That's not a typo. Export only active Active Directory users (not disabled) into a csv file with csvde, the following should suite your needs: # Collect Internal users for your audit purposes csvde -d "OU=Users,OU=Internal,DC=DomainName,DC=Suffix" -r "(&(objectCategory=person)(!UserAccountControl=66050)(!UserAccountControl=514))" -l SAMAccountName,name,description,UserAccountControl,logonHours -f "InternalUsers.csv" You can easily put this into task scheduler for automated reporting at whatever interval […]