PowerShell Multiple -and operators?

Question

Is there a simpler way to do this? Or does it require me to type out each -and/-notlike for each of the criteria?

Where-Object {$_.DistinguishedName -like "<Enter Domain OU>"} |
Select-Object UserPrincipalName | 
Where-Object `
{$_.UserPrincipalName -notlike 'a-*' `
-and $_.UserPrincipalName -notlike 'falkon*' `
-and $_.UserPrincipalName -notlike 'test*' `
-and $_.UserPrincipalName -notlike '*whiteboard*' `
-and $_.UserPrincipalName -notlike '*CSC*' `
-and $_.UserPrincipalName -notlike '*autopilot*'} |
Sort-Object UserPrincipalName

you can always use -match: $_.UserPrincipalName -match "a-|falkon|test|whiteboard|CSC". Since it looks like you're querying AD, you can use the filter to search for those keywords at runtime as well. — Abraham Zinala
– Abraham Zinala, Commented Feb 28, 2022 at 22:41

js2010 · Accepted Answer · 2022-03-01 00:41:11Z

1

Unfortunately, he can't use -match in an AD filter, but he can use -notlike. The poster can drop the backticks and use operators to continue lines at least. Distinguishedname can't be in an AD filter.

get-aduser -filter "UserPrincipalName -notlike 'a-*' -and
  UserPrincipalName -notlike 'falkon*' -and
  UserPrincipalName -notlike 'test*' -and
  UserPrincipalName -notlike '*whiteboard*' -and
  UserPrincipalName -notlike '*CSC*' -and
  UserPrincipalName -notlike 
  '*autopilot*'" -searchbase 'DC=stackoverflow,DC=com' -resultsetsize 1

edited Mar 1, 2022 at 0:41

answered Mar 1, 2022 at 0:34

js2010

28.3k6 gold badges82 silver badges88 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Santiago Squarzon · Accepted Answer · 2022-03-01 06:37:04Z

0

You can do the following string manipulation to build an LDAP Filter for less verbosity on your script and to leverage Active Directory Filtering capabilities.

Worth mentioning, as more users are under the SearchBase Organizational Unit the faster -Filter / -LDAPFilter becomes compared to Where-Object.

$ou = 'OU=some,OU=ou,DC=some,DC=domain'
$notLike = 'a-*', 'falkon*', 'test*', '*whiteboard*', '*CSC*', '*autopilot*'
$filter = '(&(!userprincipalname={0}))' -f ($notLike -join ')(!userprincipalname=')

$params = @{
    SearchBase  = $ou
    SearchScope = 'OneLevel' # Or SubTree for all child OUs under `$ou`
    LDAPFilter  = $filter
}
Get-ADUser @params | Sort-Object UserPrincipalName

edited Mar 1, 2022 at 6:37

answered Mar 1, 2022 at 6:26

Santiago Squarzon

65.7k5 gold badges26 silver badges60 bronze badges

2 Comments

kooleosis Over a year ago

Unfortunately that didn't return anything. I am not too familiar with the -filter parameter either.

Santiago Squarzon Over a year ago

@kooleosis if it didn't return anything is likely because there are no users under the "SearchBase" OU which's userprincipalname is "not like" the wildcards in $notLike

Collectives™ on Stack Overflow

PowerShell Multiple -and operators?

2 Answers 2

Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related