For those of you running Windows 8.1 or Windows 2012 R2, you may have seen issues where using Get-ADComputer and Get-ADUser with the –Property parameter and specifying * to grab all properties of the object.
Get-ADUser proxb -Server DC1 -Property *
The error that occurs is:
Get-ADUser : One or more properties are invalid.
Parameter name: msDS-AssignedAuthNPolicy
At line:1 char:1
+ Get-ADUser proxb -Server DC1 -Properties *
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (proxb:ADUser) [Get-ADUser], ArgumentException
+ FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.ArgumentException,Microsoft.ActiveDirec
tory.Management.Commands.GetADUser
Not exactly useful if you need to see all of the properties of the AD object. Fortunately, Microsoft has released KB2928680 which includes a number of fixes, but one does stand out for me at least:
-
2923122 One or more properties are invalid error when you run the Get-ADUser or Get-ADComputer cmdlet
Applying this update will fix this issue as demonstrated below:
Get-ADUser proxb -Server DC1 -Property *
This update is available via Windows Updates, or your WSUS server if running a server in your environment. A standalone installer is also available here.
