Cool. Wouldn't he need to run the bitwise query for every possible value
to make sure he gets all the accounts in the domain? Like account
disabled and password set to never expire?

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley
Sent: Tuesday, July 18, 2006 2:25 PM
To: [email protected]
Subject: RE: [ActiveDir] User extraction

You could also use the bit wise query operators to make a list of just
disabled and just enabled accounts, then merge the two w/ the appopriate
column ...

-B

On Tue, 18 Jul 2006, Mike Newell wrote:

> Hey,
> 
> There's no isDisabled attribute that I know of. You could run the
adfind
> command below and use the userAccountControl attribute to determine if
> the account is disabled or not. 
> 
>  
> 
> adfind -b dc=yourdomain,dc=com -nodn -f "(&(objectCategory=person)(o
> 
> bjectClass=user))" givenName SN userAccountControl >> filename.txt
> 
>  
> 
> You can do some stuff in Excel if you need a report that says
disabled.
> 512 is normal, 514 is disabled, etc. Check here for the details on the
> values for the userAccountControl attribute.
> 
>  
> 
> http://support.microsoft.com/default.aspx?scid=kb;en-us;305144
> 
>  
> 
> ________________________________
> 
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Harding,
Devon
> Sent: Tuesday, July 18, 2006 11:41 AM
> To: [email protected]
> Subject: [ActiveDir] User extraction
> 
>  
> 
> What is the adfind syntax that will extract all users in a domain to a
> text file and contains the following field?
> 
>  
> 
> LastName, FirstName    isDisabled
> 
>  
> 
> -Devon
> 
>
------------------------------------------------------------------------
> --- 
> This message (including any attachments) is intended only for the use
of
> the individual or entity to which it is addressed and may contain
> information that is non-public, proprietary, privileged, confidential,
> and exempt from disclosure under applicable law or may constitute as
> attorney work product. If you are not the intended recipient, you are
> hereby notified that any use, dissemination, distribution, or copying
of
> this communication is strictly prohibited. If you have received this
> communication in error, notify us immediately by telephone and (i)
> destroy this message if a facsimile or (ii) delete this message
> immediately if this is an electronic communication. 
> Thank you.
> 
> 
> 
> This message and any attachments (the "Message") may contain
confidential, proprietary and/or privileged information and are only for
their intended recipient(s). If you are not the intended recipient, you
should notify the sender and delete the Message. E-mail transmissions
cannot be guaranteed to be secure or error-free. This Message is
provided for information purposes and should not be construed as a
solicitation or offer to buy or sell any securities or financial
instruments, or to provide investment advice in any jurisdiction where
the sender is not properly licensed or permitted to do so.  This Message
is subject to additional conditions and restrictions.  Please read them
here:  http://legal.dimensional.com/email/
> 
> 

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx


This message and any attachments (the "Message") may contain confidential, 
proprietary and/or privileged information and are only for their intended 
recipient(s). If you are not the intended recipient, you should notify the 
sender and delete the Message. E-mail transmissions cannot be guaranteed to be 
secure or error-free. This Message is provided for information purposes and 
should not be construed as a solicitation or offer to buy or sell any 
securities or financial instruments, or to provide investment advice in any 
jurisdiction where the sender is not properly licensed or permitted to do so.  
This Message is subject to additional conditions and restrictions.  Please read 
them here:  http://legal.dimensional.com/email/


List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx

Reply via email to