| Author | Messages | |
Wolfgoddess3
Posts:8
 | | 04/09/2009 8:50 AM |
| Thank you guys for all of the resources! I am trying to narrow it down so that we can get some books in here at our office.
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Wednesday, April 08, 2009 7:15 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] dstools to disable inactive users/computers
Books were mention earlier in this thread, but it so big I will just repost
IMO this depends on your learning style
Nitty Gritty Details: Powershell in Action by Bruce Payette
Example Driven: Powershell Cookbook by Lee Holmes
Basic Understanding: Powershell TFM by Don Jones and Jeffrey Hicks
There are few others, but I have not looked at them so I cannot say how they are.
Laura's AD Cookbook has some good examples from AD standpoint and maybe I am bit bias but I like the Powershell chapters in Brian's Active Directory book.
On Wed, Apr 8, 2009 at 8:04 PM, Harry Singh <hboogz@gmail.com> wrote:
I personally don't have a deep scripting background nor was classical trained in its underpinnings -- outside of a few (2) c++, VB classes i had back in college. I've been managing a single IBM AIX box for a few years , but I've been primarily managing MSFT stuff for a few years. Luckily I've always been comfortable with CLI ( networking background) and I've obviously automated as much as i can, but i know i'm certainly not doing as much as i possibly could. I also haven't even touched PoSH yet, but i sure would like to get started. Which books/references would be a good resource for an SA like myself to look further into? I do prefer books, and actually turning pages as opposed to scrolling ( I'm pretty analog for a digital guy)
I'm looking to be a software developer, but i'd like to get a good understanding of scripting as it relates to the efficacy of my current job and for my future professional development.
On Wed, Apr 8, 2009 at 7:38 PM, Brandon Shell <tshell@gmail.com> wrote:
The difference is who can pick it up quickly.
On Wed, Apr 8, 2009 at 7:02 PM, joe <listmail@joeware.net> wrote:
Interestingly, I said the same thing about c# and well the same with C++ and any libs/frameworks used, ditto perl... ;o)
PowerShell.... JACL - just another computer language
--
O'Reilly Active Directory Fourth Edition - http://www.joeware.net/win/ad4e.htm
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Michael B. Smith
Sent: Wednesday, April 08, 2009 12:46 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] dstools to disable inactive users/computers
Truth be told, once you learn the basics of PowerShell, you spend much more time looking up .NET classes and how to use them than you do worrying about how PS itself works (well, that's true for me, anyway).
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Wednesday, April 08, 2009 12:26 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] dstools to disable inactive users/computers
IMO this depends on your learning style
Nitty Gritty Details: Powershell in Action by Bruce Payette
Example Driven: Powershell Cookbook by Lee Holmes
Basic Understanding: Powershell TFM by Don Jones and Jeffrey Hicks
There are few others, but I have not looked at them so I cannot say how they are.
Laura's AD Cookbook has some good examples from AD standpoint and maybe I am bit bias to the Powershell chapters in Brian's Active Directory book.
On Wed, Apr 8, 2009 at 12:15 PM, Craig, Coleman <Coleman.Craig@lendingtree.com> wrote:
Online resources are great but sometimes I like a book to read. What's the best PS book out there to....
1. Learn from...
2. Use as a resource...
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Wednesday, April 08, 2009 11:16 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] dstools to disable inactive users/computers
I can help you with the Powershell stuff if you want to take that offlist.
As for the employeeid thing
Using Powershell and Quest you can do this
Assuming the csv file has at least two values, Name and employeeid
PS> import-Csv .\testemp.csv | %{set-qaduser $_.Name -ObjectAttributes @{"employeeid"=$_.employeeid}}
Download Powershell here: www.microsoft.com/powershell
Download Quest stuff here: www.quest.com/powershell
Good powershell resources
Me: http://www.bsonposh.com <http://www.bsonposh.com/>
PG Blog: http://blogs.msdn.com/powershell/default.aspx
Community Site: http://www.powershellcommunity.org <http://www.powershellcommunity.org/>
Powergui: www.powergui.org <http://www.powergui.org/>
You can always ask on here as well.
On Wed, Apr 8, 2009 at 10:59 AM, ShannAn Lawson <ShannAn.Lawson@kbr.com> wrote:
I took and AD class a few months ago and he was saying that PowerShell is the next biggest thing. I would love to learn PowerShell and I am new to scripting. I have basic knowledge of programming, but that is it... any really good sources?
