| Author | Messages | |
cpohlschneider
Posts:23
 | | 12/01/2008 9:39 AM |
| Hello,
For auditing purposes, I need to provide a report of current active
users in Active Directory. I have stumbled through Active Directory
Users and Computers and there is nothing that I can find that would give
me this type of report. I am wondering if it is possibly buried
somewhere in the tool or if I have to run this type of report from a
different tool. Thanks in advance for any help. AD forest in Windows
2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
| | | |
| tonyszko
Posts:77
| | 12/01/2008 9:43 AM |
| Chris Pohlschneider wrote:
> Hello,
>
> For auditing purposes, I need to provide a report of current active
> users in Active Directory. I have stumbled through Active Directory
> Users and Computers and there is nothing that I can find that would give
> me this type of report. I am wondering if it is possibly buried
> somewhere in the tool or if I have to run this type of report from a
> different tool. Thanks in advance for any help. AD forest in Windows
> 2003 AD native.
Hmmm ..it depends how You will define "active" however check joe's tool:
http://www.joeware.net/freetools/tools/oldcmp/index.htm
--
Tomasz Onyszko
http://www.w2k.pl/ - (PL)
http://blogs.dirteam.com/blogs/tomek/ - (EN)
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| bsonposh
Posts:302
| | 12/01/2008 9:45 AM |
| Depends on what you consider "current active"
On Mon, Dec 1, 2008 at 9:35 AM, Chris Pohlschneider <
Chris.Pohlschneider@hollowayusa.com> wrote:
> Hello,
>
> For auditing purposes, I need to provide a report of current active users
> in Active Directory. I have stumbled through Active Directory Users and
> Computers and there is nothing that I can find that would give me this type
> of report. I am wondering if it is possibly buried somewhere in the tool or
> if I have to run this type of report from a different tool. Thanks in
> advance for any help. AD forest in Windows 2003 AD native.
>
> Chris Pohlschneider
> Network Administrator
> chris.pohlschneider@hollowayusa.com
> 937-494-2559
>
>
>
| | | |
| AD00000592
Posts:3
| | 12/01/2008 9:47 AM |
| Depending on what you consider and active account to be you could use
dsquery with a command something like this:
dsquery * dc=whatever,dc=company,dc=com -filter
"(&(objectCategory=user)(!UserAccountControl:1.2.840.113556.1.4.803:=2))
" >c:\output.txt
Travis
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: Monday, December 01, 2008 9:36 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active
users in Active Directory. I have stumbled through Active Directory
Users and Computers and there is nothing that I can find that would give
me this type of report. I am wondering if it is possibly buried
somewhere in the tool or if I have to run this type of report from a
different tool. Thanks in advance for any help. AD forest in Windows
2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
| | | |
| neilruston
Posts:164
| | 12/01/2008 9:55 AM |
|
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to take a
look let me know.
As ever, define your requirements, define a process THEN start writing
code / generating reports etc in that order :-)
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active
users in Active Directory. I have stumbled through Active Directory
Users and Computers and there is nothing that I can find that would give
me this type of report. I am wondering if it is possibly buried
somewhere in the tool or if I have to run this type of report from a
different tool. Thanks in advance for any help. AD forest in Windows
2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| cpohlschneider
Posts:23
| | 12/01/2008 10:07 AM |
| Basically I need a list of user accounts that have access to sign into
our network for auditing purposes. Trying to figure out if I can provide
that in a report format to send to the auditors. So far that is the only
explanantion given to me on what they want. Screen shots would probably
also work to show them the list of users, but I was trying to make it
look like I put some effort into fulfilling their request.
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to take a
look let me know.
As ever, define your requirements, define a process THEN start writing
code / generating reports etc in that order :-)
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active
users in Active Directory. I have stumbled through Active Directory
Users and Computers and there is nothing that I can find that would give
me this type of report. I am wondering if it is possibly buried
somewhere in the tool or if I have to run this type of report from a
different tool. Thanks in advance for any help. AD forest in Windows
2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC.
This email may relate to or be sent from other members of the Barclays
Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended solely for
the addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this
email in error, please notify the sender immediately, delete it from
your system and do not copy, disclose or otherwise act upon any part of
this email or its attachments.
Internet communications are not guaranteed to be secure or without
viruses. The Barclays Group does not accept responsibility for any loss
arising from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this email may be monitored by the Barclays Group
for operational or business reasons.
Any opinion or other information in this email or its attachments that
does not relate to the business of the Barclays Group is personal to the
sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no.
1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
| | | |
| rkaramchand
Posts:28
| | 12/01/2008 10:13 AM |
| Check http://www.rlmueller.net/Last%20Logon.htm
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris Pohlschneider
Sent: Monday, December 01, 2008 10:03 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
Basically I need a list of user accounts that have access to sign into our network for auditing purposes. Trying to figure out if I can provide that in a report format to send to the auditors. So far that is the only explanantion given to me on what they want. Screen shots would probably also work to show them the list of users, but I was trying to make it look like I put some effort into fulfilling their request.
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to take a look let me know.
