PowerShell Command to get a list of Users ENABLED in the last 24hrs in AD

Question

Is there a PowerShell command to query a list of users enabled in the last 24 hrs in AD? I have one for recently created, but need one for User's enabled in the last 24 hours now.&nbsp; Thanks in advance for any help provided.

farismalaeb · Answer

$date=[datetime]::Today.AddDays(-1)Get-ADUser -Properties WhenCreated -Filter 'WhenCreated -ge $Date'If this answer helped, PLease click on Best response.

microchipmatt · Answer

farismalaeb&nbsp;does -ge stand for get enabled?&nbsp; If so, Interesting, I will try this 🙂

microchipmatt · Answer

I'm pretty sure this will only query users created in the last 24hrs....I'm looking for a script that will identify any users enabled in the last 24 hrs.

farismalaeb · Answer

Oh yes,To get the enabled users within 24, you will need to read this information from Windows EventLog\Security.Just make sure that the Account Management Group Policy is enabled.And use the following line of code to get the information.$date=Get-dateGet-WinEvent -FilterHashtable @{Logname="Security";ID="4722";StartTime=$date.AddDays(-1);EndTime=$date}

Forum Discussion

PowerShell Command to get a list of Users ENABLED in the last 24hrs in AD

Share

Resources