Thanks for everyone's feedback. OLDCMP is now released on my web site
(www.joeware.net). Here were the changes for V1.4.0


O Removed Default sort - records returned in the order AD returns them by
default
O If you specify a sort method and also select dhtml, it won't force the
server to do the sort, it will sort at the client in IE. 
O Added a bug fix. If you had a : in the file name it would push the tool
into APPEND mode which doesn't work well for DHTML - at all. Thanks to Mike
Celone for finding that and telling me. 
O Display the accountexpires attribute in the report
O Added an option called /stamp which is completely unintuitive...

Let me explain that last mod. Something I wanted to do was have the ability
to determine WHEN a machine account was disabled in as authoritative way as
I could... 

What to do what to do. The disabled flag is part of whole DWORD of flags so
checking metadata on that is near worthless. 

I could require a schema update to add a joeware attribute... While I could
probably pull it off by simply adding the code to do it in the tool that did
it in the background I figured that wouldn't be cool because I would be
taking advantage of all the people who don't run in a secure manner (and if
you think I am the only person who has thought to do this... I have a
bridge...). 

So I looked at all of the attributes of a computer and what is likely to be
used and what isn't likely to be used.... Computers are basically users so I
thought, hey, I'll grab accountexpires because that is used on the user side
but isn't normally exposed on the computer side! Also it is an int8 value
and is a time field. This works! So I simply punch in the current date/time
stamp (to the nearest 100 nanosecond period) into that value and I now have
a time stamp of when the account was disabled for later audit. 

I want to also add a hook into oldcmp to only do deletes on accounts that
have certain values there. That isn't in yet but is in my list of things
that need to go in. I wanted to get a version out for public consumption
because word of this thing has seemingly slipped to lots of people and my
inbox was getting rather full of could you please send the latest version...


So anyway it is out there, have fun with it.

  joe

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to