Yep by default I assume you want a subtree search so you get everything, if you want a base level search (i.e. only object that is the base of the query) you use -s base. If you want just the children (not the object, not the grandchildren) you want -s one. Another assumption - if no filter is specified it assumes objectclass=* If no base assumed, I assume you meant to provide one but forgot so throw an error. If no attributes specified, I assume you want * (star set - all default attribs AD returns). If you don't specify an attribute but also specify -sddc (or -sddl for Dean) I assume you want the attributes *, nTSecurityDescriptor
_____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Noah Eiger Sent: Wednesday, January 18, 2006 6:40 PM To: [email protected] Subject: RE: [ActiveDir] adfind question Thanks all. I guess I needed the -s base. And yes, David, I omitted the -h. I checked and that omission was only in my post, not in the actual script. Thanks again. -- nme _____ From: Almeida Pinto, Jorge de [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 18, 2006 3:11 PM To: [email protected] Subject: RE: [ActiveDir] adfind question Try: adfind -schema -s base objectVersion AdFind V01.27.00cpp Joe Richards ([EMAIL PROTECTED]) November 2005 Using server: <DC>:389 Directory: Windows Server 2003 Base DN: CN=Schema,CN=Configuration,DC=domain,DC=local dn:CN=Schema,CN=Configuration,DC=domain,DC=local >objectVersion: 30 1 Objects returned Cheers, jorge _____ From: [EMAIL PROTECTED] on behalf of Noah Eiger Sent: Wed 2006-01-18 23:27 To: [email protected] Subject: [ActiveDir] adfind question Hi - I am trying to write a little batch file that will report various version numbers to me on each DC to help monitor the W2k3 upgrade process. I am having trouble getting adfind to report the objectVersion of the Schema. When I run: adfind -DC1 -b "CN=Schema,CN=Configuration,DC=myco,DC=private" I get a torrent of stuff including the attribute that I want. (That is an attribute right?) When I try to filter or limit the output, I don't get what I want. For example, adfind -DC1 -b "CN=Schema,CN=Configuration,DC=myco,DC=private" objectVersion Gives me a list of all of the objects under Schema. How can I limit this? (Or, does anyone have a script that already checks all this stuff?) Thanks. -- nme -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 267.14.20/233 - Release Date: 1/18/2006 This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 267.14.20/233 - Release Date: 1/18/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 267.14.20/233 - Release Date: 1/18/2006
<<attachment: winmail.dat>>
