Powershell GetADuser erroring out

jonathanjones7819 · 2018-03-20T14:02:56.000Z

Hello,

I have been using the same powershell script to scan AD users, check against existing home folders(same as username) and if AD user does not exist, COPY then DELETE folder.

The script starts OK then fails with the following MSG:

Get-ADUser : The search filter cannot be recognized
At C:\Users\administrator.PRSDNJ\Desktop\Clean-Home-Active-Directory-Accounts.ps1:58 char:23

$User = Get-ADUser <<<< -LDAPFilter “(sAMAccountName=$folder)”
CategoryInfo : NotSpecified: ( [Get-ADUser], ADException
FullyQualifiedErrorId : The search filter cannot be recognized,Microsoft.ActiveDirectory.Management.Commands.Get
ADUser

I did make a change on AD LDAP from OPEN to TLS?

Can anyone point me in the right direction?

Neally · 2018-03-20T14:56:54.000Z

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don't say "Need help" or "PowerShell Help", actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy, past…

psophos · 2018-03-20T14:58:46.000Z

Without seeing the code it’s hard to say, but guess I will

I reckon this might be the change you need:

$folderName = $folder.Name
Get-ADUser -LDAPFilter "(sAMAccountName=$folderName)"

jonathanjones7819 · 2018-03-20T15:03:51.000Z

#*****************************************************************************
#Created By: KV-Tools
#Purpose: Clean home folders from main root that no longer match an AD account
#*****************************************************************************

#Imports the proper module
import-module ActiveDirectory

#************************************************************************************************************
#Note 1: This script is designed to run from a main directory. For example: The directory all of your users 
#        are listed under could be called "Users" (E:\Users\SmithO). "E:\Users" would have to be the main
#        directory. This script reads each subfolder name after the root directory to return the name
#        of the folder. Failure to run from the root will result in bad results.
#Note 2: Your users home folder must match there sAMAcountName (AKA Logon Name). If you use a different name
#        for the home folder, do not use this script.
#Note 3: If you want to run a simple test before running this on your entire system you can create a temp
#        root folder and create some manual home folders with some users names and few with some users
#        that are not in your AD environment. Run this against that root folder and it will check through AD
#        for the users sAMAccount name based on the folder and either move them to a destination folder if they
#        don't match AD or leave them because the home directories match existing users in AD.
#************************************************************************************************************

#How to Use:

#Edit the script and you will see to variables ($FolderPath and $Destination). Next to $FolderPath you will enter the main folder 
#path for the home folders you want to check. Next to $Destination you will enter where you want the non-matching directories to 
#move into. The log paths are below that if you want to edit those as well. After you have set these settings you can run the script. 
#NOTE: You have to insure you run this script with an account that has full rights to Active Directory, the main folder path, and the destination path.

#\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
#///////////////////////Manual Entry *HERE*\\\\\\\\\\\\\\\\\\\\\
#\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
#Enter Main (Root) Folder Path
#Ex1: \\MyServer\Users
#Ex2: C:\Users
$FolderPath = "S:\studentusers\"
#Sets The Destination Path To Move The Old Home Folders Into
#Ex1: \\MyServer\Decommission
#Ex2: C:\Decommission
#Note: Has To Be On Same Volume As $FolderPath
$Destination = "z:\OLDHOMEFOLDER-03-19-18\"
#Sets Log Path On Move
$UnusedDirMoveLogPath = "z:\OLDHOMEFOLDER-03-19-18\UnusedHomeDirMove_log.txt"
#Powershell Output Errors Path
$OutPutErrorLogPath = "z:\OLDHOMEFOLDER-03-19-18\UnusedHomeDirMove_OutputErrors_log.txt"
#\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/

#Gets Each Folder In RootDirectory, which is each users home directory that is names the same name has there SamAccountName
$folders = Get-ChildItem $FolderPath 

#Loops Through Each Home Directory Folder
ForEach ($folder in $folders) 
{

    #Searches For User
    $User = Get-ADUser -LDAPFilter "(sAMAccountName=$folder)" 

    #Checks If Users Exists
    If ($User -eq $Null) 
    {

                ###########################################
                #User NOT Found------------Moving Folder
                ###########################################
                
        #Sets Unused Home Directory
        $HomeDir = $FolderPath+"\"+$folder
        #Sets Complete Destination Path
        $DestinationDir = $Destination+"\"+$folder
        
        #Forces Error Checking To Output To Log and Not Console
        $ErrorActionPreference = "Stop"
        
        #Checks For Errors
        Try 
        { 
        
            #This has to be used to copy across volumes
            #Copy Items Into Destiation
            Copy-Item -Recurse $HomeDir $DestinationDir -Force
          
        }
        Catch
        {
         
            "***********************************************************Error***********************************************************" | Out-File $OutPutErrorLogPath -Append
            "User: $folder" | Out-File $OutPutErrorLogPath -Append
     
             #Logs All Errors Besides The One Above
             $_ | Out-File $OutPutErrorLogPath -Append
             
            "***************************************************************************************************************************" | Out-File $OutPutErrorLogPath -Append
             
        }
         
         
            ###################################################
            #Checks If Home Directory Was Copied Before Remove 
            if ((Test-Path -path $DestinationDir) -eq $True)
            {
                
                #Forces Error Checking To Output To Log and Not Console
                $ErrorActionPreference = "Stop"
                
                #Checks For Errors
                Try 
                { 
                    
                    #Remove Home Directory
                    #NOTE: DO NOT USE Remove-Item -Recurse -Force $HomeDir or you will get false positive results. 
                    #      The results will tell you that the $HomeDir is not empty when it really is.
                    cmd.exe /c RD /S /Q $HomeDir
                    
