieving the string representation for method “PasswordLastChanged”: “Object reference not set to an instance of an object.”
At line:44 char:1

[datetime]$PasswordLastChanged =$theuser.PasswordLastChanged
CategoryInfo : NotSpecified: ( , ExtendedTypeSystemException
FullyQualifiedErrorId : CatchFromBaseMethodToString

ERROR 2

$smtp.Send($MailMessage)

Exception calling “Send” with “1” argument(s): “Failure sending mail.”
At line:18 char:1

$smtp.Send($MailMessage)
CategoryInfo : NotSpecified: ( , MethodInvocationException
FullyQualifiedErrorId : SmtpException

spiceuser-pdenz · 2023-03-08T22:29:30.000Z

And in the .csv document a negative value (-67) is presented and it should say “CADUCADA” That could be happening? Thank you so much.

mespinosa;12/01/2022 18:12:06;31/12/2022;-67 dias;1
jquichimbo;12/01/2022 18:12:06;31/12/2022;-67 dias;1
gramirez;12/01/2022 18:12:06;31/12/2022;-67 dias;1
dromero;12/01/2022 18:12:06;31/12/2022;-67 dias;1
lrobles;12/01/2022 18:12:06;31/12/2022;-67 dias;1
kgarcia;12/01/2022 18:12:06;31/12/2022;-67 dias;1

if ($flags -notcontains "DONT_EXPIRE_PASSWORD") 
{
[datetime]$PasswordLastChanged =$theuser.PasswordLastChanged
#$PasswordLastChanged =$theuser.PasswordLastChanged 
$intTimeInterval = [int32]($ahora.days - $PasswordLastChanged.days)  
If ($intTimeInterval -ge $intMaxPwdAge)  
{  
$strExpiringDays="CADUCADA"  
$avisar=0  
}  
else  
{  
$ExpiringDate = $PasswordLastChanged.addDays($intMaxPwdAge)  
$fechacaducidad=$Expiringdate.toString("dd/MM/yyyy")  
$ExpiringDays = [int32]($ExpiringDate - $ahora).days   
$strExpiringDays= "$ExpiringDays dias"
...
}

Evan7191 · 2023-03-09T14:13:51.000Z

bcolojabpgc2009:

ERROR 1
[datetime]$PasswordLastChanged =$theuser.PasswordLastChanged
The following exception occurred while retrieving the string representation for method “PasswordLastChanged”: “Object reference not set to an instance of an object.”
At line:44 char:1

[datetime]$PasswordLastChanged =$theuser.PasswordLastChanged

CategoryInfo : NotSpecified: ( , ExtendedTypeSystemException

FullyQualifiedErrorId : CatchFromBaseMethodToString

The attribute for password changes in AD usually is pwdlastset (or PasswordLastSet) rather than PasswordLastChanged.

learn.microsoft.com

Pwd-Last-Set attribute - Win32 apps

The date and time that the password for this account was last changed.

bcolojabpgc2009:

ERROR 2
$smtp.Send($MailMessage)
Exception calling “Send” with “1” argument(s): “Failure sending mail.”
At line:18 char:1

$smtp.Send($MailMessage)

CategoryInfo : NotSpecified: ( , MethodInvocationException

FullyQualifiedErrorId : SmtpException

Have you tried using Send-MailMessage? It does the same thing as $smtp.Send(), but the syntax is usually easier.

learn.microsoft.com

Send-MailMessage (Microsoft.PowerShell.Utility) - PowerShell

The Send-MailMessage cmdlet sends an email message from within PowerShell. You must specify a Simple Mail Transfer Protocol (SMTP) server or the Send-MailMessage command fails. Use the SmtpServer parameter or set the $PSEmailServer variable to a...

Before someone yells at me for recommending Send-MailMessage, note the link in the warning. The issue with Send-MailMessage derives from the SmtpClient class in .Net. They are really the same method, so they are equally insecure. If you are going to use an insecure method, at least use the easier one.

github.com

dotnet/platform-compat/blob/master/docs/DE0005.md

<!--
T:System.Net.Mail.SmtpClient
-->

# DE0005: SmtpClient shouldn't be used

## Motivation

[`SmtpClient`](https://docs.microsoft.com/dotnet/api/system.net.mail.smtpclient) doesn't support many modern protocols. It is compat-only. It's
great for one off emails from tools, but doesn't scale to modern requirements of the protocol.

