RE: [ActiveDir] AD Security Group Information

2006-11-01 Thread joe



One small correction and one small alternative 
;o)

Use objectcategory=group versus objectclass=group unless 
you have indexed objectclass. You will notice a substantial query speed 
delta.

I don't see mention of a specific type of security group 
and the query provided only gets Security enabled global groups. If you want all 
security enabled groups change grouptype=-2147483646 to 
grouptype=-1


--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm




From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael 
M.Sent: Tuesday, October 31, 2006 7:17 AMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD Security 
Group Information


adfind 
-default -f "(objectclass=group)(groupType=-2147483646)" -tdc 
whenChanged

hth,
Mike 
Thommes





From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
On Behalf Of Frank 
AbagnaleSent: Tuesday, October 
31, 2006 2:51 AMTo: 
activedir@mail.activedir.orgSubject: [ActiveDir] AD Security Group 
Information


I'm having a clear up of my domain and there are approx 
8000 security groups.

Some of these are no longer required, how is the best 
way to determine whether the groups are still in use? Is there any way to query 
the groups to identify when they were last 
modified?

thanks

Frank

Single Domain, Windows 2003 
FFL
 




We have the perfect Group for you. Check out the handy 
changes to Yahoo! Groups. 


RE: [ActiveDir] AD Security Group Information

2006-10-31 Thread Thommes, Michael M.








adfind -default
-f (objectclass=group)(groupType=-2147483646) -tdc whenChanged



hth,

Mike Thommes











From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank Abagnale
Sent: Tuesday, October 31, 2006
2:51 AM
To: activedir@mail.activedir.org
Subject: [ActiveDir] AD Security
Group Information







I'm having a clear up of my domain and there are approx 8000 security
groups.





Some of these are no longer required, how is the best way to determine
whether the groups are still in use? Is there any way to query the groups to
identify when they were last modified?





thanks





Frank





Single Domain, Windows 2003 FFL



 







We have the perfect Group for you. Check out the handy
changes to Yahoo! Groups.