RE: [ActiveDir] ADSI programming
Hi, I want to start programming in AD. I have experience programming with Python, PHP and VBA. Any suggestion on which language is more convienient to program with ADSI. I was going to use Python because I can be use in windows, MAC or Linux/unix Thanks Rezuma List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
Re: [ActiveDir] ADSI programming
I wonder whether ironpython http://www.ironpython.com/ is worth looking into in that case. I am no programmer but I have a hunch it might be to your liking. CheersM@ On 9/15/06, Ramon Linan [EMAIL PROTECTED] wrote: Hi,I want to start programming in AD.I have experience programming with Python, PHP and VBA.Any suggestion on which language is more convienient to program withADSI.I was going to use Python because I can be use in windows, MAC or Linux/unixThanksRezumaList info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
Re: [ActiveDir] ADSI programming
Well, you don't need a .NET implementation of Python (which is what IronPython is) to use Python with ADSI. Python already has COM support. If one was interested in Python running on the CLR, then that would be the thing to check out, but I'm guessing the guy just wants to write some ADSI scripts, so the normal resources are appropriate (scripting center, AD 3rd edition, AD cookbook 2nd edition, etc.). If he was actually interested in programming LDAP in .NET, I'd also recommend my book (www.directoryprogramming,net), but his scripting background suggests that he isn't going there (to me). There is no mention of Python (or any language other than VB.NET, C++ or C# for that matter) in it. :) Joe K. - Original Message - From: Matheesha Weerasinghe To: ActiveDir@mail.activedir.org Sent: Friday, September 15, 2006 2:08 PM Subject: Re: [ActiveDir] ADSI programming I wonder whether ironpython http://www.ironpython.com/ is worth looking into in that case. I am no programmer but I have a hunch it might be to your liking. Cheers M@ On 9/15/06, Ramon Linan [EMAIL PROTECTED] wrote: Hi, I want to start programming in AD. I have experience programming with Python, PHP and VBA. Any suggestion on which language is more convienient to program with ADSI. I was going to use Python because I can be use in windows, MAC or Linux/unix Thanks Rezuma List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
Re: [ActiveDir] ADSI Scripting - How to find Computer's OU.
Jitendra Kalyankar wrote: I need your guidance to write the script. I need to find out name of the OU to which the computer account belongs. Let me know how you can find it. http://groups.google.com/group/microsoft.public.scripting.vbscript/browse_thread/thread/fa91247b1a4d65ba/1058b6ce8cad2cfe?lnk=stq=determine+computer+OU+vbscriptrnum=1hl=en#1058b6ce8cad2cfe -- Tomasz Onyszko http://www.w2k.pl List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI Scripting - How to find Computer's OU.
Disclaimer- I am not a programmer nor do I play one on TV but this works for me. I am sure someone can pick it apart and tell me how dumb I am but hey, it works for me :-p It will default to local host and domain but prompt for either. Replace xyz with the default domain of choice. ' simple script to display LDAP path / DN rwf4-12:57 PM 3/11/2004 Set Network = WScript.CreateObject(WScript.Network) compname = InputBox (Enter NETBIOS name of computer - Default is local machine, GetComputerLocation In AD, Network.ComputerName ) domname = InputBox (Enter name of domain- Default is xyz, GetDomainName, XYZ) Set oNet = CreateObject(Wscript.Network) Set oTrans = CreateObject(NameTranslate) oTrans.Init 1, domname oTrans.Set 3, domname \ compname $ sAdsPath = oTrans.Get(1) Set oNet = Nothing Set oTrans = Nothing wscript.echo Computer Location in AD: sAdsPath -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jitendra Kalyankar Sent: Wednesday, November 16, 2005 12:55 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ADSI Scripting - How to find Computer's OU. This is to check for local computer. What will be the method to check it against the remote computers. I have a InputBox in the program which takes input from user, using that string value I want to determine the OU of remote computer. Please let me know if you can shed some light on this. Thank again, Jitendra Kalyankar On 11/16/05, Jitendra Kalyankar [EMAIL PROTECTED] wrote: Thanks much that is helpful Jitendra Kalyankar On 11/16/05, Tomasz Onyszko [EMAIL PROTECTED] wrote: Jitendra Kalyankar wrote: I need your guidance to write the script. I need to find out name of the OU to which the computer account belongs. Let me know how you can find it. http://groups.google.com/group/microsoft.public.scripting.vbscript/brows e_thread/thread/fa91247b1a4d65ba/1058b6ce8cad2cfe?lnk=stq=determine+com puter+OU+vbscriptrnum=1hl=en#1058b6ce8cad2cfe -- Tomasz Onyszko http://www.w2k.pl List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ -- Thanks, Jitendra Kalyankar List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] ADSI Scripting - How to find Computer's OU.
Thanks Bob! This works for me! On 11/16/05, Free, Bob [EMAIL PROTECTED] wrote: Disclaimer- I am not a programmer nor do I play one on TV but this works for me. I am sure someone can pick it apart and tell me how dumb I am but hey, it works for me :-p It will default to local host and domain but prompt for either. Replace xyz with the default domain of choice. ' simple script to display LDAP path / DN rwf4-12:57 PM 3/11/2004 Set Network = WScript.CreateObject(WScript.Network) compname = InputBox (Enter NETBIOS name of computer - Default is local machine, GetComputerLocation In AD, Network.ComputerName ) domname = InputBox (Enter name of domain- Default is xyz, GetDomainName, XYZ) Set oNet = CreateObject(Wscript.Network) Set oTrans = CreateObject(NameTranslate) oTrans.Init 1, domname oTrans.Set 3, domname \ compname $ sAdsPath = oTrans.Get(1) Set oNet = Nothing Set oTrans = Nothing wscript.echo Computer Location in AD: sAdsPath -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jitendra Kalyankar Sent: Wednesday, November 16, 2005 12:55 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ADSI Scripting - How to find Computer's OU. This is to check for local computer. What will be the method to check it against the remote computers. I have a InputBox in the program which takes input from user, using that string value I want to determine the OU of remote computer. Please let me know if you can shed some light on this. Thank again, Jitendra Kalyankar On 11/16/05, Jitendra Kalyankar [EMAIL PROTECTED] wrote: Thanks much that is helpful Jitendra Kalyankar On 11/16/05, Tomasz Onyszko [EMAIL PROTECTED] wrote: Jitendra Kalyankar wrote: I need your guidance to write the script. I need to find out name of the OU to which the computer account belongs. Let me know how you can find it. http://groups.google.com/group/microsoft.public.scripting.vbscript/brows e_thread/thread/fa91247b1a4d65ba/1058b6ce8cad2cfe?lnk=stq=determine+com puter+OU+vbscriptrnum=1hl=en#1058b6ce8cad2cfe -- Tomasz Onyszko http://www.w2k.pl List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ -- Thanks, Jitendra Kalyankar List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI Scripting - How to find Computer's OU.
