如何使Powershell以逗号分隔输出Get-ADUser -Filter *？

Question

I have a simple Powershell script that I want to use to grab all the users in AD and show specific properties. Here is the heart of my script:

$id = "*"
Get-ADUser -Filter {SAMAccountName -like $id} -Properties * | Select-Object -Property SAMAccountName,Name,PasswordNeverExpires,LockedOut,PasswordLastSet,LastLogOnDate,CanonicalName 

The full script has an input parameter to set $id so that it can be a single ID, a list of IDs (such as "bsmith, jdoe, gmanning"), or * to get all accounts.

Here's my problem: When using, *, I need this to output as comma delimited.

Here's the catch: The output cannot be to a CSV file--or any other type of file.

The reason being is that I'm writing this script to be used on N-Enable's N-Central monitoring suite of software. You don't need to know N-Central to help with my problem, just understand that N-Central uses its own software to run Powershell scripts on clients and returns the results into a txt file that cannot be changed to a csv file (or formatted in any other way than what it has hard-coded).

What this means is that my results have to either be what would show up on the screen or in a variable (such as $results=Get-ADUser -Filter * ....). I cannot output to any type of file, which leaves out Export-CSV as an option.

I've tried other types of formatting to no avail (such as with -f). The issue seems to be with the way Powershell grabs all AD Users using the * wildcard. It seems to grab them all as one big object, so I am unable to get my output to have a comma between all the properties so that I get a comma-delimited output. Thus, when I get the results back from N-Central as a .txt file, all the data is there, but there are no commas in between the properties for me to then open the .txt file as comma-delimited in Excel (or tab-delimited for that matter).

Does anyone have a solution that will allow me to format Get-ADUser -filter * so that it is comma-delimited without using export to file?

UPDATE: Ok, I thought I was keeping things easy by not posting my full script but it seems I've done the opposite. So, below is my full script. Anyone should be able to run this to see the results:

function Get-ADUserInfo
{
    [CmdletBinding()]
    param(
        #[Parameter(Mandatory=$True)]
        [string[]]$Users= '*'

    )
    Begin {

        $maxPasswordAge = (Get-ADDefaultDomainPasswordPolicy).MaxPasswordAge.Days
        $Headers="ID, Name, Password Never Expires?, Locked Out, Password Last Set, Expiry Date, Last Logon Date, OU Path"

    }
    Process {
        foreach ($id in $Users)
        {
            $results=Get-ADUser -Filter {SAMAccountName -like $id} -Properties * | select -property SAMAccountName,Name, PasswordNeverExpires,LockedOut,PasswordLastSet,(@{Expression={$_.PasswordLastSet.AddDays($maxPasswordAge)}}), LastLogOnDate,CanonicalName  | `
        ConvertTo-CSV -NoTypeInformation 

        }

    }
    End {
        $Headers
        $results
        }
}

Get-ADUserInfo -Users

Some notes:

1. When calling Get-AdUserInfo -Users, the script needs to work by entering a single ID, *, or multiple IDs separated by a comma when using the -Users parameter.
2. Using ConvertTo-CSV solved my biggest problem, comma separated output,thanks all.
3. I'd like to get rid of the headers that are auto-created as well ("SAMAccountName","Name","PasswordNeverExpires","LockedOut","PasswordLastSet","$_.PasswordLastSet.AddDays($maxPasswordAge)","LastLogOnDate","CanonicalName"). How can I do that? I've tried -skip 1 but that doesn't work with * and removes everything (including the data) if used with a single ID or IDs separated with commas. I can't get -ExpandProperty to work either. Adding format-table -hidetableheaders at the end doesn't do anything as well

Answer 1

$id = "*"
$userlist = Get-ADUser -Filter {SAMAccountName -like $id} -Properties  SAMAccountName,Name,PasswordNeverExpires,LockedOut,PasswordLastSet,LastLogOnDate,CanonicalName | ConvertTo-CSV -NoTypeInformation

$userlist will be an array of users stored in CSV formatted lines

Edit: Combined -Properties * | Select [propertylist] and get rid of the pull of all properties.

Edit: included -NoTypeInformation so that the output is pure CSV.

Note: Something should be done about the filter.

Answer 2

So you could use something like this then

$props = "SAMAccountName","Name","PasswordNeverExpires","LockedOut","PasswordLastSet","LastLogOnDate","CanonicalName"
$results = Get-ADUser -Filter * -Properties $props | Select $props | ConvertTo-Csv -NoTypeInformation

This uses the $props array to make the actual query readable and enforce property order. Most of those properties are returned by default, like samaccountname , so it is not required to specify them but no harm done.

$results would contain a quoted comma delimited output. If the quotes bother you they should be removed with a simple -replace

$results = $results -replace '"'

Aside

As others have mentioned you are wasting time using -Properties * you should only return the properties that you need. Which is, again, why I used $props .

Update from comments

If you want to remove the header column you just need to -Skip that from the output. At the end of the code that populates results just add Select-Object

$results = Get-ADUser -Filter * -Properties $props | Select $props | ConvertTo-Csv -NoTypeInformation | Select-Object -Skip 1

Also to cover your calculated property the easiest way that I have found so far is to add another Select-Object . Not the way I would want to but for now it works.

$results = Get-ADUser -Filter * -Properties $props | 
    Select $props | Select-Object *,@{L="pWD";Expression={$_.PasswordLastSet.AddDays($masPasswordAge)}} | 
    ConvertTo-Csv -NoTypeInformation | Select-Object -Skip 1

Game Changer

So you made some pretty big changes to your example by including your function. Try this on for size now.

function Get-ADUserInfo
{
    [CmdletBinding()]
    param(
        #[Parameter(Mandatory=$True)]
        [string[]]$Users= '*'

    )
    Begin{
        $results = @()
        $maxPasswordAge = (Get-ADDefaultDomainPasswordPolicy).MaxPasswordAge.Days
        $Headers= @{Label="ID";Expression={$_.SAMAccountName}},
        @{Label="Name";Expression={$_.Name}},
        @{Label="Password Never Expires?";Expression={$_.PasswordNeverExpires}},
        @{Label="Locked Out";Expression={$_.LockedOut}},
        @{Label="Password Last Set";Expression={$_.PasswordLastSet}},
        @{Label="Expiry Date";Expression={$_.PasswordLastSet.AddDays($maxPasswordAge)}},
        @{Label="Last Logon Date";Expression={$_.LastLogOnDate}},
        @{Label="OU Path";Expression={$_.CanonicalName}}

    }
    Process{
        foreach ($id in $Users){
            $results += Get-ADUser -Filter {SAMAccountName -like $id} -Properties PasswordNeverExpires,LockedOut,PasswordLastSet,LastLogOnDate,CanonicalName | select $Headers 
        }
    }
    End{
        $results | ConvertTo-CSV -NoTypeInformation
    }
}

Get-ADUserInfo -Users

$Headers= contains a collection of calculate properties most of which are there the change the header. It does not need to be done this was and you could have just manually added a header line before the output of contents. This solution however is more in line with what PowerShell is capable of.

We collect all of the users in the array $results and in the End block convert that to CSV output which would not contain your custom headers.