One of the problems with tweaking permissions etc is that it can take a
long time to get it right and you leave yourself in an unsupported
position. As an example, we use a package called QL (from Distinction
Systems Limited) for student records. We were told by their helpdesk
that in order to get
Thanks Matt - that was the document I referenced in my original question
though. I'm trying to achieve the steps via a scripted approach.
Thanks to all who have helped so far.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent:
Folks,
I am struggling with
a fairly simple request. We would like a simple report that lists how many PC's
there are in each OU into an Excel Spreadsheet. Well I have managed to do this
with CSVDE and the summary report in Excel. Is there a better (low cost)
solution?
Dave
Wade
With a food cookbook it kind of makes sense to just dip into it when you
want to find out how to make something. With AD, it's useful to read the
whole thing - that way you find (or I find!) lots of things which I
never knew existed or could be done!
Steve
-Original Message-
From:
my first and simple thought is: OLDCMP from
joeware.net
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave
WadeSent: Monday, September 18, 2006 12:04To:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Ad Reporting
Tools
Folks,
I am struggling
I will say that you could Hyena, it is pretty good with
reports and not too expensive.
But of course it would be way more cool if you create your
own tools scripting, ADSI or CDO.
good luck
Ramon
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave
WadeSent: Monday,
What features, etc are you looking for that you would
consider better?
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave
WadeSent: Monday, September 18, 2006 6:04 AMTo:
Folks,
Thanks for the odd tips.As time was
pressingI took the output from CSVDE and fed it into a small "C" program
that produces the summaries I need.Thething that was giving me the
issues was that I wanted a count. We have bothHyena and Ideal, and they
will also produce reports listing
You said both sites
have Internet connectivity, can you not configure replication through a VPN
between the sites? A lot of implementations have replication across firewalls
in that manner. And if not, what about dial-up between them? 700 users to
what, maybe 2000 objects thats not a lot
Joe,
What about adding a "-summary" flag to "oldcmp" so you can
see how many (disabled) PCs you have in any part of the OU tree? Might also be
nice to have an "-onlyactive" rather than "all" or "disabled"... "Managers"
often want "numbers"
Dave.
From: [EMAIL PROTECTED]
[mailto:[EMAIL
I would rephrase that as The ONLY problem with tweaking permissions is that I
have to do it at all. Implicit in that is that the time I spend - any time at
all - is time I shouldn't have to spend, and would rather spend fixing my
problems instead of xyz vendor's. It can also be infered that
-enabled is definitely on the list to be added to oldcmp.
I will have to thinkabout the summary switch...
So you just want counts... I have something in my script
repository that is probably pretty close to what you want... I used it for some
testing once. It is perl, but you are
Not too sure where this WinRE will sit with Windows Server and Active
Directory, but anyway.
http://blogs.msdn.com/winre/archive/2006/09/18/760295.aspx
Regards
Mark Parris
Base IT Ltd
Active Directory Consultancy
Tel +44(0)7801 690596
List info : http://www.activedir.org/List.aspx
List FAQ
If the vendor supported the Designed for Windows XP logo they would
support non admin.
The reality is that these vendors can code in a Win98 world because we
the buying public do not care. As long as we don't care they can
continued to code exactly the way they are now.
When Vista arrives
Return Receipt
Your RE: [ActiveDir] Ad Reporting Tools
document:
Joe,
Thanks for those. They look most useful, especially the bit
that test for disabled, I could see which field it was from ADSIEdit butI
had not quitefigured out what was set
Dave.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joeSent: 18 September 2006 16:12To:
Can someone direct me to a _vbscript_ that I can run remotely which will dump the ACl's of all file/folders on a bunch of remote servers(250)to a central Excel spreadsheet?
I assume using wmi.
Thanks, sorry for the bother but I can't seem to be able to google anything deifinitive on this.
We have to let them though because in many cases there are no
alternatives and there are not enough alternatives because nobody is
even asking for them. Case in point is the Dept. of Ed. software I
mentioned below. There's not a big market for alternate free DoE
software. We're effectively
We need to ask the vendor to step up to the plate. (have I said I'm
big at tilting at windmills?).
We made Microsoft care about security it's the rest of our vendors
turn now.
Because Vista is more locked down...it will make it worse for the
vendors... better for us is what I meant.
The Cacls command line tool and a _vbscript_ to walk the tree
(using FileSystemObject) will do the trick. ACLs arent really spreadsheet type
data IMHO.
Thanks,
Brian Desmond
[EMAIL PROTECTED]
c - 312.731.3132
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of
Thanks.
What would be the best readable format to dump it to(for management).?
On 9/18/06, Brian Desmond [EMAIL PROTECTED] wrote:
The Cacls command line tool and a _vbscript_ to walk the tree (using FileSystemObject) will do the trick. ACLs aren't really spreadsheet type data IMHO.
What do you mean where it will sit? Are you referring to how will it deal with permissions/security? Or ?I'm mostly just curious. On 9/18/06, Mark Parris
[EMAIL PROTECTED] wrote:
Not too sure where this WinRE will sit with Windows Server and Active Directory, but
Thanks, I have already been suggested that option in a private mail... and I think, it might be way more feasible than earlier adventurous idea. :-)Just in case, someone needs it, here is the link, for AD replication over VPN
Well, it will basically sit in between everything - you boot into this
environment and then you're able to restore your OS or parts of it,
including AD. The whole backup mechanism has been rewritten in LH and
WinRe is the environment used for recovery. Unsure at this time, if
you'll actually be
Actually Vista is supposed to make things better. It provides partial
re-direction for system folders and registry so applications think they are
writing to system areas, when in fact they are not. I am not sure how well this
will work in practise, as I have not tried it
Actually, the real issue with these scripts, is that how does cacls.exe know how many drives are on each server?
Say one server has a C: partition while another has a C: and E: and F:,etc.
How can I accurately enumerate all perms on all folders/files on all these servers/paritions via a
What I meant was - I am not sure even if Windows Restore Environment (WinRE)
will be applicable to future server releases but perhaps still of interest all
the same.
Mark
Mark Parris
Base IT Ltd
Active Directory Consultancy
Tel +44(0)7801 690596
-Original Message-
From: Al Mulnick
Here's an example of a fairly simple VBScript that will create a spreadsheet
and list all the computers (plus their details) below a given level. You
should be able to tweak it to give you the information you need.
Tony
set objExcel = WScript.CreateObject(Excel.Application)
objExcel.Visible
You have to have the script figure that out. Cacls isnt going
to do the recursion for you.
What is it specifically youre trying to learn from this
spreadsheet. Ive been asked for a dump of all the permissions on objects on a
tree many times but usually theres a specific piece of
Go to the Technet Script Repository and browse around. You'll see a
number of examples of how to enumerate and loop through all disk
drives on a particular system.
On 9/18/06, Tom Kern [EMAIL PROTECTED] wrote:
Actually, the real issue with these scripts, is that how does cacls.exe know
how
Using drive type,similar tothis: (will
wrap)
strServers="server1,server2,server3"aServers =
Split(strServers,",")
On
Error Resume NextFor iServer = 0 to Ubound(aServers)
Err.Clear Set DiskSet =
GetObject("winmgmts:{impersonationLevel=impersonate}!//" _
aservers(iserver)
Oh. ;)
On 9/18/06, Mark Parris [EMAIL PROTECTED] wrote:
What I meant was - I am not sure even if Windows Restore Environment (WinRE)will be applicable to future server releases but perhaps still of interest all the same.
MarkMark ParrisBase IT LtdActive Directory ConsultancyTel +44(0)7801
32 matches
Mail list logo
