Tool.....penetration....
Tony took a vacation and this is what this list is turning into????
Time to go wash my brains.
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.com - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
From: joe
Sent: Fri 10/27/2006 9:50 PM
To: [email protected]
Subject: RE: [ActiveDir] list lastlogontime for every user script
First off... let's go with using the word utility versus tool.... ;o)
Second off.... yeah they are pretty popular. I got a lot of pings from various MSFT and other consultant type friends who seem to run into my utilities in the wild pretty regularly. This penetration is greater in the primarily english speaking world (North America, UK, Western Europe, Australia, and militaries of those areas globally) as the utilities really better for targeted at English environments. UNICODE and other special characters (anything with umlauts, etc) are kind of a pain to deal with from the command line. Anyone who has used adfind to output something that has characters like éèà has noticed that to the command line, that ends up looking something like
dn:CN=TestGroupΘΦα,OU=TestOU,DC=joe,DC=com
but if that same output is redirected to a text file via standard redirection it looks like
dn:CN=TestGroupéèà,OU=TestOU,DC=joe,DC=com
and I can assure you adfind is doing nothing different which is the problem. I have worked through some of that with some new routines and that is the V2 versions of AdFind/AdMod I occasionally mention as it will take very radical changes to use the new strings. I have done it with some other code I have written but nothing I have released yet as I am still tinkering with it. Basically I have to try and work out where you are sending the output in order to determine how to output it.
I have no clue what would happen if you tried to use adfind in an environment with true multibyte characters like say a Chinese edition. I expect it would blow up magnifiscently. I am curious if even dsquery would work in that environment.
Doing this in the GUI is immensely easier which sounds odd, most people would tend to think that console apps are easier to write than GUI. I find it just the opposite, GUI is easier for most everything especially character encoding and threaded output but I find the GUI less useful than the console. And with Server Core coming... The joeware stuff will become even more popular as my utilities are very nice console utilities AND they are all FAT-free, err I mean NET-free. ;o) Twice the power, triple the taste, tenth of the calories and actually work on Server Core...
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: Friday, October 27, 2006 10:19 PM
To: [email protected]
Subject: Re: [ActiveDir] list lastlogontime for every user script
I believe at last count it was way more than half the world was using joe's tool. Likely because it's fast, free, easy to use and the best around. (-;
Well, half the world I tend to live in anyway.
On 10/27/06, Almeida Pinto, Jorge de <[EMAIL PROTECTED]> wrote:
>>>>>I used Joe's tool (no sexual connotation here) because it was easy and fast
never mind.... half of the world does it! ;-)
ROTFMAO
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
( Tel : +31-(0)40-29.57.777
( Mobile : +31-(0)6-26.26.62.80
* E-mail : <see sender address>
________________________________
From: [EMAIL PROTECTED] on behalf of Ramon Linan
Sent: Fri 2006-10-27 20:51
To: [email protected]
Subject: RE: [ActiveDir] list lastlogontime for every user script
Thanks Matt for the script that you sent and thanks Joe for your tool.
I used Joe's tool (no sexual connotation here) because it was easy and fast.
I have just one question, I am getting some users with lastlogontimespamp 0000/00/00-00:00:00 most of them (or all of them) are system users, like the systemmailbox. I bet this is because they never login into the system.
This is the command that I used oldcmp -report -age 90 -users -llts
is there a way of excluding disabled users from the results?
Thanks
________________________________
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of joe
Sent: Friday, October 27, 2006 12:40 AM
To: [email protected]
Subject: RE: [ActiveDir] list lastlogontime for every user script
It isn't, it is randomly calculated every time logonTime is updated.
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
________________________________
From: mailto:[EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED]
Sent: Thursday, October 26, 2006 9:49 PM
To: [email protected]
Subject: RE: [ActiveDir] list lastlogontime for every user script
How is this 9-14 day value tracked for each user object, by the way?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of joe
Sent: Thursday, October 26, 2006 5:34 PM
To: [email protected]
Subject: RE: [ActiveDir] list lastlogontime for every user script
oldcmp
Keep in mind that by default, lastLogonTimeStamp is not updated every day, it will be updated about every 9-14 days (14 days with a random swing of minus 0-5 days).
You can output to csv or html, whatever is more convenient for you.
Alternately if you just want to query the value directly, you can use adfind to generate the output.
However, oldcmp tends to be easier for most folks.
joe
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
________________________________
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Ramon Linan
Sent: Thursday, October 26, 2006 4:59 PM
To: [email protected]
Subject: [ActiveDir] list lastlogontime for every user script
Hi,
I am trying to do an script or something that will list lastlogontime for all users so I can receive an email when someone has not use the account for more than 30 days.
I have seen a couple of examples of half built scripts that don't work, I get lost when they start dealing with the converting the number to a date...
Does anyone has a script will do some similar? does Joe ware has something similar?
Thanks
Ramon
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