Shannan
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Wednesday, April 08, 2009 7:16 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] dstools to disable inactive users/computers
This is SUPER simple with Powershell and the free Quest cmdlets. If you are interested I will show you.
If you are new to IT or scripting in general... I would invest some time into PowershellΏ]. It will help you greatly.
Ώ] I bet joe agrees but you would never hear it 
On Wed, Apr 8, 2009 at 1:05 AM, ShannAn Lawson <ShannAn.Lawson@kbr.com> wrote:
Very cool! I will see what we can do with this one :-) Right now we have a script that runs off of last login and it disables users and stamps them for 30 days unused, and 120 unused before they are completely deleted.
I am actually trying to find a way to add the employee ID field to my AD on my pc. We just acquired a company that uses the employee ID field to auto add groups and I need to be able to do this and can't right now.
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
Sent: Tuesday, April 07, 2009 11:29 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] dstools to disable inactive users/computers
http://www.joeware.net/freetools/tools/oldcmp/index.htm
try it.....
--
O'Reilly Active Directory Fourth Edition - http://www.joeware.net/win/ad4e.htm
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of ShannAn Lawson
Sent: Tuesday, April 07, 2009 10:47 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] dstools to disable inactive users/computers
Brandon,
Here is my input....
I LOVE beer. I'm definitely a beer girl... bring it on! LOL As far as the actual conversation.... I'm learning. We use VB Scripts to disable accounts depending on their logon stamp. Other then that, I am plain dumb... wish I had more input... but like I said I am a newbie and taking all of the awesome advice in!
________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Tuesday, April 07, 2009 9:27 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] dstools to disable inactive users/computers
Shannan,
Very glad to provide comedic value, but not sitting on the side lines... what is your take
On Tue, Apr 7, 2009 at 10:00 PM, ShannAn Lawson <ShannAn.Lawson@kbr.com> wrote:
You guys are killing me!!! Haha... I am a newbie, but I just wanted to say that you guys have been pretty exciting lately... LOL
-----Original Message-----
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele Scolaro
Sent: Tuesday, April 07, 2009 8:47 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] dstools to disable inactive users/computers
Yes, there might be other nice beers, but I prefer to "win easy"... we have less rivals in the wine arena! ;-)
What Montepulciano are you talking about? There are two:
1) Nobile (Siena-Tuscany)
http://en.wikipedia.org/wiki/Vino_Nobile_di_Montepulciano
2) d'Abruzzo (Marche)
http://en.wikipedia.org/wiki/Montepulciano_d%27Abruzzo
Regards - Gabriele.
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-
> owner@mail.activedir.org] On Behalf Of Kurt Buff
> Sent: mercoledì 8 aprile 2009 3.31
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] dstools to disable inactive users/computers
>
> Oh, don't cave in like that!
>
> Moretti is a very good beer, and I'm sure there are others, too.
>
> Heh.
>
> Although, if you must make it wine, make it a good Montepulciano - one
> of my favorites.
>
> On Tue, Apr 7, 2009 at 17:12, Gabriele Scolaro <gabro@gabro.net> wrote:
> > Arrggghhhh! You got me! I'm Italian and I live in Italy.... may I
> change
> > beer cans with bottles of wine? - Gabriele.
> >
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert
> Singers
> > Sent: mercoledì 8 aprile 2009 1.48
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> >
> >
> > Are the beer cans for target practice? If not you might want to
> state your
> > country of origin so we can determine if it is actually beer.
> >
> >
> >
> > ________________________________
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele
> Scolaro
> > Sent: Wednesday, 8 April 2009 11:39 a.m.
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> > I also got a load of beer cans for the event... don't stand on
> ceremony! ;-) -
> > Gabriele.
> >
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Craig,
> Coleman
> > Sent: lunedì 6 aprile 2009 23.40
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> >
> >
> > Pass the pop-corn please...I am all out.
> >
> >
> >
> >
> >
> >
> >
> > I couldn't resist.
> >
> >
> >
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele
> Scolaro
> > Sent: Friday, April 03, 2009 12:23 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> >
> >
> > My GOD.... someone dared to tell joe that one of his tools is
> "obsolete,
> > dead meat", while PoSH is THE CHANGE, THE INNOVATION!!!
