logon

$ErrorActionPreference = "Stop"
 
Function listUsers ($group) {
	trap {
		Write-Host "-ERROR-"
        Write-Host "Cannot connect to $domain" -BackgroundColor red -ForegroundColor Black
		Write-Host
		exit
    }  
 
	foreach ($member in $group.member)
	{
		Write-Progress -activity "List users" -status "Search ..." 
 
		$mem = [ADSI] "LDAP://$member"
 
		If ($mem.grouptype) {
			listUsers $mem
		} Else {
			[string]$username = $mem.cn
			[string]$groupname  = $group.cn
			[Boolean]$disable = $mem.psbase.invokeget("AccountDisabled")
			[string]$lastLogon = $(get-date 1/1/1601).adddays(($(&dsquery * $mem.distinguishedName -attr lastLogonTimestamp)[1].Trim())/(60*10000000)/1440)
 
			If (($xmlOutput.SelectNodes("/data/users[path='" + $mem.path + "']")).count -eq 0) {
				$root = $xmlOutput.CreateElement("users")
				$root.set_InnerXML("<username>"+$mem.cn+"</username><path>"+$mem.path+"</path><groups>"+$group.cn+"</groups><disabled>"+$disable+"</disabled><lastlogon>"+$lastLogon+"</lastlogon>")
				$xmlOutput.data.AppendChild($root) > $NULL
			}
			Else{
				$groups = $xmlOutput.SelectNodes("/data/users[path='" + $mem.path + "']/groups").item(0).get_innerText() + ", " + $group.cn
				$node = $xmlOutput.data.users | where {$_.path -eq $mem.path}
				$node.groups = $groups
			}
		}
	}
}
 
 
if ($args.count -lt 1) {
	Write-Host
	Write-Host "LIST USERS v1.0"
	Write-Host "Copyright (c) 2010 Weis Michal"
	Write-Host
	Write-Host "EXAMPLE: listGroups.ps1 ""cn=administrators,cn=builtin,dc=test,dc=local"""
	Write-Host
	exit
}
 
[string]$domain = "LDAP://" + $args[0]
$group = [ADSI] $domain
 
$xmlOutput = [xml] @"
< ?xml version="1.0" standalone="yes"?>
<data>
<users></users>
</data>
"@
Write-Host
listUsers $group
 
ForEach ($user in $xmlOutput.data.users) {
	If ($user.username) {
		Write-Host "Username: " $user.username.toUpper() -ForegroundColor Yellow
		Write-Host $user.path
		Write-Host "Groups :" $user.groups
		If ($user.disabled -eq "True") {
			Write-host "Account is disabled" -ForegroundColor Green
		} Else {
			Write-Host "Account is enabled"
		}
		Write-Host "Last logon:" $user.lastlogon
		Write-host
	}
}