One small correction and one small alternative....
;o)
Use objectcategory=group versus objectclass=group unless
you have indexed objectclass. You will notice a substantial query speed
delta.
I don't see mention of a specific type of security group
and the query provided only gets Security enabled global groups. If you want all
security enabled groups change grouptype=-2147483646 to
grouptype<=-1
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Tuesday, October 31, 2006 7:17 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Security Group Information adfind
-default -f "&(objectclass=group)(groupType=-2147483646)" -tdc
whenChanged hth, Mike
Thommes From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Frank
Abagnale I'm having a clear up of my domain and there are approx
8000 security groups. Some of these are no longer required, how is the best
way to determine whether the groups are still in use? Is there any way to query
the groups to identify when they were last
modified? thanks Frank Single Domain, Windows 2003
FFL
We have the perfect Group for you. Check out the handy
changes to Yahoo! Groups. |
- [ActiveDir] AD Security Group Information Frank Abagnale
- RE: [ActiveDir] AD Security Group Information Thommes, Michael M.
- [ActiveDir] Problem driving me crazy Ramon Linan
- RE: [ActiveDir] Problem driving me c... Kevin Brunson
- RE: [ActiveDir] Problem driving m... Ramon Linan
- RE: [ActiveDir] Problem driving me cr... Vinnie Cardona
- [ActiveDir] RPC error when trying... Washington, Booker
- RE: [ActiveDir] AD Security Group Informa... joe
- RE: [ActiveDir] AD Security Group Information neil.ruston
- RE: [ActiveDir] AD Security Group Information Almeida Pinto, Jorge de