RE: [ActiveDir] Active Directory Cookbook

Sat, 25 Oct 2003 07:50:11 -0700

Title: Message
Bite me, Joe.
 
:P
 

Rick Kingslan  MCSE, MCSA, MCT
Microsoft MVP - Active Directory
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe
Sent: Saturday, October 25, 2003 1:17 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Active Directory Cookbook

I thought you would think that was a good thought. But you have a good point to counter that good thought. I should submit something, I wouldn't mind being in the acknow..... err wait a minute. How about this, people who are already in it can submit something and pick one person to be removed from the acknowledgements... Oh Rick.... :op
 
Hmmm what could I submit... Oh I know, something I had to do today really quick... Find all OU's with any GPO link whatsoever...
 
First off I wondered, is gplink in the GC?
 
adfind -schema -f ldapdisplayname=gplink ismemberofpartialattributeset
 
Gets you
 
dn:CN=GP-Link,CN=Schema,CN=Configuration,DC=joehome,DC=com
>isMemberOfPartialAttributeSet: TRUE
 
 
So it sure is... This is easy!
 
adfind -gc -b -f "&(objectcategory=organizationalunit)(gplink=*)" gplink
 
On my home domain that rips off in less than a second...
 
dn:OU=Domain Controllers,DC=joehome,DC=com
>gPLink: [LDAP://CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=joehome,DC=com;0]
 
dn:OU=Cmps,DC=joehome,DC=com
>gPLink: [LDAP://CN={61CF67FA-41FA-415C-B349-E7D182BDD54F},CN=Policies,CN=System,DC=joehome,DC=com;0]
 
Oh ok, you now want to know what the nice name of those are...
 
adfind -b CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=joehome,DC=com -s base displayname
 
and
 
adfind -b CN={61CF67FA-41FA-415C-B349-E7D182BDD54F},CN=Policies,CN=System,DC=joehome,DC=com -s base
 
 
 
I don't recall those exact examples in the book. :op
 
 
Can anyone guess how often I use adfind in the course of a normal workday?
 
Me neither. But I have wrapped it with a couple of batch files.
 
The first is called findthis.cmd
 
It takes whatever I enter and basically does a
 
adfind -gc -b -f name=%1 -dn
 
I also have a kids.cmd
 
adfind -gc -b %1 -s one -f * -dn
 
 
and also I have a get
 
adfind -b %1 -s base
 
 
Ok that is enough, I don't want to hurt anyone. ;o)
 
 
Good night!
 
 
  joe


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robbie Allen
Sent: Saturday, October 25, 2003 1:40 AM
To: '[EMAIL PROTECTED]'

And what have you been drinking at 1am?? :-)  Good thought, but my guess is that people who offer good suggestions probably already have a copy of the book (since they know what's in there and what isn't).  FWIW, I would be happy to mention in the acknowledgements section anyone who suggests a recipe I include in the next edition.
 
Robbie Allen
-----Original Message-----
From: Myrick, Todd (NIH/CIT) [mailto:[EMAIL PROTECTED]
Sent: Saturday, October 25, 2003 12:54 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Active Directory Cookbook

Hey Rob,

 

What about this.... donate a cookbook a month for someone who comes up with a great idea for additions to the next version of the cookbook.

 

Basically the submissions have to follow the format of the book, and have to work. 

 

They would be judge based on the following criteria.

 

The topic covered in AD.  1-25 points (Existing topics with a spin get up to 12.5 points; new topics getting up to 25 if worthy.)

The issues identified within the topic 1-25 points.  (Each issue identified gets 2.5 points for existing topics. Max 10)

The solutions that meet the needs identified for each topic. 1-50 points.  (Each need that gets a solution gets 5 points per solutions.  Solutions should identify any GUI, CLI, and VB methods for automation.)

 

To make things interesting if it takes off,  If one of the vendors (Cough....NETPRO, Cough....AELITA, Cough.....Quest, Cough......BV) was willing to support this contest, it would be really interesting.

 

Just an Idea at 1AM...

 

Toddler

 

 

 

-----Original Message-----
From: Robbie Allen [mailto:[EMAIL PROTECTED]
Sent: Friday, October 24, 2003 12:43 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Active Directory Cookbook

 

Thanks for all of the positive feedback about the book.  I give the credit to my all-star cast of reviewers :-) 

 

My main goal was to produce a reference that would help AD admins get their job done quicker and easier.  There is just too much stuff AD admins have to remember and that's why I thought the O'Reilly cookbook format would work especially well in this case.

 

If you have the book (or even if you don't), be sure to check out the following web site, which has all of the code in the book and any corrections: http://www.rallenhome.com/books/adcookbook/code.html

 

Keep the feedback coming....

 

Regards,

Robbie Allen

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Friday, October 24, 2003 11:51 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [ActiveDir] Active Directory Cookbook


Agreed - I got mine yesterday from Amazon and I must say that this should be on the shelf of every AD administrator. Period.

Michael Parent MCSE MCT
Analyst I - Web Services
ITOS - Systems Enablement
Maritime Life Assurance Company
(902) 453-7300 x3456

 

"Lou Vega" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]

10/24/2003 10:37 AM
Please respond to ActiveDir

       
        To:        <[EMAIL PROTECTED]>
        cc:        
        Subject:        [ActiveDir] Active Directory Cookbook




Received my very own copy of Mr. Robbie Allen's "Tuna" book last night from Amazon.com - in the first night's reading the book is already proving it's worth as I see how to do certain things much simpler than I had done them before (with regards to the VBScripts included), as well as learn new things I didn't realize could be done (in both AD2K and AD2K3). The book will be very handy as I continue to stand up my development Windows 2003 domain.
 
To anyone else on this list who hasn't gotten it yet...it's a worthwhile addition to your Active Directory library.
 
To Robbie (and all the others who assisted him!) - thanks for a great resource!
 
r/
Lou
 
 
 

Reply via email to