Recommended Posts

I'm having some problems with a PowerShell script I'm writing. What the script does is pull events from the event log and send an email to the user. Everything works fine except the portion of the script where it grabs the user. 

$New_GrpUser = $event.Event.EventData.Data[0]."#text"

It grabs the user successfully, but uses the entire CN. 

CN=<redacted>,OU=Users,OU=Accounting,OU=<redacted>,DC=<redacted>,DC=local

I've tried the following with no success.

$New_GrpUser = $event.Event.EventData.Data[0]."#text"
$New_User = Get-ADUser -Filter { cn -eq $New_GrpUser } -Properties name

Can anybody help with getting the Name property from New_GrpUser? Here's the entire script.

 

$CurrTime = (get-date) - (new-timespan -hour 3)
Get-WinEvent -FilterHashtable @{LogName="Security";ID=4728;StartTime=$CurrTime}| Foreach {
$event = [xml]$_.ToXml()
if($event)
{
    $CurrTime = Get-Date $_.TimeCreated -UFormat "%Y-%d-%m %H:%M:%S"
    $New_GrpUser = $event.Event.EventData.Data[0]."#text"
    $New_User = Get-ADUser -Filter { cn -eq $New_GrpUser } -Properties name
    $AD_Group = $event.Event.EventData.Data[2]."#text"
    $AdminWhoAdded = $event.Event.EventData.Data[6]."#text"
    $dc = $event.Event.System.computer

Send-MailMessage -SmtpServer SMTPSERVER -From smtp@example.com -To admin@example.com -Subject "$New_User has been added to the $AD_Group group" -Body "Added by $AdminWhoAdded" -Priority High
}
}

 

Edited by Jason S.
removed PII
Link to comment
https://www.neowin.net/forum/topic/1394348-powershell-get-aduser-help/
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • anyone know of any VNC viewers that can do a full 4k and scaling to a mac from windows? RDP does it fine from a mac to windows and windows to windows... but I can't seem to get it to do 4k with UltraVNC and have it scaled to match from windows to the mac
    • At least on Mint... Debian is the 'backup' option (i.e. LMDE6) where as regular Mint is Ubuntu. also, Debian tends to play stuff a bit more conservatively than Ubuntu (at least based on Mint) with kernel and programs. also, even Mint's 'Update Manager' is more refined in regular Mint vs LMDE6 and installing NVIDIA driver is easier on regular Mint etc. not only that but LMDE6 only comes with Cinnamon which is a shame as they should offer the option for Xfce. I realize playing around with it in a VM one can install Xfce on it but it would be nice to have a more official Xfce release like how the regular Mint does. so while I heard Debian is a little snappier than Ubuntu (so better on some level), Ubuntu is probably the overall wiser choice unless people don't mind using a bit older stuff etc. but honestly, with some tweaks I would not mind if they changed the main Mint to Debian base instead of Ubuntu. but that's probably not likely to happen unless Ubuntu really does something the Mint team does not like. p.s. but I was building Super Mario 64 (native PC port on Linux) a while ago and it does not like regular Mint but works fine on LMDE6. but at that point I just transferred the final binary out of the VM back to my regular Mint and it works fine.
    • Excel is getting a highly requested PivotTable feature by Usama Jawad Microsoft Excel is one of the most popular software out there, both in the enterprise and personal space. It has a variety of use-cases including data analysis, data crunching, visualizations, and even planning and organization assistance. Microsoft regularly updates Excel with new features, and now, it is introducing a notable feature for PivotTables. Prior to today, PivotTables required a manual refresh from the user whenever new data was inserted into them. This wasn't a particularly complicated process, but it was tedious, so based on significant user feedback, Microsoft has decided to implement auto-refresh capabilities in PivotTables. The good thing is that Auto Refresh is enabled for all new PivotTables by default, but you can choose to disable it by selecting a PivotTable, navigating to the PivotTable Analyze tab, and then clicking on Auto Refresh. It is important to note that Auto Refresh is applicable on a per data source level, which means that the feature's state (on or off) will apply to all PivotTables derived from that source. Additionally, if Auto Refresh is disabled or a PivotTable is unable to synchronize, a message at the bottom of your workbook will say "PivotTable Refresh Needed". Once you click on it, all outdated PivotTables will refresh. Finally, you should keep in mind that external and asynchronous data sources do not support Auto Refresh and that the feature may become unavailable when a co-author is using an older version of Excel or if you are playing around with volatile functions like RAND() and NOW() in your data source. Auto Refresh for PivotTables is available right now in the Beta Channel for Excel for Windows version 2506 (Build 19008.2000) or later, and Excel for Mac version 16.99 (Build 250616106) or later. If you don't see it yet, it's better to wait as new capabilities are often rolled out in a staggered manner.
    • Hell of a legacy, hell of a bad person...
  • Recent Achievements

    • First Post
      Electronic Person earned a badge
      First Post
    • Week One Done
      CyberCeps666 earned a badge
      Week One Done
    • Very Popular
      d4l3d earned a badge
      Very Popular
    • Dedicated
      Stephen Leibowitz earned a badge
      Dedicated
    • Dedicated
      Snake Doc earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      627
    2. 2
      ATLien_0
      242
    3. 3
      Xenon
      163
    4. 4
      neufuse
      130
    5. 5
      +FloatingFatMan
      124
  • Tell a friend

    Love Neowin? Tell a friend!