Can't beat a Free script :) Rich -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob Sent: Wednesday, November 16, 2005 3:19 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] ADSI Scripting - How to find Computer's OU. Disclaimer- I am not a programmer nor do I play one on TV but this works for me. I am sure someone can pick it apart and tell me how dumb I am but hey, it works for me :-p It will default to local host and domain but prompt for either. Replace xyz with the default domain of choice. ' simple script to display LDAP path / DN rwf4-12:57 PM 3/11/2004 Set Network = WScript.CreateObject(WScript.Network) compname = InputBox (Enter NETBIOS name of computer - Default is local machine, GetComputerLocation In AD, Network.ComputerName ) domname = InputBox (Enter name of domain- Default is xyz, GetDomainName, XYZ) Set oNet = CreateObject(Wscript.Network) Set oTrans = CreateObject(NameTranslate) oTrans.Init 1, domname oTrans.Set 3, domname \ compname $ sAdsPath = oTrans.Get(1) Set oNet = Nothing Set oTrans = Nothing wscript.echo Computer Location in AD: sAdsPath -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jitendra Kalyankar Sent: Wednesday, November 16, 2005 12:55 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ADSI Scripting - How to find Computer's OU. This is to check for local computer. What will be the method to check it against the remote computers. I have a InputBox in the program which takes input from user, using that string value I want to determine the OU of remote computer. Please let me know if you can shed some light on this. Thank again, Jitendra Kalyankar On 11/16/05, Jitendra Kalyankar [EMAIL PROTECTED] wrote: Thanks much that is helpful Jitendra Kalyankar On 11/16/05, Tomasz Onyszko [EMAIL PROTECTED] wrote: Jitendra Kalyankar wrote: I need your guidance to write the script. I need to find out name of the OU to which the computer account belongs. Let me know how you can find it. ---APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE--- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI DC W2K3
No, but I don't use the Winnt provider either. Any
particular reason to use the winnt provider vs. the LDAP
provider?
Al
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]Sent: Monday, September 13, 2004 10:30
AMTo: [EMAIL PROTECTED]Subject: [ActiveDir]
ADSI DC W2K3Sensitivity: Private
Hi
List,
I have problem wiht ADSI script inside an *.asp
when it validate over a Windows 2003 Server STD DC, if the consult is to a
Windows 2000 Server DC, it´s OK. Any have similar problem ? The domain is
Windows 2000 Native.
For
instance
set Ad =
GetObject("WinNT://DomainName/UserName") response.write ad.fullname
Thanks.
AVISO LEGAL:Esta información es privada y confidencial y
está dirigida únicamente a su destinatario. Si usted no es el destinatario
original de este mensaje y por este medio pudo acceder a dicha información por
favor elimine el mensaje. La distribución o copia de este mensaje está
estrictamente prohibida. Esta comunicación es sólo para propósitos de
información y no debe ser considerada como propuesta, aceptación ni como una
declaración de voluntad oficial de REPSOL YPF S.A. y/o subsidiarias y/o
afiliadas. La transmisión de e-mails no garantiza que el correo electrónico sea
seguro o libre de error. Por consiguiente, no manifestamos que esta información
sea completa o precisa. Toda información está sujeta a alterarse sin previo
aviso.This information is private and confidential and intended for the
recipient only. If you are not the intended recipient of this message you are
hereby notified that any review, disseminastribution or copying of this message
is strictly prohibited. This communication is for information purposes only and
shall not be regarded neither as a proposal, acceptance nor as a statement of
will or official statement from REPSOL YPF S.A. and/or subsidiaries and/or
affiliates. Email transmission cannot be guaranteed to be secure or error-free.
Therefore, we do not represent that this information is complete or accurate and
it should not be relied upon as such. All information is subject to change
without notice.
RE: [ActiveDir] ADSI DC W2K3
Any, only that the developer´s use that in many
case.
Thanks anyway
From: Mulnick, Al [mailto:[EMAIL PROTECTED]
Sent: Monday, September 13, 2004 1:45 PMTo:
'[EMAIL PROTECTED]'Subject: RE: [ActiveDir] ADSI DC
W2K3Sensitivity: Private
No, but I don't use the Winnt provider either. Any
particular reason to use the winnt provider vs. the LDAP
provider?
Al
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]Sent: Monday, September 13, 2004 10:30
AMTo: [EMAIL PROTECTED]Subject: [ActiveDir]
ADSI DC W2K3Sensitivity: Private
Hi
List,
I have problem wiht ADSI script inside an *.asp
when it validate over a Windows 2003 Server STD DC, if the consult is to a
Windows 2000 Server DC, it´s OK. Any have similar problem ? The domain is
Windows 2000 Native.
For
instance
set Ad =
GetObject("WinNT://DomainName/UserName") response.write ad.fullname
Thanks.