> >
> >
> >
> > OK, I prepare myself, get a bag of pop-corn and wait anxiously to
> watch the
> > reply...... J
> >
> >
> >
> > Gabriele
> >
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Scha rique
> > Sent: venerdì 3 aprile 2009 17.25
> > To: ActiveDir@mail.activedir.org
> > Subject: Re: [ActiveDir] dstools to disable inactive users/computers
> >
> >
> >
> > Joe, your tool was the bomb back in the days...but I would use PoSH
> now
> >
> > Here is the meat for deleting inactive computer accounts.
> >
> > # set the date to be used as a limit - in this example: 90 days
> earlier than
> > the current date
> >
> > $old = (Get-Date).AddDays(-90)
> >
> > # get the list of computers with the date earlier than this date
> >
> > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where {
> > $_.pwdLastSet -le $old }
> >
> > A few variations to this depending on how you want to use the data:
> >
> > # get a csv report
> >
> > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where {
> > $_.pwdLastSet -le $old } | select-object Name, ParentContainer,
> Description,
> > pwdLastSet | export-csv c:\temp\outdated.csv
> >
> > # move such computers to another OU
> >
> > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where {
> > $_.pwdLastSet -le $old } | Move-QADObject -to test.lab/obsolete
> >
> > # remove the computer records from AD (caution: this actually deletes
> the
> > records, run the command with -whatif switch before running without
> it)
> >
> > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where {
> > $_.pwdLastSet -le $old } | Remove-QADObject -to test.lab/obsolete
> >
> > On Fri, Apr 3, 2009 at 9:39 AM, joe <listmail@joeware.net> wrote:
> >
> > Yes. However you may want to look at oldcmp... 4 out of 5 admins who
> clean
> > up computers prefer oldcmp.
> >
> > http://www.joeware.net/freetools/tools/oldcmp/index.htm
> >
> >
> > joe
> >
> > --
> > O'Reilly Active Directory Fourth Edition -
> > http://www.joeware.net/win/ad4e.htm
> >
> > -----Original Message-----
> > From: ActiveDir-owner@mail.activedir.org
> >
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele
> Scolaro
> > Sent: Friday, April 03, 2009 6:02 AM
> > To: ActiveDir@mail.activedir.org
> >
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> > What attribute "dsquery user/computer -inactive" will query?
> > Hopefully it's the replicated lastLogonTimeStamp... isn't it? :-o
> >
> > Thanks - Gabriele.
> >
> >> > -----Original Message-----
> >> > From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-
> >> > owner@mail.activedir.org] On Behalf Of Laura E. Hunter
> >> > Sent: lunedì 16 febbraio 2009 16.22
> >> > To: ActiveDir@mail.activedir.org
> >> > Subject: Re: [ActiveDir] dstools to disable inactive
> users/computers
> >> >
> >> > 'Cos oldcmp.exe is way cooler? :-)
> >> >
> >> > On Mon, Feb 16, 2009 at 9:16 AM, Gabriele Scolaro
> <gabro@gabro.net>
> >> > wrote:
> >> > > I would like to disable inactive users and computers by simply
> >> using
> >> > the native dstools via tasksch.exe:
> >> > > Example:
> >> > > dsquery user -inactive 60 -limit 5000 | dsmod user -disabled yes
> >> > > dsquery computer -inactive 60 -limit 10000 | dsmod computer -
> >> disabled
> >> > yes
> >> > >
> >> > > but I recall I read in this list dstools were not recommended
> for
> >> > some reasons.... tried to search in the list archive but did not
> >> > find anything relevant.
> >> > >
> >> > > Can someone tell me why it's better not to use dsquery/dsmod?
> >> > >
> >> > > Thanks - Gabriele.
> >> > >
> >> > > List info : http://www.activedir.org/List.aspx
> >> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> > > List archive: http://www.activedir.org/ma/default.aspx
> >> > >
> >> >
> >> >
> >> >
> >> > --
> >> > -----------------------
> >> > Laura E. Hunter
> >> > Architect, Oxford Computer Group
> >> > (http://www.oxfordcomputergroup.com <http://www.oxfordcomputergroup.com/> )
> >> > Microsoft MVP, Directory Services
> >> > (https://mvp.support.microsoft.com/profile/laura)
> >> > Author, Active Directory Consultant's Field Guide
> >> > (http://tinyurl.com/7f8ll)
> >> > Author, Active Directory Cookbook, Third Edition
> >> > (http://tinyurl.com/7kp3ct)
> >> > List info : http://www.activedir.org/List.aspx
> >> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> > List archive: http://www.activedir.org/ma/default.aspx
> >
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> >
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> >
> >
> >
> > ________________________________
> >
> > This e-mail message has been scanned for Viruses and cleared by NetIQ
> > MailMarshal
> >
> > ________________________________
> > ________________________________
> >
> > Please Note:
> >
> > The information contained in this email message and any attached
> files may
> > be confidential and subject to privilege. Any opinions expressed in
> this
> > message are not necessarily those of the Department of Building and
> Housing.