As ever, define your requirements, define a process THEN start writing code / generating reports etc in that order 
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active users in Active Directory. I have stumbled through Active Directory Users and Computers and there is nothing that I can find that would give me this type of report. I am wondering if it is possibly buried somewhere in the tool or if I have to run this type of report from a different tool. Thanks in advance for any help. AD forest in Windows 2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com<mailto:chris.pohlschneider@hollowayusa.com>
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| bsonposh
Posts:302
| | 12/01/2008 10:13 AM |
| The only way (I can think of) to do this is to query the lastLogon on each
DC for every user or parse the eventlogs. I prefer using lastLogon. You can
provide the auditor a list of all your users and when they logged in last.
You can use most scripting languages for this or adfind is a very useful
(and free) tool for this. I prefer Powershell
note: I did say EVERY DC. This is because lastLogon does not replicate.
On Mon, Dec 1, 2008 at 10:03 AM, Chris Pohlschneider <
Chris.Pohlschneider@hollowayusa.com> wrote:
> Basically I need a list of user accounts that have access to sign into
> our network for auditing purposes. Trying to figure out if I can provide
> that in a report format to send to the auditors. So far that is the only
> explanantion given to me on what they want. Screen shots would probably also
> work to show them the list of users, but I was trying to make it look like I
> put some effort into fulfilling their request.
>
> ------------------------------
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *
> neil.ruston@barclayswealth.com
> *Sent:* Monday, December 01, 2008 9:51 AM
> *To:* neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
> *Subject:* RE: [ActiveDir] AD Reports
>
>
>
> What is 'active' and what do you plan to do with this data?
>
>
>
> I have process flows which I've used before - if you'd like to take a look
> let me know.
>
>
>
> As ever, define your requirements, define a process THEN start writing code
> / generating reports etc in that order J
>
>
>
>
>
>
>
> *Thanks,*
> *neil*
> ------------------------------
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Chris Pohlschneider
> *Sent:* 01 December 2008 14:36
> *To:* ActiveDir@mail.activedir.org
> *Subject:* [ActiveDir] AD Reports
>
>
>
> Hello,
>
>
>
> For auditing purposes, I need to provide a report of current active users
> in Active Directory. I have stumbled through Active Directory Users and
> Computers and there is nothing that I can find that would give me this type
> of report. I am wondering if it is possibly buried somewhere in the tool or
> if I have to run this type of report from a different tool. Thanks in
> advance for any help. AD forest in Windows 2003 AD native.
>
>
>
> Chris Pohlschneider
>
> Network Administrator
>
> chris.pohlschneider@hollowayusa.com
>
> 937-494-2559
>
>
>
>
>
> ------------------------------
> Barclays Wealth is the wealth management division of Barclays Bank PLC.
> This email may relate to or be sent from other members of the Barclays
> Group.
>
> The availability of products and services may be limited by the applicable
> laws and regulations in certain jurisdictions. The Barclays Group does not
> normally accept or offer business instructions via internet email. Any
> action that you might take upon this message might be at your own risk.
>
> This email and any attachments are confidential and intended solely for the
> addressee and may also be privileged or exempt from disclosure under
> applicable law. If you are not the addressee, or have received this email in
> error, please notify the sender immediately, delete it from your system and
> do not copy, disclose or otherwise act upon any part of this email or its
> attachments.
>
> Internet communications are not guaranteed to be secure or without viruses.
> The Barclays Group does not accept responsibility for any loss arising from
> unauthorised access to, or interference with, any Internet communications by
> any third party, or from the transmission of any viruses. Replies to this
> email may be monitored by the Barclays Group for operational or business
> reasons.
>
> Any opinion or other information in this email or its attachments that does
> not relate to the business of the Barclays Group is personal to the sender
> and is not given or endorsed by the Barclays Group.
>
> Barclays Bank PLC. Registered in England and Wales (registered no.
> 1026167).
> Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
>
> Barclays Bank PLC is authorised and regulated by the Financial Services
> Authority.
>
>
| | | |
| neilruston
Posts:164
| | 12/01/2008 10:20 AM |
| lastLogonTimestamp DOES replicate however.
'New' feature as of w2k3.
I still don't understand the OP requirements - a blank lastlogon will
also indicate that a user exists and 'has access to the network' - the
user has never used that right, however. Back to the auditors with
questions, me thinks ... :-)
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: 01 December 2008 15:08
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
The only way (I can think of) to do this is to query the lastLogon on
each DC for every user or parse the eventlogs. I prefer using lastLogon.
You can provide the auditor a list of all your users and when they
logged in last.
You can use most scripting languages for this or adfind is a very useful
(and free) tool for this. I prefer Powershell
note: I did say EVERY DC. This is because lastLogon does not replicate.
On Mon, Dec 1, 2008 at 10:03 AM, Chris Pohlschneider
<Chris.Pohlschneider@hollowayusa.com> wrote:
Basically I need a list of user accounts that have access to sign into
our network for auditing purposes. Trying to figure out if I can provide
that in a report format to send to the auditors. So far that is the only
explanantion given to me on what they want. Screen shots would probably
also work to show them the list of users, but I was trying to make it
look like I put some effort into fulfilling their request.
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to take a
look let me know.
As ever, define your requirements, define a process THEN start writing
code / generating reports etc in that order :-)
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active
users in Active Directory. I have stumbled through Active Directory
Users and Computers and there is nothing that I can find that would give
me this type of report. I am wondering if it is possibly buried
somewhere in the tool or if I have to run this type of report from a
different tool. Thanks in advance for any help. AD forest in Windows
2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC.
