使用Get-ADUser通过PowerShell（显示名称和EmployeeID）进行Active Directory导出

Question

I want to export list all AD User Accounts with just employeeid attribute form my domain where I want to exclude a particular OU -- want to exclude all of them. Here is the script I ran, but did not work no luck BTW must be non-null Employee IDattribute

$OUDN = "OU=Service Accounts,OU=Accounts,DC=domain,DC=tld"
Get-ADUser -Properties mail |select name,samaccountname,mail,manager,department,employeeid -Filter {Enabled -eq $true} | Where-Object { $_.DistinguishedName -notlike "*,$OUDN" }

Other Code:

$OUDN = "OU=Service Accounts,OU=Accounts,DC=domain,DC=tld"
    Get-ADUser -properties CN,Title,samaccountname,mail,displayname,manager,department,distinguishedname,employeeid  | select-object CN,Title,employeeid,mail,@{n=”PRODID”;e=”samaccountname”},DisplayName,@{n=”Manager Name”;e={(Get-ADuser -identity $_.Manager -properties displayname).DisplayName}},@{n=”ManagerID”;e={(Get-ADuser -identity $_.Manager –properties samaccountname).samaccountname}},Department -Filter {Enabled -eq $true} | Where-Object { $_.DistinguishedName -notlike "*,$OUDN" }

Answer 1

Your Filter parameter is in the wrong place (Select-Object), it should be used with Get-ADUser.

Get-ADUser -properties CN,Title,samaccountname,mail,displayname,manager,department,distinguishedname,employeeid -Filter {Enabled -eq $true -and employeeID -like '*' } |
    select-object CN,Title,employeeid,mail,
        @{n=”PRODID”;e=”samaccountname”},DisplayName,
        @{n=”Manager Name”;e={(Get-ADuser -identity $_.Manager -properties displayname).DisplayName}},
        @{n=”ManagerID”;e={(Get-ADuser -identity $_.Manager –properties samaccountname).samaccountname}},
        Department  |
    Where-Object { $_.DistinguishedName -notlike "*,$OUDN" }