> > All technical opinions are offered on a 'no-liability' basis. This
> message
> > and any files transmitted with it are confidential and solely for the
> use of
> > the intended recipient. If you are not the intended recipient, you
> are
> > notified that any use, disclosure or copying of this email is
> unauthorised.
> > If you have received this email in error, please notify us
> immediately by
> > reply email and delete the original and any attachment(s). Thank you.
> >
> > ________________________________
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
This e-mail, including any attached files, may contain confidential and privileged information for the sole use of the intended recipient. Any review, use, distribution, or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive information for the intended recipient), please contact the sender by reply e-mail and delete all copies of this message.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| bsonposh
Posts:409
| | 04/09/2009 9:19 AM |
| lol.... I did a LONG time back... just forgot: http://bsonposh.com/about
On Thu, Apr 9, 2009 at 1:54 AM, joe <listmail@joeware.net> wrote:
> Brandon, just create a "page" (versus a post) on your blog with your book
> recommendations. If you are smartΏ] about it you will join amazon
> associates and create links into amazon for those books so you get little
> referral fees everytime someone buys stuff through it.
>
> joe
>
>
>
> Ώ] HAHA!
>
>
> --
> O'Reilly Active Directory Fourth Edition -
> http://www.joeware.net/win/ad4e.htm
>
>
>
> ------------------------------
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell
> *Sent:* Wednesday, April 08, 2009 8:15 PM
>
> *To:* ActiveDir@mail.activedir.org
> *Subject:* Re: [ActiveDir] dstools to disable inactive users/computers
>
> Books were mention earlier in this thread, but it so big I will just
> repost
>
> IMO this depends on your learning style
>
> Nitty Gritty Details:* Powershell in Action* by Bruce Payette
> Example Driven: * Powershell Cookbook* by Lee Holmes
> Basic Understanding: *Powershell TFM* by Don Jones and Jeffrey Hicks
> There are few others, but I have not looked at them so I cannot say how
> they are.
>
> Laura's *AD Cookbook* has some good examples from AD standpoint and maybe
> I am bit bias but I like the Powershell chapters in Brian's *Active
> Directory* book.
>
> On Wed, Apr 8, 2009 at 8:04 PM, Harry Singh <hboogz@gmail.com> wrote:
>
>> I personally don't have a deep scripting background nor was classical
>> trained in its underpinnings -- outside of a few (2) c++, VB classes i had
>> back in college. I've been managing a single IBM AIX box for a few years ,
>> but I've been primarily managing MSFT stuff for a few years. Luckily I've
>> always been comfortable with CLI ( networking background) and I've obviously
>> automated as much as i can, but i know i'm certainly not doing as much as i
>> possibly could. I also haven't even touched PoSH yet, but i sure would like
>> to get started. Which books/references would be a good resource for an SA
>> like myself to look further into? I do prefer books, and actually turning
>> pages as opposed to scrolling ( I'm pretty analog for a digital guy)
>>
>> I'm looking to be a software developer, but i'd like to get a good
>> understanding of scripting as it relates to the efficacy of my current job
>> and for my future professional development.
>>
>>
>>
>>
>>
>>
>> On Wed, Apr 8, 2009 at 7:38 PM, Brandon Shell <tshell@gmail.com> wrote:
>>
>>> The difference is who can pick it up quickly.
>>>
>>>
>>> On Wed, Apr 8, 2009 at 7:02 PM, joe <listmail@joeware.net> wrote:
>>>
>>>> Interestingly, I said the same thing about c# and well the same with
>>>> C++ and any libs/frameworks used, ditto perl... ;o)
>>>>
>>>> PowerShell.... JACL - just another computer language
>>>>
>>>>
>>>> --
>>>> O'Reilly Active Directory Fourth Edition -
>>>> http://www.joeware.net/win/ad4e.htm
>>>>
>>>>
>>>>
>>>> ------------------------------
>>>> *From:* ActiveDir-owner@mail.activedir.org [mailto:
>>>> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Michael B. Smith
>>>> *Sent:* Wednesday, April 08, 2009 12:46 PM
>>>>
>>>> *To:* ActiveDir@mail.activedir.org
>>>> *Subject:* RE: [ActiveDir] dstools to disable inactive users/computers
>>>>
>>>> Truth be told, once you learn the basics of PowerShell, you spend
>>>> much more time looking up .NET classes and how to use them than you do
>>>> worrying about how PS itself works (well, that’s true for me, anyway).
