-
Title
How to retrieve Change History From Active Roles with PowerShell -
Description
Retrieve operation records from Active Roles. Each operation record represents a certain change request, whether pending or completed, in Active Roles. -
Resolution
Use this cmdlet to retrieve information about requests to make changes to directory data using Active Roles. Each request causes an operation record to be created in the Active Roles Management History data store. The cmdlet provides access to operation records, allowing you to examine:
- Change History Information on changes that were made to particular pieces of directory data using Active Roles
- User Activity Information on directory data changes that were made by particular users
EXAMPLE 1
Get-QARSOperation -CompletedOn 'Today' -ParentContainer 'test.domain.com/container' -TargetObjectType 'user' -OperationType 'Modify' | %{$_.TargetObjectInfo.DN} | Group-Object | %{$_.Name}Description:
List the user accounts from a particular container that were changed on the current date.
EXAMPLE 2
Get-QARSOperation -CompletedOn (get-date -year 2008 -month 9 -day 1) -ParentContainer 'test.domain.com/container' -TargetObjectType 'Group' -OperationType 'Create' | %{$_.TargetObjectInfo.DN} | Group-Object | %{$_.Name}Description:
List the groups that were created in a particular container on September 1, 2008.
EXAMPLE 3
Get-QARSOperation -CompletedRecently ([TimeSpan]::FromDays(30)) -TargetObject 'domainName\groupName' -OperationType 'GroupMembershipChange' | %{$_.InitiatorInfo.NTAccountName} |Group-Object | %{$_.Name}Description:
List the names of the security principals that added or removed members from a particular group during last month.
EXAMPLE 4
Get-QARSOperation -TargetObject 'domain\user' -OperationType 'Modify' -ChangedAttributes 'edsaPassword' | %{$_.InitiatorInfo.NTAccountName} |Group-Object | select NameDescription:
List the names of the security principals that changed or reset the password of a particular user account.
EXAMPLE 5
Get-QARSOperation -CompletedRecently ([TimeSpan]::FromDays(7)) -TargetObjectType user -ParentContainer 'test.domain.com/container' -InitiatedBy 'MyDomain\JSmith' | %{$_.TargetObjectInfo.DN}Description:
List all user accounts from a particular container that were changed by the user 'MyDomain\JSmith' during last week.
EXAMPLE 6
Get-QARSOperation -TargetObject 'domain\user' -ChangedAttributes l,streetAddress -CompletedOn ((get-date).AddDays(-1)) | %{$_.InitiatorInfo.NTAccountName} |Group-Object | select NameDescription:
List the names of the security principals that changed the City (l) or Street Address (streetAddress) attribute on the account of a particular user account yesterday.
EXAMPLE 7
Get-QARSOperation -ParentContainer test.domain.com/container -TargetObjectType group -OperationType 'GroupMembershipChange' -CompletedAfter (get-date -year 2008 -month 9 -day 15 -hour 0 -minute 0 -second 0) -CompletedBefore (get-date -year 2008 -month 9 -day 30 -hour 23 -minute 59 -second 59) | %{$_.TargetObjectInfo.DN} | Group-Object | %{$_.Name}
Description:
List the groups from a particular container that had the membership list (Members attribute) changed during the time period from September 15, 2008 to September 30, 2008.
EXAMPLE 8
$a = Get-QADUser -Identity samAccountName
Get-QARSOperation $a.Guid -Proxy
Description:List the user accounts from a GUID value if some attribute were changed such as DisplayName.