Get-ADUser возвращает лишь 17 из 110 атрибутов и свойств, привязанных к учетной записи пользователя AD, но это можно исправить, добавив параметр -properties (или -pr) к предложению Get-ADUser.
Property |
Syntax |
R/RW |
lDAPDisplayName |
AccountExpirationDate |
DateTime |
RW |
accountExpires, converted to local time |
AccountLockoutTime |
DateTime |
RW |
lockoutTime, converted to local time |
AccountNotDelegated |
Boolean |
RW |
userAccountControl (bit mask 1048576) |
AllowReversiblePasswordEncryption |
Boolean |
RW |
userAccountControl (bit mask 128) |
BadLogonCount |
Int32 |
R |
badPwdCount |
CannotChangePassword |
Boolean |
RW |
nTSecurityDescriptor |
CanonicalName |
String |
R |
canonicalName |
Certificates |
ADCollection |
RW |
userCertificate |
ChangePasswordAtLogon |
Boolean |
W |
If pwdLastSet = 0 |
City |
String |
RW |
l |
CN |
String |
R |
cn |
Company |
String |
RW |
company |
Country |
String |
RW |
c (2 character abbreviation) |
Created |
DateTime |
R |
whenCreated |
Deleted |
Boolean |
R |
isDeleted |
Department |
String |
RW |
department |
Description |
String |
RW |
description |
DisplayName |
String |
RW |
displayName |
DistinguishedName |
String (DN) |
R |
distinguishedName |
Division |
String |
RW |
division |
DoesNotRequirePreAuth |
Boolean |
RW |
userAccountControl (bit mask 4194304) |
EmailAddress |
String |
RW |
mail |
EmployeeID |
String |
RW |
employeeID |
EmployeeNumber |
String |
RW |
employeeNumber |
Enabled |
Boolean |
RW |
userAccountControl (bit mask not 2) |
Fax |
String |
RW |
facsimileTelephoneNumber |
GivenName |
String |
RW |
givenName |
HomeDirectory |
String |
RW |
homeDirectory |
HomedirRequired |
Boolean |
RW |
userAccountControl (bit mask 8) |
HomeDrive |
String |
RW |
homeDrive |
HomePage |
String |
RW |
wWWHomePage |
HomePhone |
String |
RW |
homePhone |
Initials |
String |
RW |
initials |
LastBadPasswordAttempt |
DateTime |
R |
badPasswordTime, converted to local time |
LastKnownParent |
String (DN) |
R |
lastKnownParent |
LastLogonDate |
DateTime |
R |
lastLogonTimeStamp, converted to local time |
LockedOut |
Boolean |
RW |
msDS-User-Account-Control-Computed (bit mask 16) |
LogonWorkstations |
String |
RW |
userWorkstations |
Manager |
String (DN) |
RW |
manager |
MemberOf |
ADCollection |
R |
memberOf |
MNSLogonAccount |
Boolean |
RW |
userAccountControl (bit mask 131072) |
MobilePhone |
String |
RW |
mobile |
Modified |
DateTime |
R |
whenChanged |
Name |
String |
R |
cn (Relative Distinguished Name) |
ObjectCategory |
String |
R |
objectCategory |
ObjectClass |
String |
R |
objectClass, most specific value |
ObjectGUID |
Guid |
R |
objectGUID converted to string |
Office |
String |
RW |
physicalDeliveryOfficeName |
OfficePhone |
String |
RW |
telephoneNumber |
Organization |
String |
RW |
o |
OtherName |
String |
RW |
middleName |
PasswordExpired |
Boolean |
RW |
msDS-User-Account-Control-Computed (bit mask 8388608) |
PasswordLastSet |
DateTime |
RW |
pwdLastSet, local time |
PasswordNeverExpires |
Boolean |
RW |
userAccountControl (bit mask 64
Вкладка "Учетная запись", поле "Параметры учетной записи", галка "Срок действия пароля не ограничен" |
PasswordNotRequired |
Boolean |
RW |
userAccountControl (bit mask 32) |
POBox |
String |
RW |
postOfficeBox |
PostalCode |
String |
RW |
postalCode |
PrimaryGroup |
String |
R |
Group with primaryGroupToken |
ProfilePath |
String |
RW |
profilePath |
ProtectedFromAccidentalDeletion |
Boolean |
RW |
nTSecurityDescriptor |
SamAccountName |
String |
RW |
sAMAccountName |
ScriptPath |
String |
RW |
scriptPath |
ServicePrincipalNames |
ADCollection |
RW |
servicePrincipalName |
SID |
Sid |
R |
objectSID converted to string |
SIDHistory |
ADCollection |
R |
sIDHistory |
SmartcardLogonRequired |
Boolean |
RW |
userAccountControl (bit mask 262144) |
State |
String |
RW |
st |
StreetAddress |
String |
RW |
streetAddress |
Surname |
String |
RW |
sn |
Title |
String |
RW |
title |
TrustedForDelegation |
Boolean |
RW |
userAccountControl (bit mask 524288) |
TrustedToAuthForDelegation |
Boolean |
RW |
userAccountControl (bit mask 16777216) |
UseDESKeyOnly |
Boolean |
RW |
userAccountControl (bit mask 2097152) |
UserPrincipalName |
String |
RW |
userPrincipalName |