0 votes

I have an export that will run as a monthly scheduled task that will write output to a CSV to contain employees that have been terminated in the last month. I've initialized variable to contain the start date ($lastMonth) and added a comparison to my Search filter, but am not getting any results. I definitely have one record that contains a terminationDate. I suspect my filter is incorrect. The terminationDate attribute is stored as a string and I'm attempting to compare it with a date. If I remove the terminationDate <=... filter, I get the one record I'm expecting. I'm attaching a snippet below...

$lastMonth = (Get-Date).AddMonths(-1).ToFileTime()

# Get AdsPath of target object
$targetObject = $Context.BindToObjectByDN("%distinguishedName%")
$targetObjectPath = $targetObject.ADsPath

# Search all users in the target OU
$userSearcher = New-Object "Softerra.Adaxes.Adsi.Search.DirectorySearcher" $NULL, $False
$userSearcher.SearchParameters.BaseObjectPath = $targetObjectPath
$userSearcher.SearchParameters.PageSize = 1000
$userSearcher.SearchParameters.SearchScope = "ADS_SCOPE_SUBTREE"
# Filter for ALL objects where employeeID doesn't contain zeros or 'NMU' and employeeID is not blank and mail is not blank and terminationDate is populated
$userSearcher.SearchParameters.Filter = "(&(objectCategory=person)(objectClass=user)(!(employeeID=000000))(!(employeeID=NMU))(!(employeeID=?))(employeeID=*)(mail=*)(terminationDate=*)([datetime]terminationDate>=$lastMonth))"
$properties = $eachFieldIn
by (790 points)

It looks like the get-date cmdlet stores the date as an Int64 not DateTime when using "ToFileTime". Aside from that, I'm not sure if using "[datetime]terminationDate" in the filter would actually work to convert the string to datetime. You could filter on anybody that has a terminationdate attribute populated and then do the date comparison after the fact, which I realize isn't as efficient, but still an alternative.



Since dates are stored as plain text, you won't be able to compare them to the current date. In this case, the >= operator in your LDAP filter can only compare strings instead of comparing the actual dates.

To do what you need, you'll need to get the value of the terminationDate attribute of each user, convert it to a DateTime structure, and then compare it to the target date.

Can you provide the format in which dates are stored in the terminationDate attribute so we could provide you a script? Just a couple of examples of the dates stored in the attribute will be enough.


Screen capture attached.

(Active Directory Snippet with TerminationDate)

1 Answer

0 votes
by (215k points)
selected by
Best answer


Here's a code snippet that will do the job:

# Search users
$userSearcher = $Context.TargetObject
$userSearcher.PageSize = 500
$userSearcher.SearchScope = "ADS_SCOPE_SUBTREE"

# Filter for ALL objects where employeeID doesn't contain zeros or 'NMU' and employeeID is not blank and mail is not blank and terminationDate is populated
$userSearcher.SearchFilter = "(&(objectCategory=person)(objectClass=user)(!(employeeID=000000))(!(employeeID=NMU))(!(employeeID=?))(employeeID=*)(mail=*)(terminationDate=*))"

# Add terminationDate to properties that will be fetched
$propertiesToLoad = $eachFieldIn + "terminationDate"

    $searchResultIterator = $userSearcher.ExecuteSearch()
    $searchResults = $searchResultIterator.FetchAll()
    $lastMonth = (Get-Date).AddMonths(-1)

    foreach ($searchResult in $searchResults)
        # Get termination date for the user
        $terminationDateString = $searchResult.Properties["terminationDate"].Value

        # Convert to DateTime
        $terminationDate = [Datetime]::ParseExact($terminationDateString, 'MM/dd/yyyy', $NULL)

        # Check if termination date Less-than or equal to $lastMonth
        if ($terminationDate -le $lastMonth)
            # TODO: Your code here
    # Release resources used by the search

Related questions

0 votes
1 answer

I'm attaching below a snippet from a scheduled task. It's a function that receives as a parameter the employeeID, which is then used in the search filter. ... { $userInfo."$propertyName" = $searchResult.Properties[$propertyName].Value } } return $userInfo }

asked Oct 28, 2016 by sandramnc (790 points)
0 votes
0 answers

Please excuse this lengthy post but in order to fully explain my scenario, I believe it's necessary. We're using the Adaxes Web Interface to enable Department HR Reps to ... it being e-mailed. Any assistance or guidance would be greatly appreciated. Thanks...

asked Jul 19, 2016 by sandramnc (790 points)
0 votes
1 answer

Hi, I'm very new to Adaxes and still getting to grips with it. Is there any way to search or filter within the web interface, users that have an Exchange Online shared mailbox? Thanks

asked Oct 14, 2020 by sysg89 (20 points)
0 votes
1 answer

how can i create a report which gives me the details from an exchange mailbox as described in the subject? I would like to have a Report for Exchange Mailboxes with OU, Send on Behalf, Full Rights and Send As Rights thank you

asked Feb 22, 2021 by m_st (200 points)
0 votes
1 answer

Hi, is there possibility to search some custom string across all powershell script files used in Adaxes? I.e. Custom commands, Scheduled tasks etc I need to find out where is used some PowerShell command to be able to replace it for another one..

asked Apr 27, 2020 by KIT (520 points)
2,733 questions
2,469 answers
1,336,504 users