## Recommendation

Use [`MailKit`](https://github.com/jstedfast/MailKit) or other libraries.

spiceuser-pdenz · 2023-03-09T15:29:08.000Z

Changing as you told me, errors are presented

jbeltran;System.DirectoryServices.DirectorySearcher;10/03/2023;0 dias;1
acorrea;System.DirectoryServices.DirectorySearcher;10/03/2023;0 dias;1
SM_db6293ca21e94cec8;System.DirectoryServices.DirectorySearcher;10/03/2023;0 dias;1
vmogrovejo;System.DirectoryServices.DirectorySearcher;10/03/2023;0 dias;1

$flags=Get-Uac("$uac") 
if ($flags -notcontains "DONT_EXPIRE_PASSWORD") 
{
[datetime]$pwdLastSet =$theuser.pwdLastSet
$intTimeInterval = [int32]($ahora.days - $pwdLastSet.days)  
If ($intTimeInterval -ge $intMaxPwdAge)  
{  
[stri]$strExpiringDays="CADUCADA"  
$avisar=0  
}  
else  
{  
$ExpiringDate = $pwdLastSet.addDays($intMaxPwdAge)  
$fechacaducidad=$Expiringdate.toString("dd/MM/yyyy")  
$ExpiringDays = [int32]($ExpiringDate - $ahora).days   
$strExpiringDays= "$ExpiringDays dias"
}

This is how it should be presented

mmunoz;12/01/2022 18:12:06;31/12/2022;CADUCADA;1
earteaga;12/01/2022 18:12:06;31/12/2022; CADUCADA ;1
iespinosa;12/01/2022 18:12:06;31/12/2022; CADUCADA ;1
jchicaiza;12/01/2022 18:12:06;31/12/2022; CADUCADA ;1

But without the new changes, it looks like this

mmunoz;12/01/2022 18:12:06;31/12/2022;-67 dias;1
earteaga;12/01/2022 18:12:06;31/12/2022;-67 dias;1
iespinosa;12/01/2022 18:12:06;31/12/2022;-67 dias;1
jchicaiza;12/01/2022 18:12:06;31/12/2022;-67 dias;1

That “-67 dias” should be changed to the word “CADUCADA”

Thanks

@Powershell450 @alexw @techadmin8 @powershellautomation @eddieserna @powershellpro @powershelllearner @powershelllearner2 @powershelln00b @powershellbreakfast @adminofthings

Evan7191 · 2023-03-09T16:03:35.000Z

If you run this, what properties do you get? I don’t remember if DirectorySearcher returns the time when a password changed.

$users | Get-Member

spiceuser-pdenz · 2023-03-09T16:07:28.000Z

I get this

PS C:\BATS> $users | Get-Member

TypeName: System.DirectoryServices.SearchResult

Name MemberType Definition

Equals Method bool Equals(System.Object obj)
GetDirectoryEntry Method adsi GetDirectoryEntry()
GetHashCode Method int GetHashCode()
GetType Method type GetType()
ToString Method string ToString()
Path Property string Path {get;}
Properties Property System.DirectoryServices.ResultPropertyCollection Properties {get;}

Evan7191 · 2023-03-09T16:26:00.000Z

Okay, it put all of the attributes in one property called Properties. What do you get from this?

$users.Properties | Get-Member

spiceuser-pdenz · 2023-03-09T16:35:45.000Z

I get the following:

PS C:\BATS> $users.Properties | Get-Member

   TypeName: System.DirectoryServices.ResultPropertyCollection

Name           MemberType            Definition                                                                                                                                                                      
----           ----------            ----------                                                                                                                                                                      
Add            Method                void IDictionary.Add(System.Object key, System.Object value)                                                                                                                    
Clear          Method                void Clear(), void IDictionary.Clear()                                                                                                                                          
Contains       Method                bool Contains(string propertyName), bool IDictionary.Contains(System.Object key)                                                                                                
CopyTo         Method                void CopyTo(System.DirectoryServices.ResultPropertyValueCollection[] array, int index), void CopyTo(array array, int index), void ICollection.CopyTo(array array, int index)    
Equals         Method                bool Equals(System.Object obj)                                                                                                                                                  
GetEnumerator  Method                System.Collections.IDictionaryEnumerator GetEnumerator(), System.Collections.IDictionaryEnumerator IDictionary.GetEnumerator(), System.Collections.IEnumerator IEnumerable.Ge...
GetHashCode    Method                int GetHashCode()                                                                                                                                                               
GetType        Method                type GetType()                                                                                                                                                                  
Remove         Method                void IDictionary.Remove(System.Object key)                                                                                                                                      
ToString       Method                string ToString()                                                                                                                                                               
Item           ParameterizedProperty System.DirectoryServices.ResultPropertyValueCollection Item(string name) {get;}, System.Object IDictionary.Item(System.Object key) {get;set;}                                   
Count          Property              int Count {get;}                                                                                                                                                                
IsFixedSize    Property              bool IsFixedSize {get;}                                                                                                                                                         
IsReadOnly     Property              bool IsReadOnly {get;}                                                                                                                                                          
IsSynchronized Property              bool IsSynchronized {get;}                                                                                                                                                      
Keys           Property              System.Collections.ICollection Keys {get;}                                                                                                                                      
PropertyNames  Property              System.Collections.ICollection PropertyNames {get;}                                                                                                                             
SyncRoot       Property              System.Object SyncRoot {get;}                                                                                                                                                   
Values         Property              System.Collections.ICollection Values {get;}

Evan7191 · 2023-03-09T17:38:58.000Z

What is in $users.Properties.Keys?

$users.Properties.Keys | Get-Member

Are you able to install the ActiveDirectory module or Remote Server Administration Toolkit? That would make this process much easier, because you could use Get-ADUser instead of DirectorySearcher.

learn.microsoft.com

Remote Server Administration Tools - Windows Server

This article describes the tools that are available in Remote Server Administration Tools for Windows.

learn.microsoft.com

Get-ADUser (ActiveDirectory)

Use this topic to help manage Windows and Windows Server technologies with Windows PowerShell.