This email may relate to or be sent from other members of the Barclays
Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended solely for
the addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this
email in error, please notify the sender immediately, delete it from
your system and do not copy, disclose or otherwise act upon any part of
this email or its attachments.
Internet communications are not guaranteed to be secure or without
viruses. The Barclays Group does not accept responsibility for any loss
arising from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this email may be monitored by the Barclays Group
for operational or business reasons.
Any opinion or other information in this email or its attachments that
does not relate to the business of the Barclays Group is personal to the
sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no.
1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| kennedyjim
Posts:42
| | 12/01/2008 10:26 AM |
| Yep, just do a query in ADUC where all users have a value for 'name', export it to a file and hand it in.
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 10:16 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
That would be a list of all users in the domain / forest, would it not?
I'd match my effort to the effort put in by the auditors, if it were me
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris Pohlschneider
Sent: 01 December 2008 15:03
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
Basically I need a list of user accounts that have access to sign into our network for auditing purposes. Trying to figure out if I can provide that in a report format to send to the auditors. So far that is the only explanantion given to me on what they want. Screen shots would probably also work to show them the list of users, but I was trying to make it look like I put some effort into fulfilling their request.
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to take a look let me know.
As ever, define your requirements, define a process THEN start writing code / generating reports etc in that order
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active users in Active Directory. I have stumbled through Active Directory Users and Computers and there is nothing that I can find that would give me this type of report. I am wondering if it is possibly buried somewhere in the tool or if I have to run this type of report from a different tool. Thanks in advance for any help. AD forest in Windows 2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com<mailto:chris.pohlschneider@hollowayusa.com>
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| bsonposh
Posts:302
| | 12/01/2008 10:28 AM |
| lastLogonTimestamp only replicates if the value is within the threshold. You
cannot use this value if you want to know everyone that has logged in
recently for audit purposes.
On Mon, Dec 1, 2008 at 10:15 AM, <neil.ruston@barclayswealth.com> wrote:
> lastLogonTimestamp DOES replicate however.
>
> 'New' feature as of w2k3.
>
>
>
> I still don't understand the OP requirements – a blank lastlogon will also
> indicate that a user exists and 'has access to the network' – the user has
> never used that right, however. Back to the auditors with questions, me
> thinks … J
> ------------------------------
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell
> *Sent:* 01 December 2008 15:08
> *To:* ActiveDir@mail.activedir.org
> *Subject:* Re: [ActiveDir] AD Reports
>
>
>
> The only way (I can think of) to do this is to query the lastLogon on each
> DC for every user or parse the eventlogs. I prefer using lastLogon. You can
> provide the auditor a list of all your users and when they logged in last.
>
>
>
> You can use most scripting languages for this or adfind is a very useful
> (and free) tool for this. I prefer Powershell
>
>
>
> note: I did say EVERY DC. This is because lastLogon does not replicate.
>
> On Mon, Dec 1, 2008 at 10:03 AM, Chris Pohlschneider <
> Chris.Pohlschneider@hollowayusa.com> wrote:
>
> Basically I need a list of user accounts that have access to sign into our
> network for auditing purposes. Trying to figure out if I can provide that in
> a report format to send to the auditors. So far that is the only
> explanantion given to me on what they want. Screen shots would probably also
> work to show them the list of users, but I was trying to make it look like I
> put some effort into fulfilling their request.
>
>
> ------------------------------
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *
> neil.ruston@barclayswealth.com
> *Sent:* Monday, December 01, 2008 9:51 AM
> *To:* neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
> *Subject:* RE: [ActiveDir] AD Reports
>
>
>
> What is 'active' and what do you plan to do with this data?
>
>
>
> I have process flows which I've used before - if you'd like to take a look
> let me know.
>
>
>
> As ever, define your requirements, define a process THEN start writing code
> / generating reports etc in that order J
>
>
>
>
>
>
>
> *Thanks,*
> *neil*
> ------------------------------
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Chris Pohlschneider
> *Sent:* 01 December 2008 14:36
> *To:* ActiveDir@mail.activedir.org
> *Subject:* [ActiveDir] AD Reports
>
>
>
> Hello,
>
>
>
> For auditing purposes, I need to provide a report of current active users
> in Active Directory. I have stumbled through Active Directory Users and
> Computers and there is nothing that I can find that would give me this type
> of report. I am wondering if it is possibly buried somewhere in the tool or
> if I have to run this type of report from a different tool. Thanks in
> advance for any help. AD forest in Windows 2003 AD native.
>
>
>
> Chris Pohlschneider
>
> Network Administrator
>
> chris.pohlschneider@hollowayusa.com
>
> 937-494-2559
>
>
>
>
> ------------------------------
>
> Barclays Wealth is the wealth management division of Barclays Bank PLC.
> This email may relate to or be sent from other members of the Barclays
> Group.
>
> The availability of products and services may be limited by the applicable
> laws and regulations in certain jurisdictions. The Barclays Group does not
> normally accept or offer business instructions via internet email. Any
> action that you might take upon this message might be at your own risk.
