One small correction and one small alternative.... ;o)
 
Use objectcategory=group versus objectclass=group unless you have indexed objectclass. You will notice a substantial query speed delta.
 
I don't see mention of a specific type of security group and the query provided only gets Security enabled global groups. If you want all security enabled groups change grouptype=-2147483646 to grouptype<=-1
 
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm 
 
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.
Sent: Tuesday, October 31, 2006 7:17 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Security Group Information

adfind -default -f "&(objectclass=group)(groupType=-2147483646)" -tdc whenChanged

 

hth,

Mike Thommes

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank Abagnale
Sent: Tuesday, October 31, 2006 2:51 AM
To: activedir@mail.activedir.org
Subject: [ActiveDir] AD Security Group Information

 

I'm having a clear up of my domain and there are approx 8000 security groups.

Some of these are no longer required, how is the best way to determine whether the groups are still in use? Is there any way to query the groups to identify when they were last modified?

thanks

Frank

Single Domain, Windows 2003 FFL

 


We have the perfect Group for you. Check out the handy changes to Yahoo! Groups.

Reply via email to