PowerShell AD

[Django x2]

Does anyone know of a way to set each AD user account to "never expire" in AD? I can't seem to do it for all users, but can for individual users.

 

[xbenjiiman]

Not a powershell pro by any means but something like this should work, obviously changing the OU/DC.

Import-Module ActiveDirectory  
 $users = $i = $null  
 $users = Get-ADUser - Filter * -SearchBase "ou=ou,dc=dc" 
 ForEach($user in $users)  
  {  
    "modifying $($user.name)"  
    Clear-ADAccountExpiration -Identity $user
    $i++  
 }  
"modified $i users"

 

[Django x2]

Cool thanks. If I wanted to make it across all users in all OUs I guess I would just do "dc=mydomain.com" or whatever?

 

[Bry]

Can be done much simpler:

get-aduser -filter * -ResultSetSize $null| Clear-ADAccountExpiration -whatif

will show you what it will do, take whatif off to actually do the action

get-aduser -filter * -ResultSetSize $null| Clear-ADAccountExpiration

 

[xbenjiiman]

Cool thanks. If I wanted to make it across all users in all OUs I guess I would just do "dc=mydomain.com" or whatever?

Should work, if not then you may need to specify each OU.

Edit: Above is a better answer, never thought of piping it.

 

[Django x2]

Above is good too but I like the fact your one tells me how many users have been modified