Hey Mark, ancient chinese secret... We could tell you but would have to beat you with a bamboo rod...
When you list 1.1 (aka LDAP_NO_ATTRS) as the attribute list it tells AD not to send back any attributes at all, just return DNs. Speeds things up. You get this with adfind by specifying -c or -dn options... i.e. Tony's call below in adfind format would be Adfind -b dc=mydomain,dc=com -f "&(objectcategory=person)(samaccountname=*)(pwdlastset=0)" -dn Note I like Tony's use of samaccountname=* in the filter... joe ------------- http://www.joeware.net (download joeware) http://www.cafeshops.com/joewarenet (wear joeware) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: Friday, March 12, 2004 1:23 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Finding users who must change pw Tony, what's the 1.1 at the end of the command line? I figured it was just something extraneous, but wasn't sure... <mc> -----Original Message----- From: Tony Murray [mailto:[EMAIL PROTECTED] Sent: Thursday, March 11, 2004 10:59 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Finding users who must change pw ...and interestingly, csvde.exe is a lot quicker: csvde -f csvde.txt -d "DC=mydomain,DC=com" -r "(&(objectCategory=person)(samaccountname=*)(pwdlastset=0))" -p subtree -l 1.1 Tony List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
