|
Hey, There’s no isDisabled attribute that
I know of. You could run the adfind command below and use the userAccountControl
attribute to determine if the account is disabled or not. adfind -b dc=yourdomain,dc=com -nodn -f
"(&(objectCategory=person)(o bjectClass=user))" givenName SN
userAccountControl >> filename.txt You can do some stuff in Excel if you need
a report that says disabled. 512 is normal, 514 is disabled, etc. Check here
for the details on the values for the userAccountControl attribute. http://support.microsoft.com/default.aspx?scid=kb;en-us;305144 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Harding, Devon What is the adfind syntax that will extract all users in a
domain to a text file and contains the following field? LastName, FirstName isDisabled - ---------------------------------------------------------------------------
This message and any attachments (the "Message") may contain confidential, proprietary and/or privileged information and are only for their intended recipient(s). If you are not the intended recipient, you should notify the sender and delete the Message. E-mail transmissions cannot be guaranteed to be secure or error-free. This Message is provided for information purposes and should not be construed as a solicitation or offer to buy or sell any securities or financial instruments, or to provide investment advice in any jurisdiction where the sender is not properly licensed or permitted to do so. This Message is subject to additional conditions and restrictions. Please read them here: http://legal.dimensional.com/email/ |
- [ActiveDir] User extraction Harding, Devon
- RE: [ActiveDir] User extraction Mike Newell
- RE: [ActiveDir] User extraction Brett Shirley
- RE: [ActiveDir] User extraction Mike Newell
