retrieve the memberOf attribute of the users - if
multi-domain forest, use a GC to also catch UGs. If you want the complete
picture, you'll have to run the query against all domains to also catch local
group memberships.
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
dsquery (come with 2k3, but also works fine on
2000)
get OU from DN of user objects
get groups from memberOf attribute (will not be complete in
multi-domain forests, but maybe good enough for what you
need)
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL
If I understand, you want to find all users that are disabled but do NOT
have delete in the description attribute? This should do that:
((objectClass=user)(objectCategory=person)(employeeID=*)(sn=*)(Company=*)(u
serAccountControl:1.2.840.113556.1.4.803:=2)(!(description=*delete*)))
The
