Friday, June 1, 2018

Powershell command will return all deleted objects from Active Directory



Get-ADObject -Filter {(isdeleted -eq $true) -and (name -ne "Deleted Objects")} -includeDeletedObjects -property *


With date range \\

[datetime]$StartTime = "8/1/2013"
[datetime]$EndTime = "9/1/2013"
Get-ADObject -Filter {(isdeleted -eq $true) -and (name -ne "Deleted Objects")} -includeDeletedObjects -property whenChanged | Where-Object {$_.whenChanged -ge $StartTime -and $_.whenChanged -le $EndTime}


[datetime]$StartTime = "8/1/2013"
[datetime]$EndTime = "9/1/2013"
Get-ADObject -Filter {(isdeleted -eq $true) -and (name -ne "Deleted Objects")} -includeDeletedObjects -property whenChanged | Where-Object {$_.whenChanged -ge $StartTime -and $_.whenChanged -le $EndTime}



No comments: