Change Pwd Right: Part 2

Message Topic Search Topic Options Post Reply Create New Topic Printable Version

   Code works, and handles the nested stuff like it should but I have a 
snag. Any user outside the domain in which I run the code with the 
change pwd right is reported as a damn SID. This is a standard 
international forest with the following structure root.com, 
amer.root.com, emea.root.com, asia.root.com.

# -------------------------------------------------------------------------------------------------------------
# Get AD Users then enumerate User, Groups, Nested Groups & all Members with Change Pwd Right
#--------------------------------------------------------------------------------------------------------------
#
#
#
Set-QADProgressPolicy –ShowProgress $true –ProgressThreshold 2 | Out-Null
Get-QADUser
 -size 0 -SearchRoot "OU=aaScriptTest,DC=domaintest,DC=com" | 
Get-QADPermission -Allow -ExtendedRight "User-Change-Password" 
-Inherited | Where {$_.account.Name -notmatch "everyone|exchange" } | 
ForEach {
    if ($_.account.Type -eq 'group')
    {
        return (Get-QADGroupMember $_.account -Indirect)
    }
    else
    {
        return $_.account
    }
} | Export-Csv c:\CSV\Test.csv 

Thanks,
Eric