Finding and modifying users with passwordneverexpires set to true

This topic contains 2 replies, has 2 voices, and was last updated by  Jeff Hincks 4 years, 1 month ago.

  • Author
  • #15572

    Jeff Hincks


    I am relatively new to Powershell and having issues. I am attempting to find all users with passwordneverexpires set to true (who match other criteria like being enabled accounts, non service accounts, etc) and then change the setting to false. Attached is a script that I am trying to use to accomplish the task. I discovered that the set-aduser cmdlet does not accept pipeline input for passwordneverexpires. Is there another way to accomplish this. I would also like the accounts that were changed to be dumped into a csv file. Thanks for any assistance.

  • #15579

    Peter Jurgens

    Try removing the Select-Object cmdlet before the Set-ADUser. The output of Select-Object is System.Management.Automation.PSObject which is not accepted by any parameters on the Set-ADUser cmdlet. Whereas, Get-ADUser returns Microsoft.ActiveDirectory.Management.ADUser, which will be bound to the -Identity parameter when sent through the pipeline to Set-ADUser.

  • #15585

    Jeff Hincks

    Peter, that was it. The select-object cmdlet was causing the problems. Thank you!

You must be logged in to reply to this topic.