spiceuser-pdenz · 2023-03-09T20:26:20.000Z

PS C:\BATS> $users.Properties.Keys | Get-Member

  TypeName: System.String

Name           MemberType           Definition                                                                                                                                                                  
----           ----------           ----------                                                                                                                                                                  
Clone           Method               System.Object Clone(), System.Object ICloneable.Clone()                                                                                                                    
CompareTo       Method               int CompareTo(System.Object value), int CompareTo(string strB), int IComparable.CompareTo(System.Object obj), int IComparable[string].CompareTo(string other)              
Contains       Method               bool Contains(string value)                                                                                                                                                
CopyTo         Method               void CopyTo(int sourceIndex, char[] destination, int destinationIndex, int count)                                                                                          
EndsWith       Method               bool EndsWith(string value), bool EndsWith(string value, System.StringComparison comparisonType), bool EndsWith(string value, bool ignoreCase, cultureinfo culture)        
Equals         Method               bool Equals(System.Object obj), bool Equals(string value), bool Equals(string value, System.StringComparison comparisonType), bool IEquatable[string].Equals(string other)  
GetEnumerator   Method               System.CharEnumerator GetEnumerator(), System.Collections.IEnumerator IEnumerable.GetEnumerator(), System.Collections.Generic.IEnumerator[char] IEnumerable[char].GetEnumer...
GetHashCode     Method               int GetHashCode()                                                                                                                                                          
GetType         Method               type GetType()                                                                                                                                                              
GetTypeCode     Method               System.TypeCode GetTypeCode(), System.TypeCode IConvertible.GetTypeCode()                                                                                                  
IndexOf         Method               int IndexOf(char value), int IndexOf(char value, int startIndex), int IndexOf(char value, int startIndex, int count), int IndexOf(string value), int IndexOf(string value, ...
IndexOfAny     Method               int IndexOfAny(char[] anyOf), int IndexOfAny(char[] anyOf, int startIndex), int IndexOfAny(char[] anyOf, int startIndex, int count)                                        
Insert         Method               string Insert(int startIndex, string value)                                                                                                                                
IsNormalized   Method               bool IsNormalized(), bool IsNormalized(System.Text.NormalizationForm normalizationForm)                                                                                    
LastIndexOf     Method               int LastIndexOf(char value), int LastIndexOf(char value, int startIndex), int LastIndexOf(char value, int startIndex, int count), int LastIndexOf(string value), int LastIn...
LastIndexOfAny Method               int LastIndexOfAny(char[] anyOf), int LastIndexOfAny(char[] anyOf, int startIndex), int LastIndexOfAny(char[] anyOf, int startIndex, int count)                            
Normalize       Method               string Normalize(), string Normalize(System.Text.NormalizationForm normalizationForm)                                                                                      
PadLeft         Method               string PadLeft(int totalWidth), string PadLeft(int totalWidth, char paddingChar)                                                                                            
PadRight       Method               string PadRight(int totalWidth), string PadRight(int totalWidth, char paddingChar)                                                                                          
Remove         Method               string Remove(int startIndex, int count), string Remove(int startIndex)                                                                                                    
Replace         Method               string Replace(char oldChar, char newChar), string Replace(string oldValue, string newValue)                                                                                
Split           Method               string[] Split(Params char[] separator), string[] Split(char[] separator, int count), string[] Split(char[] separator, System.StringSplitOptions options), string[] Split(c...
StartsWith     Method               bool StartsWith(string value), bool StartsWith(string value, System.StringComparison comparisonType), bool StartsWith(string value, bool ignoreCase, cultureinfo culture)  
Substring       Method               string Substring(int startIndex), string Substring(int startIndex, int length)                                                                                              
ToBoolean       Method               bool IConvertible.ToBoolean(System.IFormatProvider provider)                                                                                                                
ToByte         Method               byte IConvertible.ToByte(System.IFormatProvider provider)                                                                                                                  
ToChar         Method               char IConvertible.ToChar(System.IFormatProvider provider)                                                                                                                  
ToCharArray     Method               char[] ToCharArray(), char[] ToCharArray(int startIndex, int length)                                                                                                        
ToDateTime     Method               datetime IConvertible.ToDateTime(System.IFormatProvider provider)                                                                                                          
ToDecimal       Method               decimal IConvertible.ToDecimal(System.IFormatProvider provider)                                                                                                            
ToDouble       Method               double IConvertible.ToDouble(System.IFormatProvider provider)                                                                                                              
ToInt16         Method               int16 IConvertible.ToInt16(System.IFormatProvider provider)                                                                                                                
ToInt32         Method               int IConvertible.ToInt32(System.IFormatProvider provider)                                                                                                                  
ToInt64         Method               long IConvertible.ToInt64(System.IFormatProvider provider)                                                                                                                  
ToLower         Method               string ToLower(), string ToLower(cultureinfo culture)                                                                                                                      
ToLowerInvariant Method               string ToLowerInvariant()                                                                                                                                                  
ToSByte         Method               sbyte IConvertible.ToSByte(System.IFormatProvider provider)                                                                                                                
ToSingle       Method               float IConvertible.ToSingle(System.IFormatProvider provider)                                                                                                                
ToString       Method               string ToString(), string ToString(System.IFormatProvider provider), string IConvertible.ToString(System.IFormatProvider provider)                                          
ToType         Method               System.Object IConvertible.ToType(type conversionType, System.IFormatProvider provider)                                                                                    
ToUInt16       Method               uint16 IConvertible.ToUInt16(System.IFormatProvider provider)                                                                                                              
ToUInt32       Method               uint32 IConvertible.ToUInt32(System.IFormatProvider provider)                                                                                                              
ToUInt64       Method               uint64 IConvertible.ToUInt64(System.IFormatProvider provider)                                                                                                              
ToUpper         Method               string ToUpper(), string ToUpper(cultureinfo culture)                                                                                                                      
ToUpperInvariant Method               string ToUpperInvariant()                                                                                                                                                  
Trim           Method               string Trim(Params char[] trimChars), string Trim()                                                                                                                        
TrimEnd         Method               string TrimEnd(Params char[] trimChars)                                                                                                                                    
TrimStart       Method               string TrimStart(Params char[] trimChars)                                                                                                                                  
Chars           ParameterizedProperty char Chars(int index) {get;}                                                                                                                                                
Length         Property             int Length {get;}

I could not install modules, because it is a critical server and I have to request authorization and right now it is not possible because it involves a long process. Thank you

Act: Apparently if I have installed the module.

Evan7191 · 2023-03-09T20:46:40.000Z

bcolojabpgc2009:

I could not install modules, because it is a critical server and I have to request authorization and right now it is not possible because it involves a long process. Thank you

Act: Apparently if I have installed the module.

The module would be installed on a workstation rather than the server. It allows you to query Active Directory without logging into the server directly.