Windows PowerShell (POSH) is a command-line shell and associated scripting language created by Microsoft. Offering full access to COM, WMI and.NET, POSH is a full-featured task automation framework for distributed Microsoft platforms and solutions.
SystemTools DumpSec is a software program developed by SystemTools Software Inc. The setup package generally installs about 6 files and is usually about 5.32 MB (5,573,698 bytes). However, both DumpSec and Exporter are pre-Active Directory applications which means that they won't be able to access any data elements added after Windows NT (ie employee ID, address, phone numbers, etc).
SUBREDDIT FILTERS. RESOURCES. SCRIPT REPOSITORIES. VIRTUAL LABS & BOOKS. BLOGS & PODCASTS.
LIVE CHAT. NORTH AMERICAN USER GROUPS. remote-capable. remote-capable. remote-capable. remote-capable.
EUROPEAN USER GROUPS. I have been tasked by auditors to use DumpSec to produce a users and groups report. I downloaded and installed it, however, I cannot get it to work. Googling, I find that it is basically pre-Active Directory tool that is approx 20 years old and no longer works since Windows Server 2008. Our oldest servers are 2008. Most are 2012 and our AD is current: The auditors lay out in detail how to use DumpSec to get the report they need: 'Dump Users as Table'.
Password expiration is tricky because it's a calculated value. You have to find when the password last changed, then add the number of days from the password expiration policy.
And with AD 2008 domain level or higher you can have granular policies so it pretty much has to be calculated on a per user basis (fun). Last logon server isn't stored in AD, and it's just the server the user authenticated against, not the last PC they logged into.
To get that you'd either have to run a logon script to record the data somewhere or turn on Logon/Logoff auditing, then get the Security event log off your domain controller with the PDC emulator and parse through all that (more fun).
Anybody out there have any success using DumpSec? We're going thru an IT audit and I need to provide a data dump for some stuff in Active Directory. The dump needs to include: User Name Groups Group Comment Full Name Comment PswdCanBeChanged PswdLastSetTime PswdRequired PswdExpires PswdExpiresTime AcctDisabled AcctLockedOut AcctExpiresTime LastLogonTime LastLogonServer LogonHours Please mark the checkbox 'Show 'True' last logon time' The process runs for hours.then errors out with no data shown. Using Server 2008R2. We (SystemTools) offer free support for our products, including free ones like DumpSec and Exporter. DumpSec is probably around 20 years old by my calculations, so while it can have problems, it should run on any Windows version. I just now ran it through some paces on a Windows 2008 system, so if its crashing for you, send an email to along with details on what settings you enabled and maybe we can reproduce it.
However, both DumpSec and Exporter are pre-Active Directory applications which means that they won't be able to access any data elements added after Windows NT (ie employee ID, address, phone numbers, etc). But I don't see anything on your list that would prevent it from getting at the information.
Same for Exporter. I was not able to really see enough details on the screen shot, but again, send details to and we will be happy to have a look at it. Our other solutions, Hyena and Exporter Pro, are not free outside of their eval periods, and might be hard to justify given your straight-forward list. But we would be happy to help you figure out what is happening in your situation. Edited Dec 20, 2013 at 22:26 UTC.