Hi,

I am querying AD using the following System.DirectoryServices.DirectorySearcher, but need to be able to search each of my DCs.

$lastLogonIntervalLimit = ((date).ToUniversalTime()).AddDays(-30).ToFileTime()
$strFilter = "(&(objectCategory=person)(objectClass=user)(lastlogon<="+$lastLogonIntervalLimit+"))" $objDomain = New-Object System.DirectoryServices.DirectoryEntry
$objSearcher = New-Object System.DirectoryServices.DirectorySearcher
$objSearcher.SearchRoot = $objDomain
$objSearcher.PageSize = 100
$objSearcher.Filter = $strFilter
$objSearcher.SearchScope = "Subtree"
$strProps = "samaccountname,displayname,lastlogon"
$strProps.split(",") | %{[void]$objSearcher.PropertiesToLoad.Add($_);}
$StrResults = $objSearcher.findall()
$StrResults.Count

I already have a list of my DCs using the below query, but am not sure how todo the search/query agaist one domain controller at a time.

$StrDCs = [System.DirectoryServices.ActiveDirectory.Domain]::getcurrentdomain() | foreach{$_.DomainControllers | foreach{$_.Name}}

I can't use the quest commands as they are not installed on the domain and need to use native commands to Powershell 1.0 or 2.0.

Cheers
James

Sorted it now:

$StrDCs = [System.DirectoryServices.ActiveDirectory.Domain]::getcurrentdomain() | foreach{$_.DomainControllers | foreach{$_.Name}}

$lastLogonIntervalLimit = ((date).ToUniversalTime()).AddDays(-30).ToFileTime()

$StrDCs | foreach-object {
$Erroractionpreference = "Silentlycontinue"
$strFilter = "(&(objectCategory=person)(objectClass=user)(lastlogon<="+$lastLogonIntervalLimit+"))"
$StrEachDC = "LDAP://"+$_.split(".")[0
$objDomain = New-Object System.DirectoryServices.DirectoryEntry $StrEachDC
$objSearcher = New-Object System.DirectoryServices.DirectorySearcher
$objSearcher.SearchRoot = $objDomain
$objSearcher.PageSize = 100
$objSearcher.Filter = $strFilter
$objSearcher.SearchScope = "Subtree"
$strProps = "samaccountname,givenname,sn,displayname,lastlogon,pwdlastset,description,l,company,physicaldeliveryofficename,extensionAttribute4,useraccountcontrol,info,whencreated,lastlogontimestamp"
$strProps.split(",") | %{[void]$objSearcher.PropertiesToLoad.Add($_);}
$StrResults = $objSearcher.findall()
$Erroractionpreference = "Continue"
$StrAllResults += $StrResults
}

$StrAllResults