AVISO LEGAL:Esta información es privada y confidencial y
está dirigida únicamente a su destinatario. Si usted no es el destinatario
original de este mensaje y por este medio pudo acceder a dicha información por
favor elimine el mensaje. La distribución o copia de este mensaje está
estrictamente prohibida. Esta comunicación es sólo para propósitos de
información y no debe ser considerada como propuesta, aceptación ni como una
declaración de voluntad oficial de REPSOL YPF S.A. y/o subsidiarias y/o
afiliadas. La transmisión de e-mails no garantiza que el correo electrónico sea
seguro o libre de error. Por consiguiente, no manifestamos que esta información
sea completa o precisa. Toda información está sujeta a alterarse sin previo
aviso.This information is private and confidential and intended for the
recipient only. If you are not the intended recipient of this message you are
hereby notified that any review, disseminastribution or copying of this message
is strictly prohibited. This communication is for information purposes only and
shall not be regarded neither as a proposal, acceptance nor as a statement of
will or official statement from REPSOL YPF S.A. and/or subsidiaries and/or
affiliates. Email transmission cannot be guaranteed to be secure or error-free.
Therefore, we do not represent that this information is complete or accurate and
it should not be relied upon as such. All information is subject to change
without notice. AVISO LEGAL:Esta información es privada y confidencial y está dirigida únicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha información por favor elimine el mensaje. La distribución o copia de este mensaje está estrictamente prohibida. Esta comunicación es sólo para propósitos de información y no debe ser considerada como propuesta, aceptación ni como una declaración de voluntad oficial de REPSOL YPF S.A. y/o subsidiarias y/o afiliadas. La transmisión de e-mails no garantiza que el correo electrónico sea seguro o libre de error. Por consiguiente, no manifestamos que esta información sea completa o precisa. Toda información está sujeta a alterarse sin previo aviso.
This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, disseminastribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from REPSOL YPF S.A. and/or subsidiaries and/or affiliates. Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice.
RE: [ActiveDir] ADSI DC W2K3 [?? Probable Spam]
I havent run into this type of problem in either W2K or W2K3 DCsthough I havent used the WinNT provider in a long time. Any chance you can post the complete snippet of code and the error being returned? I know one thing to keep in mind with W2K3 you many need to use ADS_SECURE_AUTHENTICATION when bindingI had to update some of my code that way. r/ Lou -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, September 13, 2004 1:06 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] ADSI DC W2K3 [?? Probable Spam] Sensitivity: Private Any, only that the developer´s use that in many case. Thanks anyway From: Mulnick, Al [mailto:[EMAIL PROTECTED] Sent: Monday, September 13, 2004 1:45 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] ADSI DC W2K3 Sensitivity: Private No, but I don't use the Winnt provider either. Any particular reason to use the winnt provider vs. the LDAP provider? Al From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, September 13, 2004 10:30 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] ADSI DC W2K3 Sensitivity: Private Hi List, I have problem wiht ADSI script inside an *.asp when it validate over a Windows 2003 Server STD DC, if the consult is to a Windows 2000 Server DC, it´s OK. Any have similar problem ? The domain is Windows 2000 Native. For instance set Ad = GetObject(WinNT://DomainName/UserName) response.write ad.fullname Thanks. AVISO LEGAL: Esta información es privada y confidencial y está dirigida únicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha información por favor elimine el mensaje. La distribución o copia de este mensaje está estrictamente prohibida. Esta comunicación es sólo para propósitos de información y no debe ser considerada como propuesta, aceptación ni como una declaración de voluntad oficial de REPSOL YPF S.A. y/o subsidiarias y/o afiliadas. La transmisión de e-mails no garantiza que el correo electrónico sea seguro o libre de error. Por consiguiente, no manifestamos que esta información sea completa o precisa. Toda información está sujeta a alterarse sin previo aviso. This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, disseminastribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from REPSOL YPF S.A. and/or subsidiaries and/or affiliates. Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice. AVISO LEGAL: Esta información es privada y confidencial y está dirigida únicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha información por favor elimine el mensaje. La distribución o copia de este mensaje está estrictamente prohibida. Esta comunicación es sólo para propósitos de información y no debe ser considerada como propuesta, aceptación ni como una declaración de voluntad oficial de REPSOL YPF S.A. y/o subsidiarias y/o afiliadas. La transmisión de e-mails no garantiza que el correo electrónico sea seguro o libre de error. Por consiguiente, no manifestamos que esta información sea completa o precisa. Toda información está sujeta a alterarse sin previo aviso. This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, disseminastribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from REPSOL YPF S.A. and/or subsidiaries and/or affiliates. Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice.
RE: [ActiveDir] ADSI info in configuration container
That would be because the configuration info is stored on the Root Domain (CN=Configuration,DC=yourRoot,DC=blah) and not at the Child domain. Sincerely, Dèjì Akómöláfé, MCSE MCSA MCP+I www.akomolafe.com www.iyaburo.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Chris Flesher Sent: Wed 1/28/2004 1:11 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] ADSI info in configuration container I was looking around and noticed I don't see everything that is in my root domain when compared to a child domain when i view the configuration container through ADSI edit. Specifically, I'm not seeing all of the Exchange info in my child domain in comparison to my root domain. Chris Flesher The University of Chicago NSIT/DCS 1-773-834-8477 List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI info in configuration container