>
> This email and any attachments are confidential and intended solely for the
> addressee and may also be privileged or exempt from disclosure under
> applicable law. If you are not the addressee, or have received this email in
> error, please notify the sender immediately, delete it from your system and
> do not copy, disclose or otherwise act upon any part of this email or its
> attachments.
>
> Internet communications are not guaranteed to be secure or without viruses.
> The Barclays Group does not accept responsibility for any loss arising from
> unauthorised access to, or interference with, any Internet communications by
> any third party, or from the transmission of any viruses. Replies to this
> email may be monitored by the Barclays Group for operational or business
> reasons.
>
> Any opinion or other information in this email or its attachments that does
> not relate to the business of the Barclays Group is personal to the sender
> and is not given or endorsed by the Barclays Group.
>
> Barclays Bank PLC. Registered in England and Wales (registered no.
> 1026167).
> Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
>
> Barclays Bank PLC is authorised and regulated by the Financial Services
> Authority.
>
>
>
> ------------------------------
> Barclays Wealth is the wealth management division of Barclays Bank PLC.
> This email may relate to or be sent from other members of the Barclays
> Group.
>
> The availability of products and services may be limited by the applicable
> laws and regulations in certain jurisdictions. The Barclays Group does not
> normally accept or offer business instructions via internet email. Any
> action that you might take upon this message might be at your own risk.
>
> This email and any attachments are confidential and intended solely for the
> addressee and may also be privileged or exempt from disclosure under
> applicable law. If you are not the addressee, or have received this email in
> error, please notify the sender immediately, delete it from your system and
> do not copy, disclose or otherwise act upon any part of this email or its
> attachments.
>
> Internet communications are not guaranteed to be secure or without viruses.
> The Barclays Group does not accept responsibility for any loss arising from
> unauthorised access to, or interference with, any Internet communications by
> any third party, or from the transmission of any viruses. Replies to this
> email may be monitored by the Barclays Group for operational or business
> reasons.
>
> Any opinion or other information in this email or its attachments that does
> not relate to the business of the Barclays Group is personal to the sender
> and is not given or endorsed by the Barclays Group.
>
> Barclays Bank PLC. Registered in England and Wales (registered no.
> 1026167).
> Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
>
> Barclays Bank PLC is authorised and regulated by the Financial Services
> Authority.
>
| | | |
| cpohlschneider
Posts:23
| | 12/01/2008 10:32 AM |
| Yeah the description is very generic and it is coming from my IT
director which explains a lot of the generic description. This should
give me what I need. Thanks for your help.
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Kennedy, Jim
Sent: Monday, December 01, 2008 10:18 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
Yep, just do a query in ADUC where all users have a value for 'name',
export it to a file and hand it in.
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 10:16 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
That would be a list of all users in the domain / forest, would it not?
I'd match my effort to the effort put in by the auditors, if it were me
J
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: 01 December 2008 15:03
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
Basically I need a list of user accounts that have access to sign into
our network for auditing purposes. Trying to figure out if I can provide
that in a report format to send to the auditors. So far that is the only
explanantion given to me on what they want. Screen shots would probably
also work to show them the list of users, but I was trying to make it
look like I put some effort into fulfilling their request.
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to take a
look let me know.
As ever, define your requirements, define a process THEN start writing
code / generating reports etc in that order J
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active
users in Active Directory. I have stumbled through Active Directory
Users and Computers and there is nothing that I can find that would give
me this type of report. I am wondering if it is possibly buried
somewhere in the tool or if I have to run this type of report from a
different tool. Thanks in advance for any help. AD forest in Windows
2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC.
This email may relate to or be sent from other members of the Barclays
Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended solely for
the addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this
email in error, please notify the sender immediately, delete it from
your system and do not copy, disclose or otherwise act upon any part of
this email or its attachments.
Internet communications are not guaranteed to be secure or without
viruses. The Barclays Group does not accept responsibility for any loss
arising from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this email may be monitored by the Barclays Group
for operational or business reasons.
Any opinion or other information in this email or its attachments that
does not relate to the business of the Barclays Group is personal to the
sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no.
1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC.
This email may relate to or be sent from other members of the Barclays
Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended solely for
the addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this
email in error, please notify the sender immediately, delete it from
your system and do not copy, disclose or otherwise act upon any part of
this email or its attachments.
Internet communications are not guaranteed to be secure or without
viruses. The Barclays Group does not accept responsibility for any loss
arising from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this email may be monitored by the Barclays Group
for operational or business reasons.
Any opinion or other information in this email or its attachments that
does not relate to the business of the Barclays Group is personal to the
sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no.
1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
| | | |
| hcoleman
Posts:56
| | 12/01/2008 10:50 AM |
| Depends on what the auditors consider "recent".
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Monday, December 01, 2008 8:25 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
lastLogonTimestamp only replicates if the value is within the threshold. You cannot use this value if you want to know everyone that has logged in recently for audit purposes.
On Mon, Dec 1, 2008 at 10:15 AM, <neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>> wrote:
lastLogonTimestamp DOES replicate however.
'New' feature as of w2k3.
I still don't understand the OP requirements - a blank lastlogon will also indicate that a user exists and 'has access to the network' - the user has never used that right, however. Back to the auditors with questions, me thinks ...