>>>>
>>>>
>>>>
>>>> *From:* ActiveDir-owner@mail.activedir.org [mailto:
>>>> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell
>>>> *Sent:* Wednesday, April 08, 2009 12:26 PM
>>>> *To:* ActiveDir@mail.activedir.org
>>>> *Subject:* Re: [ActiveDir] dstools to disable inactive users/computers
>>>>
>>>>
>>>>
>>>> IMO this depends on your learning style
>>>>
>>>>
>>>>
>>>> *Nitty Gritty Details*: Powershell in Action by Bruce Payette
>>>>
>>>> *Example Driven*: Powershell Cookbook by Lee Holmes
>>>>
>>>> *Basic Understanding*: Powershell TFM by Don Jones and Jeffrey Hicks
>>>>
>>>> There are few others, but I have not looked at them so I cannot say how
>>>> they are.
>>>>
>>>>
>>>>
>>>> Laura's AD Cookbook has some good examples from AD standpoint and maybe
>>>> I am bit bias to the Powershell chapters in Brian's Active Directory book.
>>>>
>>>>
>>>>
>>>> On Wed, Apr 8, 2009 at 12:15 PM, Craig, Coleman <
>>>> Coleman.Craig@lendingtree.com> wrote:
>>>>
>>>> Online resources are great but sometimes I like a book to read. What’s
>>>> the best PS book out there to….
>>>>
>>>>
>>>>
>>>> 1. Learn from…
>>>>
>>>> 2. Use as a resource…
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> *From:* ActiveDir-owner@mail.activedir.org [mailto:
>>>> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell
>>>> *Sent:* Wednesday, April 08, 2009 11:16 AM
>>>>
>>>>
>>>> *To:* ActiveDir@mail.activedir.org
>>>> *Subject:* Re: [ActiveDir] dstools to disable inactive users/computers
>>>>
>>>>
>>>>
>>>> I can help you with the Powershell stuff if you want to take that
>>>> offlist.
>>>>
>>>>
>>>>
>>>> As for the employeeid thing
>>>>
>>>>
>>>>
>>>> Using Powershell and Quest you can do this
>>>>
>>>>
>>>>
>>>> Assuming the csv file has at least two values, Name and employeeid
>>>>
>>>>
>>>>
>>>> PS> import-Csv .\testemp.csv | %{set-qaduser $_.Name -ObjectAttributes
>>>> @{"employeeid"=$_.employeeid}}
>>>>
>>>> Download Powershell here: www.microsoft.com/powershell
>>>>
>>>> Download Quest stuff here: www.quest.com/powershell
>>>>
>>>>
>>>>
>>>> Good powershell resources
>>>>
>>>> Me: http://www.bsonposh.com
>>>>
>>>> PG Blog: http://blogs.msdn.com/powershell/default.aspx
>>>>
>>>> Community Site: http://www.powershellcommunity.org
>>>>
>>>> Powergui: www.powergui.org
>>>>
>>>>
>>>>
>>>> You can always ask on here as well.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Wed, Apr 8, 2009 at 10:59 AM, ShannAn Lawson <ShannAn.Lawson@kbr.com>
>>>> wrote:
>>>>
>>>> I took and AD class a few months ago and he was saying that PowerShell
>>>> is the next biggest thing. I would love to learn PowerShell and I am new to
>>>> scripting. I have basic knowledge of programming, but that is it… any
>>>> really good sources?
>>>>
>>>>
>>>>
>>>> Shannan
>>>> ------------------------------
>>>>
>>>> *From:* ActiveDir-owner@mail.activedir.org [mailto:
>>>> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell
>>>> *Sent:* Wednesday, April 08, 2009 7:16 AM
>>>>
>>>>
>>>> *To:* ActiveDir@mail.activedir.org
>>>>
>>>> *Subject:* Re: [ActiveDir] dstools to disable inactive users/computers
>>>>
>>>>
>>>>
>>>> This is SUPER simple with Powershell and the free Quest cmdlets. If you
>>>> are interested I will show you.