Title: Message All of the exchange configuration info is in the forest configuration container. There is no child domain configuration container. If you pull up adsiedit.msc you should see three partitions by default. The Default domain partition (this depends on what ID you log on with as to what it shows by default) and a schema partition and a configuration partition. The configuration partition will have the name cn=configuration,dc=forestrootdomain,dc=blah; the schema will be the same with cn=schema tacked on the front. The domain partition could be anything because you could be talking to the root domain, a child domain, a grandchild domain, a separate tree etc. Now from reading your post I take it you are either 1. Looking the domain partition for Exchange configuration info - you won't find it there. 2. Using an ID to look at the configuration container on a child domain DC that doesn't have enough rights into the configuration container to see the exchange stuff. The ID can see only what the exchange delegation is set up to allow you to see. By default if you used a forest root admin ID it is probably an enterprise ID and can see everything in the Exchange config area. If you are on a child domain you may be using a child domain domain admin ID which may not have any rights to see the exchange config info... So it all depends on what you are doing as to why you can't see what you think you should be able to see. joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris FlesherSent: Wednesday, January 28, 2004 4:11 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] ADSI info in configuration container I was looking around and noticed I don't see everything that is in my root domain when compared to a child domain when i view the configuration container through ADSI edit. Specifically, I'm not seeing all of the Exchange info in my child domain in comparison to my root domain. Chris Flesher The University of Chicago NSIT/DCS 1-773-834-8477
RE: [ActiveDir] ADSI EDIT
Jannie I've just tried it myself and I get the same result as you, i.e. There are too many items in the folder OU=lots. Please refine the query parameters or increase the maximum number of items per folder. I can't find any way around this. It might be a hard limit within ADSIEdit. What is it you need to do with ADSIEdit? LDP might could be an alternative, as it gives you more flexibility (with paging) to work around the size limits. Tony -- Original Message -- Wrom: OEAIJJPHSCRTNHGSWZIDREXCAXZOWCONEUQZAAFXISHJEXXIMQZUIVOTQNQEMSFDULHPQQWOYIYZ Reply-To: [EMAIL PROTECTED] Date: Mon, 15 Dec 2003 08:35:09 +0200 Tony, Nope, only fixed the search from the MMC not ADSI Edit -Original Message- Wrom: UNNYCGPKYLEJGDGVCJVTLBXFGGMEPYOQKEDOTWFAOBUZX Sent: Friday, December 12, 2003 4:59 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] ADSI EDIT Jannie Did the GPO fix not work for ADSI Edit? http://support.microsoft.com/?kbid=243281 Tony -- Original Message -- Wrom: XLYRWTQTIPWIGYOKSTTZRCLBDXRQBGJSNBOHMKHJYFMYXOEAIJJPHSCRTNHGSWZIDREXCAXZ OWCO Reply-To: [EMAIL PROTECTED] Date: Fri, 12 Dec 2003 16:46:52 +0200 Using ADSI EDIT, can only view 10 000 objects. How and where can this be fixed In Windows 2000 Active Directory 10 000 can also be viewed but corrected it by GPO. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI EDIT
Tony, Nope, only fixed the search from the MMC not ADSI Edit -Original Message- From: Tony Murray [mailto:[EMAIL PROTECTED] Sent: Friday, December 12, 2003 4:59 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] ADSI EDIT Jannie Did the GPO fix not work for ADSI Edit? http://support.microsoft.com/?kbid=243281 Tony -- Original Message -- Wrom: XLYRWTQTIPWIGYOKSTTZRCLBDXRQBGJSNBOHMKHJYFMYXOEAIJJPHSCRTNHGSWZIDREXCAXZ OWCO Reply-To: [EMAIL PROTECTED] Date: Fri, 12 Dec 2003 16:46:52 +0200 Using ADSI EDIT, can only view 10 000 objects. How and where can this be fixed In Windows 2000 Active Directory 10 000 can also be viewed but corrected it by GPO. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] ADSI EDIT
Jannie Did the GPO fix not work for ADSI Edit? http://support.microsoft.com/?kbid=243281 Tony -- Original Message -- Wrom: XLYRWTQTIPWIGYOKSTTZRCLBDXRQBGJSNBOHMKHJYFMYXOEAIJJPHSCRTNHGSWZIDREXCAXZOWCO Reply-To: [EMAIL PROTECTED] Date: Fri, 12 Dec 2003 16:46:52 +0200 Using ADSI EDIT, can only view 10 000 objects. How and where can this be fixed In Windows 2000 Active Directory 10 000 can also be viewed but corrected it by GPO. List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI EDIT
Ah ha! Heres one I can answer (having asked it myself last week) In ADSI Edit, with the Domain Selected, choose View/Filter. Change the number of objects to whatever mc -Original Message- From: Jannie Esterhuizen - CPX Mngd Services [mailto:[EMAIL PROTECTED] Sent: Friday, December 12, 2003 9:47 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] ADSI EDIT Using ADSI EDIT, can only view 10 000 objects. How and where can this be fixed In Windows 2000 Active Directory 10 000 can also be viewed but corrected it by GPO.
RE: [ActiveDir] Adsi Edit annoyance
In the View / Filter, Max number of items per container. Default is 1, increase to your desire. Regards, Dave -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Creamer, MarkSent: Thursday, December 04, 2003 3:36 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Adsi Edit annoyance How do I increase the maximum number of items that ADSI Edit will display? It stops after x number in the Users container and tells me to increase the maximum Thanks! Mark Creamer Systems Engineer Cintas Corporation Honesty and Integrity in Everything We Do This e-mail and any accompanying attachments are confidential. Theinformation is intended solely for the use of the individual to whom it isaddressed. Any review, disclosure, copying, distribution, or use of thise-mail communication by others is strictly prohibited. If you are not theintended recipient, please notify us immediately by returning this messageto the sender and delete all copies. Thank you for your cooperation.
RE: [ActiveDir] Adsi Edit annoyance
Ah Ha! Filter isnt available on the View Menu unless the appropriate object is focusedthanks Dave! mc -Original Message- From: Chianese, David P. [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2003 3:43 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Adsi Edit annoyance In the View / Filter, Max number of items per container. Default is 1, increase to your desire. Regards, Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Creamer, Mark Sent: Thursday, December 04, 2003 3:36 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Adsi Edit annoyance How do I increase the maximum number of items that ADSI Edit will display? It stops after x number in the Users container and tells me to increase the maximum Thanks! Mark Creamer Systems Engineer Cintas Corporation Honesty and Integrity in Everything We Do This e-mail and any accompanying attachments are confidential. Theinformation is intended solely for the use of the individual to whom it isaddressed. Any review, disclosure, copying, distribution, or use of thise-mail communication by others is strictly prohibited. If you are not theintended recipient, please notify us immediately by returning this messageto the sender and delete all copies. Thank you for your cooperation.