________________________________
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of Brandon Shell
Sent: 01 December 2008 15:08
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Subject: Re: [ActiveDir] AD Reports
The only way (I can think of) to do this is to query the lastLogon on each DC for every user or parse the eventlogs. I prefer using lastLogon. You can provide the auditor a list of all your users and when they logged in last.
You can use most scripting languages for this or adfind is a very useful (and free) tool for this. I prefer Powershell
note: I did say EVERY DC. This is because lastLogon does not replicate.
On Mon, Dec 1, 2008 at 10:03 AM, Chris Pohlschneider <Chris.Pohlschneider@hollowayusa.com<mailto:Chris.Pohlschneider@hollowayusa.com>> wrote:
Basically I need a list of user accounts that have access to sign into our network for auditing purposes. Trying to figure out if I can provide that in a report format to send to the auditors. So far that is the only explanantion given to me on what they want. Screen shots would probably also work to show them the list of users, but I was trying to make it look like I put some effort into fulfilling their request.
________________________________
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com<mailto:neil.ruston@barclayswealth.com>; ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to take a look let me know.
As ever, define your requirements, define a process THEN start writing code / generating reports etc in that order
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of Chris Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active users in Active Directory. I have stumbled through Active Directory Users and Computers and there is nothing that I can find that would give me this type of report. I am wondering if it is possibly buried somewhere in the tool or if I have to run this type of report from a different tool. Thanks in advance for any help. AD forest in Windows 2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com<mailto:chris.pohlschneider@hollowayusa.com>
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| neilruston
Posts:164
| | 12/01/2008 10:52 AM |
| You need to define 'recently' - if 'recently' means '< 14 days ago' then
you're right :-^
I assumed the driver here was to identify 'inactive' users and that
'recently' would thus mean 'not logged in for > n days' where n > 90
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: 01 December 2008 15:25
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
lastLogonTimestamp only replicates if the value is within the threshold.
You cannot use this value if you want to know everyone that has logged
in recently for audit purposes.
On Mon, Dec 1, 2008 at 10:15 AM, <neil.ruston@barclayswealth.com> wrote:
lastLogonTimestamp DOES replicate however.
'New' feature as of w2k3.
I still don't understand the OP requirements - a blank lastlogon will
also indicate that a user exists and 'has access to the network' - the
user has never used that right, however. Back to the auditors with
questions, me thinks ... :-)
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: 01 December 2008 15:08
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
The only way (I can think of) to do this is to query the lastLogon on
each DC for every user or parse the eventlogs. I prefer using lastLogon.
You can provide the auditor a list of all your users and when they
logged in last.
You can use most scripting languages for this or adfind is a very useful
(and free) tool for this. I prefer Powershell
note: I did say EVERY DC. This is because lastLogon does not replicate.
On Mon, Dec 1, 2008 at 10:03 AM, Chris Pohlschneider
<Chris.Pohlschneider@hollowayusa.com> wrote:
Basically I need a list of user accounts that have access to sign into
our network for auditing purposes. Trying to figure out if I can provide
that in a report format to send to the auditors. So far that is the only
explanantion given to me on what they want. Screen shots would probably
also work to show them the list of users, but I was trying to make it
look like I put some effort into fulfilling their request.
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to take a
look let me know.
As ever, define your requirements, define a process THEN start writing
code / generating reports etc in that order :-)
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active
users in Active Directory. I have stumbled through Active Directory
Users and Computers and there is nothing that I can find that would give
me this type of report. I am wondering if it is possibly buried
somewhere in the tool or if I have to run this type of report from a
different tool. Thanks in advance for any help. AD forest in Windows
2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC.
This email may relate to or be sent from other members of the Barclays
Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended solely for
the addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this
email in error, please notify the sender immediately, delete it from
your system and do not copy, disclose or otherwise act upon any part of
this email or its attachments.
Internet communications are not guaranteed to be secure or without
viruses. The Barclays Group does not accept responsibility for any loss
arising from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this email may be monitored by the Barclays Group
for operational or business reasons.
Any opinion or other information in this email or its attachments that
does not relate to the business of the Barclays Group is personal to the
sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no.
1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC.
This email may relate to or be sent from other members of the Barclays
Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended solely for
the addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this
email in error, please notify the sender immediately, delete it from
your system and do not copy, disclose or otherwise act upon any part of
this email or its attachments.
Internet communications are not guaranteed to be secure or without
viruses. The Barclays Group does not accept responsibility for any loss
arising from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this email may be monitored by the Barclays Group
for operational or business reasons.
Any opinion or other information in this email or its attachments that
does not relate to the business of the Barclays Group is personal to the
sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no.
1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| listmail
Posts:639
| | 12/01/2008 12:52 PM |
| I *love* how most everyone started out with "define active". That was great,
made me smile.
I think I would start out with all enabled users, you could get a little
fancier and pull out users with expired accounts as well. I wouldn't filter
out people with expired passwords because they just have to change the
password and they have access again.
