Windows 8.1 - Powershell 4.0 Get-ADComputer -Properties * bug - by jbarkl3y

Status : 


Sign in
to vote
ID 806452 Comments
Status Active Workarounds
Type Bug Repros 40
Opened 10/24/2013 9:09:48 AM
Access Restriction Public


When running the Get-ADComputer command I run into the following. There has been a couple of posts on this error but they are related to Powershell 3.0 and can be fixed by changing your AD Schema to version 47. This bug still exists except now my Schema version is 47 and the bug still persists.

Get-ADComputer : One or more properties are invalid.
Parameter name: msDS-AssignedAuthNPolicy
At line:1 char:1
+ Get-ADComputer SPAREPC -Properties *
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (SPAREPC:ADComputer) [Get-ADComputer], ArgumentException
    + FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.ArgumentException,Microsoft.ActiveDirectory.Management.Comm
Sign in to post a comment.
Posted by James Dobbs on 7/7/2014 at 6:19 PM
This is JDobbsy1987 (i updated my display name)
@Jamie Bilinski, you are correct, mine started working again since the latest preview update
Posted by Jamie Bilinski on 7/3/2014 at 12:04 PM
I seems to be resolved in current WMF 5 Preview. @JDobbsy1987 perhaps it was resolved in May update 1?
Posted by James Dobbs on 4/18/2014 at 2:33 AM
I still get the same issue with Powershell 5.0 using 'Windows Management Framework 5.0 Preview' from -
Posted by -Nick on 2/20/2014 at 7:08 AM
Still an issue here with 8.1 enterprise x64. is this going to be fixed or do I need to go back to windows 7/2008r2?
Posted by Allen J. George on 1/15/2014 at 12:35 PM
You can probably do this: get-adcomputer -filter * -properties PasswordExpired,pwdLastSet,etc -- You will need to use the object name:
Posted by Matthew McDonald at ION on 1/15/2014 at 9:21 AM
The workarounds do not work for all cases. For example, I need to use the command "get-ADuser -properties *" as I am looking for a number of various properties of the account. When alternatively piping Get-ADUser to Get-ADObject -Properties *, many of these properties are not returned. For example: PasswordExpired, PasswordLastSet, PasswordNeverExpires, and PasswordNotRequired.

What can be done to fix this issue?
Posted by Allen J. George on 1/14/2014 at 8:11 AM
The workarounds that others have posted work, but required rewriting multiple scripts. Microsoft please fix this as it is a pain for those that want to do get-adcomputer -filter * -properties *
Posted by Chris.Duck on 11/6/2013 at 1:38 PM
I can repro on Windows 8.1 Enterprise. Our domain is 2003 forest and domain functional level, with 2008 R2 Domain Controllers. Schema version is 47. I do not have the problem from PowerShell 3.0 on 2008 R2 or 2012.
Posted by JoMalin on 10/25/2013 at 10:21 AM
This bug is also in get-aduser and get-adprincipalgroupmembership but seems to be fine in get-adgroup.