>>>>
>>>>
>>>>
>>>> If you are new to IT or scripting in general... I would invest some time
>>>> into PowershellΏ]. It will help you greatly.
>>>>
>>>>
>>>>
>>>> Ώ] I bet joe agrees but you would never hear it
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Wed, Apr 8, 2009 at 1:05 AM, ShannAn Lawson <ShannAn.Lawson@kbr.com>
>>>> wrote:
>>>>
>>>> Very cool! I will see what we can do with this one J Right now we
>>>> have a script that runs off of last login and it disables users and stamps
>>>> them for 30 days unused, and 120 unused before they are completely deleted.
>>>>
>>>>
>>>>
>>>>
>>>> I am actually trying to find a way to add the employee ID field to my AD
>>>> on my pc. We just acquired a company that uses the employee ID field to
>>>> auto add groups and I need to be able to do this and can’t right now.
>>>>
>>>>
>>>> ------------------------------
>>>>
>>>> *From:* ActiveDir-owner@mail.activedir.org [mailto:
>>>> ActiveDir-owner@mail.activedir.org] *On Behalf Of *joe
>>>> *Sent:* Tuesday, April 07, 2009 11:29 PM
>>>>
>>>>
>>>> *To:* ActiveDir@mail.activedir.org
>>>> *Subject:* RE: [ActiveDir] dstools to disable inactive users/computers
>>>>
>>>>
>>>>
>>>> http://www.joeware.net/freetools/tools/oldcmp/index.htm
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> try it.....
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> O'Reilly Active Directory Fourth Edition -
>>>> http://www.joeware.net/win/ad4e.htm
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> ------------------------------
>>>>
>>>> *From:* ActiveDir-owner@mail.activedir.org [mailto:
>>>> ActiveDir-owner@mail.activedir.org] *On Behalf Of *ShannAn Lawson
>>>> *Sent:* Tuesday, April 07, 2009 10:47 PM
>>>> *To:* ActiveDir@mail.activedir.org
>>>> *Subject:* RE: [ActiveDir] dstools to disable inactive users/computers
>>>>
>>>> Brandon,
>>>>
>>>>
>>>>
>>>> Here is my input….
>>>>
>>>>
>>>>
>>>> I LOVE beer. I’m definitely a beer girl… bring it on! LOL As far as
>>>> the actual conversation…. I’m learning. We use VB Scripts to disable
>>>> accounts depending on their logon stamp. Other then that, I am plain dumb…
>>>> wish I had more input… but like I said I am a newbie and taking all of the
>>>> awesome advice in!
>>>>
>>>>
>>>>
>>>>
>>>> ------------------------------
>>>>
>>>> *From:* ActiveDir-owner@mail.activedir.org [mailto:
>>>> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell
>>>> *Sent:* Tuesday, April 07, 2009 9:27 PM
>>>> *To:* ActiveDir@mail.activedir.org
>>>> *Subject:* Re: [ActiveDir] dstools to disable inactive users/computers
>>>>
>>>>
>>>>
>>>> Shannan,
>>>>
>>>>
>>>>
>>>> Very glad to provide comedic value, but not sitting on the side lines...
>>>> what is your take
>>>>
>>>> On Tue, Apr 7, 2009 at 10:00 PM, ShannAn Lawson <ShannAn.Lawson@kbr.com>
>>>> wrote:
>>>>
>>>> You guys are killing me!!! Haha... I am a newbie, but I just wanted to
>>>> say that you guys have been pretty exciting lately... LOL
>>>>
>>>>
>>>> -----Original Message-----
>>>> From: ActiveDir-owner@mail.activedir.org [mailto:
>>>> ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele Scolaro
>>>>
>>>> Sent: Tuesday, April 07, 2009 8:47 PM
>>>> To: ActiveDir@mail.activedir.org
>>>> Subject: RE: [ActiveDir] dstools to disable inactive users/computers
>>>>
>>>> Yes, there might be other nice beers, but I prefer to "win easy"... we
>>>> have less rivals in the wine arena! ;-)
>>>>
>>>> What Montepulciano are you talking about? There are two:
>>>> 1) Nobile (Siena-Tuscany)
>>>> http://en.wikipedia.org/wiki/Vino_Nobile_di_Montepulciano
>>>> 2) d'Abruzzo (Marche)
>>>> http://en.wikipedia.org/wiki/Montepulciano_d%27Abruzzo
>>>>
>>>> Regards - Gabriele.