So an AdFind query of like
adfind -default -bit -f
"&(objectcategory=person)(objectclass=user)(!(useraccountcontrol:AND:=2))(|(
accountexpires=*)(accountexpires>={{LOCAL:2008/12/01}}))" samaccountname
userprincipalname -csv
Would dump the DN, SAM Name, and 2K Logon Name to CSV for you.
joe
--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm
_____
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris Pohlschneider
Sent: Monday, December 01, 2008 9:36 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active users in
Active Directory. I have stumbled through Active Directory Users and
Computers and there is nothing that I can find that would give me this type
of report. I am wondering if it is possibly buried somewhere in the tool or
if I have to run this type of report from a different tool. Thanks in
advance for any help. AD forest in Windows 2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
| | | |
| neilruston
Posts:164
| | 12/02/2008 4:05 AM |
| Well, until the req is defined, we're all guessing - yourself included
:-)
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
Sent: 01 December 2008 17:48
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
I *love* how most everyone started out with "define active". That was
great, made me smile.
I think I would start out with all enabled users, you could get a little
fancier and pull out users with expired accounts as well. I wouldn't
filter out people with expired passwords because they just have to
change the password and they have access again.
So an AdFind query of like
adfind -default -bit -f
"&(objectcategory=person)(objectclass=user)(!(useraccountcontrol:AND:=2)
)(|(accountexpires=*)(accountexpires>={{LOCAL:2008/12/01}}))"
samaccountname userprincipalname -csv
Would dump the DN, SAM Name, and 2K Logon Name to CSV for you.
joe
--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: Monday, December 01, 2008 9:36 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active
users in Active Directory. I have stumbled through Active Directory
Users and Computers and there is nothing that I can find that would give
me this type of report. I am wondering if it is possibly buried
somewhere in the tool or if I have to run this type of report from a
different tool. Thanks in advance for any help. AD forest in Windows
2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| MarcusOh
Posts:12
| | 12/02/2008 6:35 AM |
| Yeah but that threshold is usually 14 days +- ~5. I haven't run into an
audit where the timeframe was deemed too loose to use as a reasonable
measure of user activity.
--
::marcus
P printing this email is bad for your feng shui.
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Monday, December 01, 2008 10:25 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
lastLogonTimestamp only replicates if the value is within the threshold.
You cannot use this value if you want to know everyone that has logged
in recently for audit purposes.
On Mon, Dec 1, 2008 at 10:15 AM, <neil.ruston@barclayswealth.com> wrote:
lastLogonTimestamp DOES replicate however.
'New' feature as of w2k3.
I still don't understand the OP requirements - a blank lastlogon will
also indicate that a user exists and 'has access to the network' - the
user has never used that right, however. Back to the auditors with
questions, me thinks ... J
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: 01 December 2008 15:08
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
The only way (I can think of) to do this is to query the lastLogon on
each DC for every user or parse the eventlogs. I prefer using lastLogon.
You can provide the auditor a list of all your users and when they
logged in last.
You can use most scripting languages for this or adfind is a very useful
(and free) tool for this. I prefer Powershell
note: I did say EVERY DC. This is because lastLogon does not replicate.
On Mon, Dec 1, 2008 at 10:03 AM, Chris Pohlschneider
<Chris.Pohlschneider@hollowayusa.com> wrote:
Basically I need a list of user accounts that have access to sign into
our network for auditing purposes. Trying to figure out if I can provide
that in a report format to send to the auditors. So far that is the only
explanantion given to me on what they want. Screen shots would probably
also work to show them the list of users, but I was trying to make it
look like I put some effort into fulfilling their request.
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to take a
look let me know.
As ever, define your requirements, define a process THEN start writing
code / generating reports etc in that order J
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current active
users in Active Directory. I have stumbled through Active Directory
Users and Computers and there is nothing that I can find that would give
me this type of report. I am wondering if it is possibly buried
somewhere in the tool or if I have to run this type of report from a
different tool. Thanks in advance for any help. AD forest in Windows
2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC.
This email may relate to or be sent from other members of the Barclays
Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended solely for
the addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this
email in error, please notify the sender immediately, delete it from
your system and do not copy, disclose or otherwise act upon any part of
this email or its attachments.
Internet communications are not guaranteed to be secure or without
viruses. The Barclays Group does not accept responsibility for any loss
arising from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this email may be monitored by the Barclays Group
for operational or business reasons.
Any opinion or other information in this email or its attachments that
does not relate to the business of the Barclays Group is personal to the
sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no.
1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
________________________________
Barclays Wealth is the wealth management division of Barclays Bank PLC.
This email may relate to or be sent from other members of the Barclays
Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended solely for
the addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this
email in error, please notify the sender immediately, delete it from
your system and do not copy, disclose or otherwise act upon any part of
this email or its attachments.
Internet communications are not guaranteed to be secure or without
viruses. The Barclays Group does not accept responsibility for any loss
arising from unauthorised access to, or interference with, any Internet
communications by any third party, or from the transmission of any
viruses. Replies to this email may be monitored by the Barclays Group
for operational or business reasons.
Any opinion or other information in this email or its attachments that
does not relate to the business of the Barclays Group is personal to the
sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no.
1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
| | | |
| davewade
Posts:58
| | 12/02/2008 6:54 AM |
| Just beware that if users don't log out, e.g. because it takes a long
time to log in and they just set their PCs into standby, the account is
a service account, the account is a kiosk type account, the info may not
be what you want...
Dave Wade
Business Services I.C.T.