RE: [ActiveDir] ADSI experts needed
This should be fun to find people for. There aren't many of us doing perl with adsi at this point. joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Web Id Sent: Monday, November 10, 2003 12:39 PM To: [EMAIL PROTECTED] Hi, Not sure if this the right forum for this posting...but there are very few Active Directory sites. Incase any of you are looking for long term project/contractsone of our clients (a large, networking products company) is working on ADSI/PERL based applications to manage desktop/servers distributed all over the world. They are looking for a couple ADSI experts who have worked on Enterprise Level applications, preferably using PERL. This is for long term contracts - 2 years! For the right candidate/s they will be flexible regarding location of work. If anyone is interested, please email/call me and I can provide more details. Thanks, Amar -- Amar Panchal Principal Consultant AKRAYA, Inc. Work: 408.437.1110x301 Mobile: 408.838.8882 List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI vbscript and LDAP find
Title: Message
What
you want to do is use ADO to search for it in the Active Directory. There
are some sample scripts in http://www.microsoft.com/technet/treeview/default.asp?url="">that
should illustrate what this looks like. If not, let me know off-line and I
may have one lurking around that does something similar.
Al
-Original Message-From: Rich Milburn
[mailto:[EMAIL PROTECTED] Sent: Monday, November 03, 2003
10:53 AMTo: [EMAIL PROTECTED]Subject:
[ActiveDir] ADSI vbscript and LDAP find
I've tried finding the answer to this
and it's hiding from me (I bet 15 people will respond with a link I overlooked!!)
I want to pull a user object from AD in
vbscript by typing a login name in a box, or passing it as a parameter... but I'm having trouble
finding a way to do this without either having to type the full DN or know
what OU the user is in. It seems easy but I've spent way too much time
on it...
Here's the code:
strUser = InputBox("Enter object
name to search for","Search for object")
Set objUser =
GetObject("LDAP://CN=" strUser ",DC=domain,DC=com")
WScript.Echo
objUser.userPrincipalName
This works if I add CN=Users or OU=___
and the object is in that container, but otherwise it just says object not
found on the
server. (oh and WScript.Echo is not the
goal here, just a test J)
Thanks -
Rich
---APPLEBEE'S INTERNATIONAL, INC.
CONFIDENTIALITY NOTICE--- PRIVILEGED / CONFIDENTIAL INFORMATION may
be contained in this message or any attachments. This information is strictly
confidential and may be subject to attorney-client privilege. This message is
intended only for the use of the named addressee. If you are not the intended
recipient of this message, unauthorized forwarding, printing, copying,
distribution, or using such information is strictly prohibited and may be
unlawful. If you have received this in error, you should kindly notify the
sender by reply e-mail and immediately destroy this message. Unauthorized
interception of this e-mail is a violation of federal criminal law. Applebee's
International, Inc. reserves the right to monitor and review the content of
all messages sent to and from this e-mail address. Messages sent to or from
this e-mail address may be stored on the Applebee's International, Inc. e-mail
system.
RE: [ActiveDir] ADSI vbscript and LDAP find
Title: [ActiveDir] ADSI vbscript and LDAP find
Rich
Sounds like you need to use a search rather than GetObject,
i.e. search the directory using the login name and then return
theattributes you need as part of the result. Here's a link to
Robbie Allen's code for doing this (see 4.5)
http://www.rallenhome.com/books/adcookbook/code.html
The use of GetObject (at least how I understand it) is a
shortcut if you already know the DN of the object you are interested
in.
Tony
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rich
MilburnSent: Montag, 3. November 2003 16:53To:
[EMAIL PROTECTED]Subject: [ActiveDir] ADSI vbscript and
LDAP find
I've tried finding the answer to this and
it's hiding from me (I bet 15 people will respond with a link I overlooked!!)
I want to pull a user object from AD in
vbscript by typing a login name in a box, or passing it as a parameter... but I'm having trouble finding a way
to do this without either having to type the full DN or know what OU the user is
in. It seems easy but I've spent way too much time on it...
Here's the code:
strUser = InputBox("Enter object
name to search for","Search for object")
Set objUser =
GetObject("LDAP://CN=" strUser ",DC=domain,DC=com")
WScript.Echo
objUser.userPrincipalName
This works if I add CN=Users or OU=___ and
the object is in that container, but otherwise it just says object not
found on the
server. (oh and WScript.Echo is not the
goal here, just a test J)
Thanks -
Rich
---APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY
NOTICE--- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in
this message or any attachments. This information is strictly confidential and
may be subject to attorney-client privilege. This message is intended only for
the use of the named addressee. If you are not the intended recipient of this
message, unauthorized forwarding, printing, copying, distribution, or using such
information is strictly prohibited and may be unlawful. If you have received
this in error, you should kindly notify the sender by reply e-mail and
immediately destroy this message. Unauthorized interception of this e-mail is a
violation of federal criminal law. Applebee's International, Inc. reserves the
right to monitor and review the content of all messages sent to and from this
e-mail address. Messages sent to or from this e-mail address may be stored on
the Applebee's International, Inc. e-mail system.
