One small correction and one small alternative.... ;o)
Use objectcategory=group versus objectclass=group unless you have indexed objectclass. You will notice a substantial query speed delta.
I don't see mention of a specific type of security group and the query provided only gets Security enabled global groups. If you want all security enabled groups change grouptype=-2147483646 to grouptype<=-1
O'Reilly Active Directory Third Edition - 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.
Sent: Tuesday, October 31, 2006 7:17 AM
Subject: RE: [ActiveDir] AD Security Group Information

adfind -default -f "&(objectclass=group)(groupType=-2147483646)" -tdc whenChanged



Mike Thommes


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank Abagnale
Sent: Tuesday, October 31, 2006 2:51 AM
Subject: [ActiveDir] AD Security Group Information


I'm having a clear up of my domain and there are approx 8000 security groups.

Some of these are no longer required, how is the best way to determine whether the groups are still in use? Is there any way to query the groups to identify when they were last modified?



Single Domain, Windows 2003 FFL


We have the perfect Group for you. Check out the handy changes to Yahoo! Groups.

Reply via email to