0161 474 5456
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
Marcus.Oh@cox.com
Sent: 02 December 2008 11:31
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
Yeah but that threshold is usually 14 days +- ~5. I haven't run
into an audit where the timeframe was deemed too loose to use as a
reasonable measure of user activity.
--
::marcus
P printing this email is bad for your feng shui.
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Monday, December 01, 2008 10:25 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
lastLogonTimestamp only replicates if the value is within the
threshold. You cannot use this value if you want to know everyone that
has logged in recently for audit purposes.
On Mon, Dec 1, 2008 at 10:15 AM,
<neil.ruston@barclayswealth.com> wrote:
lastLogonTimestamp DOES replicate however.
'New' feature as of w2k3.
I still don't understand the OP requirements - a blank lastlogon
will also indicate that a user exists and 'has access to the network' -
the user has never used that right, however. Back to the auditors with
questions, me thinks ... J
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: 01 December 2008 15:08
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
The only way (I can think of) to do this is to query the
lastLogon on each DC for every user or parse the eventlogs. I prefer
using lastLogon. You can provide the auditor a list of all your users
and when they logged in last.
You can use most scripting languages for this or adfind is a
very useful (and free) tool for this. I prefer Powershell
note: I did say EVERY DC. This is because lastLogon does not
replicate.
On Mon, Dec 1, 2008 at 10:03 AM, Chris Pohlschneider
<Chris.Pohlschneider@hollowayusa.com> wrote:
Basically I need a list of user accounts that have access to
sign into our network for auditing purposes. Trying to figure out if I
can provide that in a report format to send to the auditors. So far that
is the only explanantion given to me on what they want. Screen shots
would probably also work to show them the list of users, but I was
trying to make it look like I put some effort into fulfilling their
request.
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to
take a look let me know.
As ever, define your requirements, define a process THEN start
writing code / generating reports etc in that order J
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current
active users in Active Directory. I have stumbled through Active
Directory Users and Computers and there is nothing that I can find that
would give me this type of report. I am wondering if it is possibly
buried somewhere in the tool or if I have to run this type of report
from a different tool. Thanks in advance for any help. AD forest in
Windows 2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays
Bank PLC. This email may relate to or be sent from other members of the
Barclays Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended
solely for the addressee and may also be privileged or exempt from
disclosure under applicable law. If you are not the addressee, or have
received this email in error, please notify the sender immediately,
delete it from your system and do not copy, disclose or otherwise act
upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or
without viruses. The Barclays Group does not accept responsibility for
any loss arising from unauthorised access to, or interference with, any
Internet communications by any third party, or from the transmission of
any viruses. Replies to this email may be monitored by the Barclays
Group for operational or business reasons.
Any opinion or other information in this email or its
attachments that does not relate to the business of the Barclays Group
is personal to the sender and is not given or endorsed by the Barclays
Group.
Barclays Bank PLC. Registered in England and Wales (registered
no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United
Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial
Services Authority.
________________________________
Barclays Wealth is the wealth management division of Barclays
Bank PLC. This email may relate to or be sent from other members of the
Barclays Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended
solely for the addressee and may also be privileged or exempt from
disclosure under applicable law. If you are not the addressee, or have
received this email in error, please notify the sender immediately,
delete it from your system and do not copy, disclose or otherwise act
upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or
without viruses. The Barclays Group does not accept responsibility for
any loss arising from unauthorised access to, or interference with, any
Internet communications by any third party, or from the transmission of
any viruses. Replies to this email may be monitored by the Barclays
Group for operational or business reasons.
Any opinion or other information in this email or its
attachments that does not relate to the business of the Barclays Group
is personal to the sender and is not given or endorsed by the Barclays
Group.
Barclays Bank PLC. Registered in England and Wales (registered
no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United
Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial
Services Authority.
**********************************************************************
Stockport and the Congestion Charge. Do you want to pay? Have your say when your postal ballot paper arrives for the Transport Innovation Fund - transport improvements and a peak-time congestion charge. More information at www.stockport.gov.uk
**********************************************************************
This email, and any files transmitted with it, is confidential and
intended solely for the use of the individual or entity to whom they
are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act.
If you receive this email in error please notify Stockport ICT, Business Services via email.query@stockport.gov.uk and then permanently remove it from your system.
Thank you.
http://www.stockport.gov.uk
**********************************************************************
| | | |
| neilruston
Posts:164
| | 12/02/2008 6:56 AM |
| As I said - I have a process flow for this which I'll happily share. It
caters for the scenarios below [and others] :-)
I agree - Last logon alone is far from sufficient.
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Dave Wade
Sent: 02 December 2008 11:49
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
Just beware that if users don't log out, e.g. because it takes a long
time to log in and they just set their PCs into standby, the account is
a service account, the account is a kiosk type account, the info may not
be what you want...
Dave Wade
Business Services I.C.T.
0161 474 5456
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
Marcus.Oh@cox.com
Sent: 02 December 2008 11:31
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
Yeah but that threshold is usually 14 days +- ~5. I haven't run
into an audit where the timeframe was deemed too loose to use as a
reasonable measure of user activity.
--
::marcus
P printing this email is bad for your feng shui.