RE: [ActiveDir] ADSI vbscript and LDAP find
Title: [ActiveDir] ADSI vbscript and LDAP find Thank you very much and everyone else who responded so quickly!! From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Monday, November 03, 2003 10:04 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] ADSI vbscript and LDAP find This shows all users. Change the strQuery to search for a particular user. option explicit Dim oRootDSE 'As IADs Dim objUser 'As IADsUser Dim oConnection 'As New ADODB.Connection Dim oCommand 'As New ADODB.Command Dim RS 'As ADODB.Recordset Dim strQuery 'As String, Dim newattrib 'As String Dim varDomainNC 'As Variant 'On Error Resume Next ' Get the Configuration Naming Context Set oRootDSE = GetObject(LDAP://RootDSE) varDomainNC = oRootDSE.Get(defaultNamingContext) wscript.echo varDomainNC ' Open the Connection set oConnection = Wscript.CreateObject(ADODB.Connection) oConnection.Provider = ADsDSOObject oConnection.Open ADs Provider 'Build a query to find all mail enabled Users that do not have 'extensionattribute2 set strQuery = LDAP:// varDomainNC ;((objectClass=user)(objectCategory=person));adspath,cn;subtree set oCommand = Wscript.CreateObject (ADODB.Command) oCommand.ActiveConnection = oConnection oCommand.CommandText = strQuery Set RS = oCommand.Execute If RS.RecordCount = 0 Then Wscript.echo No mailbox enabled Users found Else While Not RS.EOF Set objUser = GetObject(RS.Fields(adspath)) Wscript.echo objUser.cn RS.MoveNext Wend End If Set oRootDSE = Nothing Set objUser = Nothing RS.Close set RS = Nothing From: Rich Milburn [mailto:[EMAIL PROTECTED] Sent: Monday, November 03, 2003 10:53 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] ADSI vbscript and LDAP find I've tried finding the answer to this and it's hiding from me (I bet 15 people will respond with a link I overlooked!!) I want to pull a user object from AD in vbscript by typing a login name in a box, or passing it as a parameter... but I'm having trouble finding a way to do this without either having to type the full DN or know what OU the user is in. It seems easy but I've spent way too much time on it... Here's the code: strUser = InputBox(Enter object name to search for,Search for object) Set objUser = GetObject(LDAP://CN= strUser ,DC=domain,DC=com) WScript.Echo objUser.userPrincipalName This works if I add CN=Users or OU=___ and the object is in that container, but otherwise it just says object not found on the server. (oh and WScript.Echo is not the goal here, just a test J) Thanks - Rich ---APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE--- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system. ---APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE--- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.
RE: [ActiveDir] ADSI vbscript and LDAP find
Title: [ActiveDir] ADSI vbscript and LDAP find
If you
can have them supply the domain with the user I would use the nametranslate
object. That would look something like this and would take the ID you wanted
translated in the form of domain\user like joehome\joe. Then you have a
full dn for a getobject bind available to you. And the real bonus is no hassle
with ado...
''
Translate NT4 names to dn'private function
TranslateNT4Name(nt4name) dim nto dim result const
ADS_NAME_INITTYPE_SERVER = 2 const ADS_NAME_INITTYPE_GC = 3
const ADS_NAME_TYPE_1779 = 1 const ADS_NAME_TYPE_NT4 =
3
TranslateNT4Name="" set nto = CreateObject("NameTranslate")
on error resume next nto.Init ADS_NAME_INITTYPE_GC , "" if
err then wscript.echo wscript.echo
"ERROR: Couldn't create name translate object"
wscript.echo "ERROR: (" err.number ") "
err.description wscript.quit end
if nto.set ADS_NAME_TYPE_NT4, nt4name ' ' If this
fails we want it to just return a blank value '
TranslateNT4Name = nto.Get(ADS_NAME_TYPE_1779) on error goto 0end
function
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rich
MilburnSent: Monday, November 03, 2003 10:53 AMTo:
[EMAIL PROTECTED]
I've tried finding the answer to
this and it's hiding from me (I bet 15 people will respond with a link I overlooked!!)
I want to pull a user object from AD in
vbscript by typing a login name in a box, or passing it as a parameter... but I'm having trouble finding a way
to do this without either having to type the full DN or know what OU the user is
in. It seems easy but I've spent way too much time on it...
Here's the code:
strUser = InputBox("Enter object
name to search for","Search for object")
Set objUser =
GetObject("LDAP://CN=" strUser ",DC=domain,DC=com")
WScript.Echo
objUser.userPrincipalName
This works if I add CN=Users or OU=___ and
the object is in that container, but otherwise it just says object not
found on the
server. (oh and WScript.Echo is not the
goal here, just a test J)
Thanks -
Rich
---APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY
NOTICE--- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in
this message or any attachments. This information is strictly confidential and
may be subject to attorney-client privilege. This message is intended only for
the use of the named addressee. If you are not the intended recipient of this
message, unauthorized forwarding, printing, copying, distribution, or using such
information is strictly prohibited and may be unlawful. If you have received
this in error, you should kindly notify the sender by reply e-mail and
immediately destroy this message. Unauthorized interception of this e-mail is a
violation of federal criminal law. Applebee's International, Inc. reserves the
right to monitor and review the content of all messages sent to and from this
e-mail address. Messages sent to or from this e-mail address may be stored on
the Applebee's International, Inc. e-mail system.
RE: [ActiveDir] ADSI
As far as timeouts, you can set them when using IDirectorySearch: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/netdir/adsi /ads_searchpref_enum.asp?frame=true Or using ADO: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/netdir/adsi /searching_with_activex_data_objects_ado.asp But I'm not aware of a way to do it when using a GetObject call. Robbie Allen http://www.rallenhome.com/ -Original Message- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2003 3:55 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] ADSI If you're using serverless binding, ADSI may be selecting a DC that is either far away, not reachable, or down. Make sure your DNS contains the proper SRV records for your DCs. You can set timeout values for LDAP calls using the LDAP APIs, but I don't think that that functionality is exposed through ADSI. -gil -Original Message- From: Reva S [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2003 12:31 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] ADSI Hi, Has anyone experienced problem with ADSI? I try to connect to RootDSE object of the remote server and it sometimes never returns. Can we specify timeout or some other way to force the method to return? Thanks! Reva _ Add photos to your messages with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI and RAS
