如何检查用户必须通过Powershell在下一个登录标志处更改密码

Question

我一直在报告用户必须在下次登录标志设置时更改密码的所有用户帐户，我的问题是：如何在CSV输出中设置为user must change password at next logon而不是1/1/1601 2:00:00 AM？

Get-ADUser -filter {Enabled -eq $True -and PasswordNeverExpires -eq $False} –Properties "DisplayName", "msDS-UserPasswordExpiryTimeComputed", "Title", "manager", "department", "employeeid"  | Select-Object -Property "Displayname",@{Name="ExpiryDate";Expression={[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")}},"Title",@{n=”Manager Name”;e={(Get-ADuser -identity $_.Manager -properties displayname).DisplayName}},"Department","employeeid" | sort-object -property ExpiryDate | Export-Csv -Path "c:\export\expirydatenew.csv" -NoTypeInformation -Encoding UTF8

Answer 1

select中的计算属性允许在其表达式中使用真实逻辑，因此您应该能够添加

@{Name="User must change password";Expression={if($_.pwdLastSet -eq 0){"true"} else {"false"}}}

到您的选择对象

您还需要将“pwdLastSet”添加到使用Get-ADUser查询的属性