Why Does Get-ADObject Not Filter ObjectClass="user" Correctly?

Question

Problem

Get-ADObject -Filter {ObjectClass = "User"}

Returns both users and computers. The object classes display correctly as "user" or "computer".

Get-ADobject -Filter {ObjectClass = "Computer"}

Returns only computers.

Other Observations

Get-ADObject "CN=desktop1,CN=Computers,DC=contoso,DC=com" `
| Get-Member -Property ObjectClass

Returns

TypeName: Microsoft.ActiveDirectory.Management.ADObject

Name              MemberType            Definition
----              ----------            ----------
ObjectClass       Property              System.String ObjectClass {get;set;}

Furthermore, this returns False, as expected:

$(Get-ADObject "CN=desktop1,CN=Computers,DC=contoso,DC=com").ObjectClass -eq "User"

Ansgar Wiechers · Accepted Answer · 2013-07-31 18:24:29Z

8

Queries with objectClass=User return user and computer objects, because the computer class is derived from the user class. If you want just user objects, filter for objectClass=User and objectCategory=Person. See here.

answered Jul 31, 2013 at 18:24

Ansgar Wiechers

202k27 gold badges286 silver badges363 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Tohuw Over a year ago

Ah! I had expected them to be exclusive, because I see them both as top schema objects and missed the "subClassof" property of "computer" being equal to "user". I did not realize the association existed. Thank you very much.

Collectives™ on Stack Overflow

Why Does Get-ADObject Not Filter ObjectClass="user" Correctly?

Problem

Other Observations

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

Problem

Other Observations

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related