我正在尝试导出去年删除的所有用户。 通过下面的查询,我可以导出已删除的用户,但是我还需要在结果中包含whenChanged属性:
查询
[datetime]$StartTime = "1/1/2018"
[datetime]$EndTime = "1/1/2019"
$Filter = {Deleted -eq $true -and ObjectClass -eq "user"}
$GetDeleted = Get-ADObject -Filter {(isdeleted -eq $true) -and (name -
ne "Deleted Objects")} -includeDeletedObjects -
property whenChanged,LastKnownParent |
Where-Object {$_.whenChanged -ge $StartTime -and $_.whenChanged -le
$EndTime} | sort whenChanged | ft Name,LastKnownParent,whenChanged
Get-ADObject -filter $Filter -IncludeDeletedObjects
结果:
Deleted : True
DistinguishedName : CN=XXX XXX\0ADEL:0c8597e4-95634a4e87a10af034d6a5b3,CN=Deleted Objects,DC=XXX,DC=XXX
Name : XXX XXX
DEL:0c8597e4-9563-4a4e-87a1-0af034d6a5b3
ObjectClass : user
ObjectGUID : 0c8597e4-9563-4a4e-87a1-0af034d6a5b3
你能帮我吗?
非常感谢!!!