[PowerShell每日技巧]查看本地用户(20131223)

DAIC

Did you know that you can actually search for local user accounts, much like you can search for domain accounts?

Here is an example code that searches for all local accounts with a name that starts with "A" and are enabled:

1. Add-Type -AssemblyName System.DirectoryServices.AccountManagement
   
2. 
   
3. $type = New-Object -TypeName System.DirectoryServices.AccountManagement.PrincipalContext('Machine', $env:COMPUTERNAME)
   
4. 
   
5. $UserPrincipal = New-Object System.DirectoryServices.AccountManagement.UserPrincipal($type)
   
6. 
   
7. # adjust your search criteria here:
   
8. $UserPrincipal.Name = 'A*'
   
9. # you can add even more:
   
10. $UserPrincipal.Enabled = $true
    
11. 
    
12. $searcher = New-Object System.DirectoryServices.AccountManagement.PrincipalSearcher
    
13. $searcher.QueryFilter = $UserPrincipal
    
14. $results = $searcher.FindAll();
    
15. 
    
16. $results | Select-Object -Property Name, LastLogon, Enabled

复制代码

Likewise, to find all enabled local accounts with a password that never expires, try this:

1. Add-Type -AssemblyName System.DirectoryServices.AccountManagement
   
2. 
   
3. $type = New-Object -TypeName System.DirectoryServices.AccountManagement.PrincipalContext('Machine', $env:COMPUTERNAME)
   
4. 
   
5. $UserPrincipal = New-Object System.DirectoryServices.AccountManagement.UserPrincipal($type)
   
6. 
   
7. # adjust your search criteria here:
   
8. $UserPrincipal.PasswordNeverExpires = $true
   
9. $UserPrincipal.Enabled = $true
   
10. 
    
11. $searcher = New-Object System.DirectoryServices.AccountManagement.PrincipalSearcher
    
12. $searcher.QueryFilter = $UserPrincipal
    
13. $results = $searcher.FindAll();
    
14. 
    
15. $results | Select-Object -Property Name, LastLogon, Enabled, PasswordNeverExpires

复制代码

http://powershell.com/cs/blogs/tips/archive/2013/12/23/searching-for-local-user-accounts.aspx