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Monday, December 01, 2008 10:25 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
lastLogonTimestamp only replicates if the value is within the
threshold. You cannot use this value if you want to know everyone that
has logged in recently for audit purposes.
On Mon, Dec 1, 2008 at 10:15 AM,
<neil.ruston@barclayswealth.com> wrote:
lastLogonTimestamp DOES replicate however.
'New' feature as of w2k3.
I still don't understand the OP requirements - a blank lastlogon
will also indicate that a user exists and 'has access to the network' -
the user has never used that right, however. Back to the auditors with
questions, me thinks ... :-)
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: 01 December 2008 15:08
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] AD Reports
The only way (I can think of) to do this is to query the
lastLogon on each DC for every user or parse the eventlogs. I prefer
using lastLogon. You can provide the auditor a list of all your users
and when they logged in last.
You can use most scripting languages for this or adfind is a
very useful (and free) tool for this. I prefer Powershell
note: I did say EVERY DC. This is because lastLogon does not
replicate.
On Mon, Dec 1, 2008 at 10:03 AM, Chris Pohlschneider
<Chris.Pohlschneider@hollowayusa.com> wrote:
Basically I need a list of user accounts that have access to
sign into our network for auditing purposes. Trying to figure out if I
can provide that in a report format to send to the auditors. So far that
is the only explanantion given to me on what they want. Screen shots
would probably also work to show them the list of users, but I was
trying to make it look like I put some effort into fulfilling their
request.
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
neil.ruston@barclayswealth.com
Sent: Monday, December 01, 2008 9:51 AM
To: neil.ruston@barclayswealth.com; ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD Reports
What is 'active' and what do you plan to do with this data?
I have process flows which I've used before - if you'd like to
take a look let me know.
As ever, define your requirements, define a process THEN start
writing code / generating reports etc in that order :-)
Thanks,
neil
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris
Pohlschneider
Sent: 01 December 2008 14:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] AD Reports
Hello,
For auditing purposes, I need to provide a report of current
active users in Active Directory. I have stumbled through Active
Directory Users and Computers and there is nothing that I can find that
would give me this type of report. I am wondering if it is possibly
buried somewhere in the tool or if I have to run this type of report
from a different tool. Thanks in advance for any help. AD forest in
Windows 2003 AD native.
Chris Pohlschneider
Network Administrator
chris.pohlschneider@hollowayusa.com
937-494-2559
________________________________
Barclays Wealth is the wealth management division of Barclays
Bank PLC. This email may relate to or be sent from other members of the
Barclays Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended
solely for the addressee and may also be privileged or exempt from
disclosure under applicable law. If you are not the addressee, or have
received this email in error, please notify the sender immediately,
delete it from your system and do not copy, disclose or otherwise act
upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or
without viruses. The Barclays Group does not accept responsibility for
any loss arising from unauthorised access to, or interference with, any
Internet communications by any third party, or from the transmission of
any viruses. Replies to this email may be monitored by the Barclays
Group for operational or business reasons.
Any opinion or other information in this email or its
attachments that does not relate to the business of the Barclays Group
is personal to the sender and is not given or endorsed by the Barclays
Group.
Barclays Bank PLC. Registered in England and Wales (registered
no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United
Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial
Services Authority.
________________________________
Barclays Wealth is the wealth management division of Barclays
Bank PLC. This email may relate to or be sent from other members of the
Barclays Group.
The availability of products and services may be limited by the
applicable laws and regulations in certain jurisdictions. The Barclays
Group does not normally accept or offer business instructions via
internet email. Any action that you might take upon this message might
be at your own risk.
This email and any attachments are confidential and intended
solely for the addressee and may also be privileged or exempt from
disclosure under applicable law. If you are not the addressee, or have
received this email in error, please notify the sender immediately,
delete it from your system and do not copy, disclose or otherwise act
upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or
without viruses. The Barclays Group does not accept responsibility for
any loss arising from unauthorised access to, or interference with, any
Internet communications by any third party, or from the transmission of
any viruses. Replies to this email may be monitored by the Barclays
Group for operational or business reasons.
Any opinion or other information in this email or its
attachments that does not relate to the business of the Barclays Group
is personal to the sender and is not given or endorsed by the Barclays
Group.
Barclays Bank PLC. Registered in England and Wales (registered
no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United
Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial
Services Authority.
**********************************************************************
Stockport and the Congestion Charge. Do you want to pay? Have your say
when your postal ballot paper arrives for the Transport Innovation Fund
- transport improvements and a peak-time congestion charge. More
information at www.stockport.gov.uk
**********************************************************************
This email, and any files transmitted with it, is confidential and
intended solely for the use of the individual or entity to whom they
are addressed. As a public body, the Council may be required to disclose
this email, or any response to it, under the Freedom of Information Act
2000, unless the information in it is covered by one of the exemptions
in the Act.
If you receive this email in error please notify Stockport ICT, Business
Services via email.query@stockport.gov.uk and then permanently remove it
from your system.
Thank you.
http://www.stockport.gov.uk
**********************************************************************
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| edpoteet
Posts:5
| | 12/02/2008 9:20 AM |
| Return Receipt
Your RE: [ActiveDir] AD Reports
document:
was Evan_Poteet@contractor.nps.gov
received
by:
at: 12/02/2008 09:16:17 AM
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
|
|