Active Directory: Export all group Managed Service Accounts (gMSA) | Нотатки системного адміністратора

This one-liner exports all group managed Service Accounts (gMSA) from an Active Directory Domain into a .csv file.

Get-ADServiceAccount -Filter * -Properties * | `
    Select -Property Name, `
        @{name="Owner"; expression={(Get-Acl "AD:\$($_.DistinguishedName)").Owner}}, `
        Enabled, LockedOut, Description,
        @{name="LastLogonDate"; expression={ $_.LastLogonDate.toString("dd.MM.yyyy") }}, `
        @{name="PasswordLastSet"; expression={ $_.PasswordLastSet.toString("dd.MM.yyyy") }}, `
        DistinguishedName | `
        Export-Csv -Path ".\GroupManagedServiceAccounts_$((Get-ADDomain).Name).csv" `
         -NoTypeInformation -Encoding UTF8

Get-ADServiceAccount -Filter * -Properties * | `

Select -Property Name, `

@{name="Owner"; expression={(Get-Acl "AD:\$($_.DistinguishedName)").Owner}}, `

Enabled, LockedOut, Description,

@{name="LastLogonDate"; expression={ $_.LastLogonDate.toString("dd.MM.yyyy") }}, `

@{name="PasswordLastSet"; expression={ $_.PasswordLastSet.toString("dd.MM.yyyy") }}, `

DistinguishedName | `

Export-Csv -Path ".\GroupManagedServiceAccounts_$((Get-ADDomain).Name).csv" `

-NoTypeInformation -Encoding UTF8

Взято тут