You could also use the bit wise query operators to make a list of just
disabled and just enabled accounts, then merge the two w/ the appopriate
column ...

-B

On Tue, 18 Jul 2006, Mike Newell wrote:

> Hey,
> 
> There's no isDisabled attribute that I know of. You could run the adfind
> command below and use the userAccountControl attribute to determine if
> the account is disabled or not. 
> 
>  
> 
> adfind -b dc=yourdomain,dc=com -nodn -f "(&(objectCategory=person)(o
> 
> bjectClass=user))" givenName SN userAccountControl >> filename.txt
> 
>  
> 
> You can do some stuff in Excel if you need a report that says disabled.
> 512 is normal, 514 is disabled, etc. Check here for the details on the
> values for the userAccountControl attribute.
> 
>  
> 
> http://support.microsoft.com/default.aspx?scid=kb;en-us;305144
> 
>  
> 
> ________________________________
> 
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
> Sent: Tuesday, July 18, 2006 11:41 AM
> To: [email protected]
> Subject: [ActiveDir] User extraction
> 
>  
> 
> What is the adfind syntax that will extract all users in a domain to a
> text file and contains the following field?
> 
>  
> 
> LastName, FirstName    isDisabled
> 
>  
> 
> -Devon
> 
> ------------------------------------------------------------------------
> --- 
> This message (including any attachments) is intended only for the use of
> the individual or entity to which it is addressed and may contain
> information that is non-public, proprietary, privileged, confidential,
> and exempt from disclosure under applicable law or may constitute as
> attorney work product. If you are not the intended recipient, you are
> hereby notified that any use, dissemination, distribution, or copying of
> this communication is strictly prohibited. If you have received this
> communication in error, notify us immediately by telephone and (i)
> destroy this message if a facsimile or (ii) delete this message
> immediately if this is an electronic communication. 
> Thank you.
> 
> 
> 
> This message and any attachments (the "Message") may contain confidential, 
> proprietary and/or privileged information and are only for their intended 
> recipient(s). If you are not the intended recipient, you should notify the 
> sender and delete the Message. E-mail transmissions cannot be guaranteed to 
> be secure or error-free. This Message is provided for information purposes 
> and should not be construed as a solicitation or offer to buy or sell any 
> securities or financial instruments, or to provide investment advice in any 
> jurisdiction where the sender is not properly licensed or permitted to do so. 
>  This Message is subject to additional conditions and restrictions.  Please 
> read them here:  http://legal.dimensional.com/email/
> 
> 

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

Reply via email to