Title: Message Hey Jack, Thanks for the info, I like seeing the code and being able to change it my self , it would also be interesting to see how this is done. But thank you for the link I have downloaded a copy. Regards, Carlos Magalhaes -Original Message- From: EALES, Jack - FPIL [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 9:41 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] ADSI and RAS Go to www.dameware.com and get the 30 day trial of the Dameware Utilities Exporter - it'll let you get this info and a whole lot more then buy a copy because it's a superb suite of tools for NT4.0 management, I've not tried it on AD yet - but it works for managing Win2K boxes as well... Just my $0.02 Regards, Jack -Original Message- From: Carlos Magalhaes [mailto:[EMAIL PROTECTED]] Sent: 15 January 2003 06:20 To: '[EMAIL PROTECTED]' Subject: [ActiveDir] ADSI and RAS Hi all, Just wondering if any of you have done this and would be so kind to forward it to me before I go and re code it, I need to run a report against my Windows NT4 domain (PDC or BDC) and retrieve all the users that have RAS options i.e. they are allowed to dial in. Regards, Carlos Magalhaes - This email and any files transmitted are confidential and intended solely for the use of the individual or entity to which they are addressed, whose privacy should be respected. Any views or opinions are solely those of the author and do not necessarily represent those of the Trencor Group, or any of its representatives, unless specifically stated. Email transmission cannot be guaranteed to be secure, error free or without virus contamination. The sender therefore accepts no liability for any errors or omissions in the contents of this message, nor for any virus infection that might result from opening this message. Trencor is not responsible in the event of any third party interception of this email. If you have received this email in error please notify [EMAIL PROTECTED] For more information about Trencor, visit www.trencor.net http://www.trencor.net
RE: [ActiveDir] ADSI and RAS
I don't believe the RAS properties can be exposed through ADSI. The following article has more info and a suggestion for a workaround using a 3rd party compenent: http://www.winnetmag.com/Articles/Index.cfm?ArticleID=4682 Tony -- Original Message -- From: Carlos Magalhaes [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 15 Jan 2003 10:04:06 +0200 Hey Jack, Thanks for the info, I like seeing the code and being able to change it my self , it would also be interesting to see how this is done. But thank you for the link I have downloaded a copy. Regards, Carlos Magalhaes -Original Message- From: EALES, Jack - FPIL [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 9:41 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] ADSI and RAS Go to www.dameware.com http://www.dameware.com and get the 30 day trial of the Dameware Utilities Exporter - it'll let you get this info and a whole lot more then buy a copy because it's a superb suite of tools for NT4.0 management, I've not tried it on AD yet - but it works for managing Win2K boxes as well... Just my $0.02 Regards, Jack -Original Message- From: Carlos Magalhaes [mailto:[EMAIL PROTECTED]] Sent: 15 January 2003 06:20 To: '[EMAIL PROTECTED]' Subject: [ActiveDir] ADSI and RAS Hi all, Just wondering if any of you have done this and would be so kind to forward it to me before I go and re code it, I need to run a report against my Windows NT4 domain (PDC or BDC) and retrieve all the users that have RAS options i.e. they are allowed to dial in. Regards, Carlos Magalhaes List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI and RAS
I think you can, if you download the SDK for ADSI 2.5 you get a DLL ADRAS.dll there is an example in vb6 that allows you to set/give a user Ras properties, and there is a vb6 example of a user manager when you click on the user it allows you to see his/her user properties. I will look further into this dll, if I find something I will post it. In the mean time if anyone has something like this where I can see the code ... Tony thank you for the link it has helped me! Regards, Carlos Magalhaes -Original Message- From: Tony Murray [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 10:33 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] ADSI and RAS I don't believe the RAS properties can be exposed through ADSI. The following article has more info and a suggestion for a workaround using a 3rd party compenent: http://www.winnetmag.com/Articles/Index.cfm?ArticleID=4682 Tony -- Original Message -- From: Carlos Magalhaes [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 15 Jan 2003 10:04:06 +0200 Hey Jack, Thanks for the info, I like seeing the code and being able to change it my self , it would also be interesting to see how this is done. But thank you for the link I have downloaded a copy. Regards, Carlos Magalhaes -Original Message- From: EALES, Jack - FPIL [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 9:41 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] ADSI and RAS Go to www.dameware.com http://www.dameware.com and get the 30 day trial of the Dameware Utilities Exporter - it'll let you get this info and a whole lot more then buy a copy because it's a superb suite of tools for NT4.0 management, I've not tried it on AD yet - but it works for managing Win2K boxes as well... Just my $0.02 Regards, Jack -Original Message- From: Carlos Magalhaes [mailto:[EMAIL PROTECTED]] Sent: 15 January 2003 06:20 To: '[EMAIL PROTECTED]' Subject: [ActiveDir] ADSI and RAS Hi all, Just wondering if any of you have done this and would be so kind to forward it to me before I go and re code it, I need to run a report against my Windows NT4 domain (PDC or BDC) and retrieve all the users that have RAS options i.e. they are allowed to dial in. Regards, Carlos Magalhaes List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ - This email and any files transmitted are confidential and intended solely for the use of the individual or entity to which they are addressed, whose privacy should be respected. Any views or opinions are solely those of the author and do not necessarily represent those of the Trencor Group, or any of its representatives, unless specifically stated. Email transmission cannot be guaranteed to be secure, error free or without virus contamination. The sender therefore accepts no liability for any errors or omissions in the contents of this message, nor for any virus infection that might result from opening this message. Trencor is not responsible in the event of any third party interception of this email. If you have received this email in error please notify [EMAIL PROTECTED] For more information about Trencor, visit www.trencor.net http://www.trencor.net
RE: [ActiveDir] ADSI and RAS
Title: Message Dunno about ADSI, but on the win2k resource kit there's rasusers.exe which does what you are trying to do.. -Original Message-From: Carlos Magalhaes [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 1:20 AMTo: '[EMAIL PROTECTED]'Subject: [ActiveDir] ADSI and RAS Hi all, Just wondering if any of you have done this and would be so kind to forward it to me before I go and re code it, I need to run a report against my Windows NT4 domain (PDC or BDC) and retrieve all the users that have RAS options i.e. they are allowed to dial in. Regards, Carlos Magalhaes
RE: [ActiveDir] ADSI and RAS