                        #Checks If Home Directory Was Removed On First Try
                        #If Home Directory Exists Still It Will Wait 10 Seconds And Try Again
                        #Does This If Folder Is Still Being Released
                        if ((Test-Path -path $HomeDir) -eq $True)
                        {
                            #10 Seconds Sleep
                            Start-Sleep -s 10
                            
                            #NOTE: DO NOT USE Remove-Item -Recurse -Force $HomeDir or you will get false positive results. 
                            #      The results will tell you that the $HomeDir is not empty when it really is.
                            #Remove Home Directory
                            cmd.exe /c RD /S /Q $HomeDir
                            
                        } 
         
                }
                Catch
                {
                
                    "***********************************************************Error***********************************************************" | Out-File $OutPutErrorLogPath -Append
                    "User: $folder" | Out-File $OutPutErrorLogPath -Append
         
                    #Logs All Errors Besides The One Above
                    $_ | Out-File $OutPutErrorLogPath -Append
                 
                    "***************************************************************************************************************************" | Out-File $OutPutErrorLogPath -Append
                 
                }

            }
            ###################################################
             
         #Checks If Home Directory Was Removed  
         if ((Test-Path -path $HomeDir) -eq $False)
         {
             
             #Checks If Home Directory Was Copied Into Destination Path  
             if ((Test-Path -path $DestinationDir) -eq $False)
             {
                    
                #Gets Current Date and Time For Log Entry
                $LogEntryDate = Get-Date –Format G
                
                 #Log Source Path Was Removed
                Add-Content -Path $UnusedDirMoveLogPath -Value "******************************************************************************************************************"
                Add-Content -Path $UnusedDirMoveLogPath -Value "Log Entry Date: $LogEntryDate"
                Add-Content -Path $UnusedDirMoveLogPath -Value "\\\///User: $folder\\\///"  
                Add-Content -Path $UnusedDirMoveLogPath -Value "Error Report: Home Directory Did Not Move Correctly"
                
             }
             Else
             {
                #Gets Current Date and Time For Log Entry
                $LogEntryDate = Get-Date –Format G
                
                #Log Source Path Was Not Removed
                Add-Content -Path $UnusedDirMoveLogPath -Value "******************************************************************************************************************"
                Add-Content -Path $UnusedDirMoveLogPath -Value "Log Entry Date: $LogEntryDate"
                Add-Content -Path $UnusedDirMoveLogPath -Value "\\\///User: $folder\\\///"
                Add-Content -Path $UnusedDirMoveLogPath -Value "Success Report: Home Directory Path Was Moved"
            
             }
             
         }
         Else
         {
            #Gets Current Date and Time For Log Entry
            $LogEntryDate = Get-Date –Format G
            
            #Log Source Path Was Not Removed
            Add-Content -Path $UnusedDirMoveLogPath -Value "******************************************************************************************************************"
            Add-Content -Path $UnusedDirMoveLogPath -Value "Log Entry Date: $LogEntryDate"
            Add-Content -Path $UnusedDirMoveLogPath -Value "\\\///User: $folder\\\///"

            Add-Content -Path $UnusedDirMoveLogPath -Value "Error Report: Home Directory Did Not Move Correctly"
        
         }
                 
    }

}

Neally · 2018-03-20T15:07:33.000Z

Or use a regular filter

Get-aduser -filter "samaccountname -eq '$($folder.name)'"

jitensh · 2018-03-20T15:12:13.000Z

or simplest


```
$folders = Get-ChildItem $FolderPath |select -exp Name

#Loops Through Each Home Directory Folder
ForEach ($folder in $folders) {
get-aduser $folder
}
```

$ErrorActionPreference='stop'
$homes=GCi c:\home\users |select -exp name
Foreach($home in $homes){
Try{
get-aduser $home |Out-Null

}
catch{
Write-Warning "$Error[0] $home not found"
Remove-Item c:\home\$home -WhatIf
}
}

jonathanjones7819 · 2018-03-20T15:17:19.000Z

Sorry, new to powershell, do you mean from this: $User = Get-ADUser -LDAPFilter “(sAMAccountName=$folder)” TO this: $User = Get-ADUser -Filter “sAMAccountName -eq ‘$(folder.name)’”?

Neally · 2018-03-20T15:22:19.000Z

jonathan jones4:

Sorry, new to powershell, do you mean from this: $User = Get-ADUser -LDAPFilter “(sAMAccountName=$folder)” TO this: $User = Get-ADUser -Filter “sAMAccountName -eq ‘$(folder.name)’”?

yep

get-childitem gets the name of the folder and you only want it to compare that to the foldername ($folder.name) of the object.

jonathanjones7819 · 2018-03-20T15:25:47.000Z

Ah, that works perfectly! Thanks so much!

Neally:

jonathan jones4:

Sorry, new to powershell, do you mean from this: $User = Get-ADUser -LDAPFilter “(sAMAccountName=$folder)” TO this: $User = Get-ADUser -Filter “sAMAccountName -eq ‘$(folder.name)’”?

yep

get-childitem gets the name of the folder and you only want it to compare that to the foldername ($folder.name) of the object.

Neally · 2018-03-20T15:32:05.000Z

I’d suggest you give the BA to Martin as he mentioned it before me.

Powershell GetADuser erroring out Programming & Development

Without seeing the code it's hard to say, but guess I will I reckon this might be the change you need: $folderName = $folder.Name Get-ADUser -LDAPFilter "(sAMAccountName=$folderName)"

psophos · 2018-03-20T15:44:06.000Z

Neally:

I’d suggest you give the BA to Martin as he mentioned it before me.

Powershell GetADuser erroring out

I have to say, it was a damn fine guess on my part