Finding AD Users with No Logon Script using PowerShell

Finding AD Users with No Logon Script Using PowerShell

PowerShell Script to Find Users with No Logon Script

Login scripts failing to configure is one of the most commonly seen errors when user accounts are provisioned in Active DirectoryThis is especially true when user accounts are provisioned in bulk. Users created or configured without a logon script may miss critical application configuration data, may have restricted access to network drives and devices, and can also miss critical updates and security patches thereby increasing security risk and calls to the help desk. It is important for administrators to be on top of such accounts with no logon scripts to ensure the efficient functioning of the Windows environment. 

However, Active Directory’s built-in tools don’t give you the option of without manually checking every user account. But you can make use of PowerShell scripts, like the following ones,  to find users with no logon scripts. 

Method 1:

  1. import-module activedirectory
  2. Get-ADUser -LDAPFilter "(&(objectCategory=Person)(objectClass=User)(!scriptPath=*)(!isCriticalSystemObject=TRUE))"
This first method uses an LDAP query on the “scriptPath” attribute in Active Directory.

Method 2:

  1. import-module activedirectory
  2. Get-ADUser -filter {-not (scriptpath -like "*")}
Stay on top of failed logon script configuration with the above scripts and manage your AD environment without any hassles.