Title: Message woh, dameware is pretty sweet. -Original Message-From: EALES, Jack - FPIL [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 2:41 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] ADSI and RAS Go to www.dameware.com and get the 30 day trial of the Dameware Utilities Exporter - it'll let you get this info and a whole lot more then buy a copy because it's a superb suite of tools for NT4.0 management, I've not tried it on AD yet - but it works for managing Win2K boxes as well... Just my $0.02 Regards, Jack -Original Message-From: Carlos Magalhaes [mailto:[EMAIL PROTECTED]] Sent: 15 January 2003 06:20To: '[EMAIL PROTECTED]'Subject: [ActiveDir] ADSI and RAS Hi all, Just wondering if any of you have done this and would be so kind to forward it to me before I go and re code it, I need to run a report against my Windows NT4 domain (PDC or BDC) and retrieve all the users that have RAS options i.e. they are allowed to dial in. Regards, Carlos Magalhaes
RE: [ActiveDir] ADSI and RAS
Title: Message you're not wrong it kick's a$$ - and it used to be a lot less expensive than it is now smug grin glad I bought it then /smug grin -Original Message-From: Weston Rogers [mailto:[EMAIL PROTECTED]] Sent: 15 January 2003 14:40To: [EMAIL PROTECTED]Subject: RE: [ActiveDir] ADSI and RAS woh, dameware is pretty sweet. -Original Message-From: EALES, Jack - FPIL [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 2:41 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] ADSI and RAS Go to www.dameware.com and get the 30 day trial of the Dameware Utilities Exporter - it'll let you get this info and a whole lot more then buy a copy because it's a superb suite of tools for NT4.0 management, I've not tried it on AD yet - but it works for managing Win2K boxes as well... Just my $0.02 Regards, Jack -Original Message-From: Carlos Magalhaes [mailto:[EMAIL PROTECTED]] Sent: 15 January 2003 06:20To: '[EMAIL PROTECTED]'Subject: [ActiveDir] ADSI and RAS Hi all, Just wondering if any of you have done this and would be so kind to forward it to me before I go and re code it, I need to run a report against my Windows NT4 domain (PDC or BDC) and retrieve all the users that have RAS options i.e. they are allowed to dial in. Regards, Carlos Magalhaes
RE: [ActiveDir] ADSI and RAS
Title: Message Their Mini-Remote Control program is pretty handy as well. -Original Message-From: Weston Rogers [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 7:40 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] ADSI and RAS woh, dameware is pretty sweet. -Original Message-From: EALES, Jack - FPIL [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 15, 2003 2:41 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] ADSI and RAS Go to www.dameware.com and get the 30 day trial of the Dameware Utilities Exporter - it'll let you get this info and a whole lot more then buy a copy because it's a superb suite of tools for NT4.0 management, I've not tried it on AD yet - but it works for managing Win2K boxes as well... Just my $0.02 Regards, Jack -Original Message-From: Carlos Magalhaes [mailto:[EMAIL PROTECTED]] Sent: 15 January 2003 06:20To: '[EMAIL PROTECTED]'Subject: [ActiveDir] ADSI and RAS Hi all, Just wondering if any of you have done this and would be so kind to forward it to me before I go and re code it, I need to run a report against my Windows NT4 domain (PDC or BDC) and retrieve all the users that have RAS options i.e. they are allowed to dial in. Regards, Carlos Magalhaes
RE: [ActiveDir] ADSI and RAS
Title: Message Go to www.dameware.com and get the 30 day trial of the Dameware Utilities Exporter - it'll let you get this info and a whole lot more then buy a copy because it's a superb suite of tools for NT4.0 management, I've not tried it on AD yet - but it works for managing Win2K boxes as well... Just my $0.02 Regards, Jack -Original Message-From: Carlos Magalhaes [mailto:[EMAIL PROTECTED]] Sent: 15 January 2003 06:20To: '[EMAIL PROTECTED]'Subject: [ActiveDir] ADSI and RAS Hi all, Just wondering if any of you have done this and would be so kind to forward it to me before I go and re code it, I need to run a report against my Windows NT4 domain (PDC or BDC) and retrieve all the users that have RAS options i.e. they are allowed to dial in. Regards, Carlos Magalhaes
Re: [ActiveDir] ADSI Service Provider
All, I have poored into several publications, but I am looking for experience. Has anyone ever built a ADSI Service Provider. My goal is to populate the ADSI with database information. Make NT Services available in DNS, and achieve network replication across DC's. Making the directories browseable for ADSI Clients. Do I extend the LDAP provider with properties and schema of the new Directory Elements, or do I build my own provider. MPenland - Original Message - From: stefano tufillaro [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 11, 2002 6:21 PM Subject: Re: [ActiveDir] ADSI Service Provider Ciao You must sarch in MSDN developer library and you will find (no much) examples. Pay attention: you must forget the traditional idea of service. Service in Act Dir are all other universe (More beatiful for me) Other: the publication of a service it is not a simple populating registry keys. If you want look at the Microsoft publication (for example Microsoft SQL, MIcrosoft HIS, Microsoft for Application Server) or McAfee Antivirus or Norton Symantec Ghost But it is not difficult Bye _ Join the world's largest e-mail service with MSN Hotmail. http://www.hotmail.com List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ VIRUS FREE SMTP! MarinaOne VIRUS FREE SMTP! MarinaOne List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] ADSI: WinNT provider vs LDAP provider
Your observations are completely correct. You can get to some attributes (properties) only through WinNT and you can get to others only through LDAP and you can get to some through BOTH. Appendix B in Windows NT/2000 ADSI Scripting for system administration by Thomas Eck gives a complete rundown of the attributes and the provider support. This information might be available on the internet. I think the whole book might be online. -Original Message- From: Fugleberg, David A [mailto:[EMAIL PROTECTED]] Sent: Friday, May 31, 2002 1:15 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] ADSI: WinNT provider vs LDAP provider Hello all - I've noticed while stealing bits of VBScript from others that sometimes folks use the WinNT provider, while other times they use the LDAP provider. At first, I thought that scripts using the WinNT provider were written for NT4 domains, and just happened to work against AD due to backward compatibility, but that one should use the LDAP provider when targeting AD. Now I'm not so sure...it seems as though there are some properties that are accessible only through the WinNT provider. For example, I can retrieve the password expiration date with the WinNT provider (objUser.PasswordExpirationDate), but not with the LDAP provider. I figured that since the user attributes in AD are a superset of those in the NT SAM, I'd be able to get all of them with the LDAP provider. That doesn't seem to be the case. What do you do ? Do you use a combination of both providers in your scripts ? Are there different property names for the same attributes depending on which provider you use ? Am I just missing something here ? Dave Dave Fugleberg Information Systems Architect Northwest Airlines 612-726-6860 List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
