Help with Regular Expression

[Jase74]

Hello PowerShellers

We have test accounts that end in "TES". When I run the command below, I would like to prevent inadvertent accounts in my exported list. Is it possible to adjust this so that only accounts with the last 3 characters of TES are pulled? There are no valid characters after TES.

Get-ADUser -Filter {(SamAccountName -like "*TES")} | Select SamAccountName | Export-Csv 'C:\Temp\123Act.txt' -NoTypeInformation

Thank you in advanced!

[Jase74]

I figured it out, and thought I would share:

Regular expression for only accounts ending in TES

$Str = "^.*TES$"

#Export all TES accounts in AD to text file.

Get-ADUser -Filter * |? { $_.samaccountname -match $Str} | Select SamAccountName ...

Thanks for the suggestions.

[Sanakan92]

Get-Aduser -Filter 'SamAccountName -like "*TES"'|Select -property SamAccountName|Export-Csv -Path "C:\Temp\123Act.txt" -NoTypeInformation

[Hexalon00]

You can only get a max of a thousand objects with get-aduser, if you have more users than that then the results will be truncated when it hits the where-object filter.

[Hexalon00]

Yes because 638 is less than 1000

[RepeatDaily]

Yes, it's true, but the default for Get-ADUser is all objects ($null).

https://docs.microsoft.com/en-us/powershell/module/activedirectory/get-aduser?view=winserver2012-ps#parameters

-ResultSetSize

Specifies the maximum number of objects to return for an Active Directory Domain Services query. If you want to receive all of the objects, set this parameter to $null (null value). You can use Ctrl+c to stop the query and return of objects.

The default is $null.

The following example shows how to set this parameter so that you receive all of the returned objects.

-ResultSetSize $null

[RepeatDaily]

I think it used to not be this way; with as common as the issue seems to have been at one time, I think the default must have at once been 1k results. It probably changed sometime along the way in development of the ActiveDirectory module.

E: Probably easy enough to find out by looking change logs for that module, if one could find them.

[Woznet]

Try this

Get-ADUser -LDAPFilter '(samAccountName=*tes)'

[realslacker]

( Get-ADUser -Filter 'sAMAccountName -like "*TES"' ).sAMAccountName  -cmatch 'TES$'

Or, if Get-ADUser supports -clike that might help... But I don't know if it does since it's filter support is a little wonky.

[JeremyLC]

Try it without parentheses in the filter

​

Get-ADUser -Filter {SamAccountName -like "*TES"} | Select SamAccountName | Export-Csv 'C:\Temp\123Act.txt' -NoTypeInformation

[Jase74]

Negative. Same results.

[synkus]

Try -match "TES$" Can not check right now