>>>>
>>>> > -----Original Message-----
>>>> > From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-
>>>> > owner@mail.activedir.org] On Behalf Of Kurt Buff
>>>> > Sent: mercoledì 8 aprile 2009 3.31
>>>> > To: ActiveDir@mail.activedir.org
>>>> > Subject: Re: [ActiveDir] dstools to disable inactive users/computers
>>>> >
>>>> > Oh, don't cave in like that!
>>>> >
>>>> > Moretti is a very good beer, and I'm sure there are others, too.
>>>> >
>>>> > Heh.
>>>> >
>>>> > Although, if you must make it wine, make it a good Montepulciano - one
>>>> > of my favorites.
>>>> >
>>>> > On Tue, Apr 7, 2009 at 17:12, Gabriele Scolaro <gabro@gabro.net>
>>>> wrote:
>>>> > > Arrggghhhh! You got me! I'm Italian and I live in Italy.... may I
>>>> > change
>>>> > > beer cans with bottles of wine? - Gabriele.
>>>> > >
>>>> > >
>>>> > >
>>>> > > From: ActiveDir-owner@mail.activedir.org
>>>> > > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert
>>>> > Singers
>>>> > > Sent: mercoledì 8 aprile 2009 1.48
>>>> > > To: ActiveDir@mail.activedir.org
>>>> > > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
>>>> > >
>>>> > >
>>>> > >
>>>> > > Are the beer cans for target practice? If not you might want to
>>>> > state your
>>>> > > country of origin so we can determine if it is actually beer.
>>>> > >
>>>> > >
>>>> > >
>>>> > > ________________________________
>>>> > >
>>>> > > From: ActiveDir-owner@mail.activedir.org
>>>> > > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele
>>>> > Scolaro
>>>> > > Sent: Wednesday, 8 April 2009 11:39 a.m.
>>>> > > To: ActiveDir@mail.activedir.org
>>>> > > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
>>>> > >
>>>> > > I also got a load of beer cans for the event... don't stand on
>>>> > ceremony! ;-) -
>>>> > > Gabriele.
>>>> > >
>>>> > >
>>>> > >
>>>> > > From: ActiveDir-owner@mail.activedir.org
>>>> > > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Craig,
>>>> > Coleman
>>>> > > Sent: lunedì 6 aprile 2009 23.40
>>>> > > To: ActiveDir@mail.activedir.org
>>>> > > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
>>>> > >
>>>> > >
>>>> > >
>>>> > > Pass the pop-corn please...I am all out.
>>>> > >
>>>> > >
>>>> > >
>>>> > >
>>>> > >
>>>> > >
>>>> > >
>>>> > > I couldn't resist.
>>>> > >
>>>> > >
>>>> > >
>>>> > >
>>>> > >
>>>> > > From: ActiveDir-owner@mail.activedir.org
>>>> > > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele
>>>> > Scolaro
>>>> > > Sent: Friday, April 03, 2009 12:23 PM
>>>> > > To: ActiveDir@mail.activedir.org
>>>> > > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
>>>> > >
>>>> > >
>>>> > >
>>>> > > My GOD.... someone dared to tell joe that one of his tools is
>>>> > "obsolete,
>>>> > > dead meat", while PoSH is THE CHANGE, THE INNOVATION!!!
>>>> > >
>>>> > >
>>>> > >
>>>> > > OK, I prepare myself, get a bag of pop-corn and wait anxiously to
>>>> > watch the
>>>> > > reply...... J
>>>> > >
>>>> > >
>>>> > >
>>>> > > Gabriele
>>>> > >
>>>> > >
>>>> > >
>>>> > > From: ActiveDir-owner@mail.activedir.org
>>>> > > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Scha rique
>>>> > > Sent: venerdì 3 aprile 2009 17.25
>>>> > > To: ActiveDir@mail.activedir.org
>>>> > > Subject: Re: [ActiveDir] dstools to disable inactive users/computers
>>>> > >
>>>> > >
>>>> > >
>>>> > > Joe, your tool was the bomb back in the days...but I would use PoSH
>>>> > now
>>>> > >
>>>> > > Here is the meat for deleting inactive computer accounts.
>>>> > >
>>>> > > # set the date to be used as a limit - in this example: 90 days
>>>> > earlier than
>>>> > > the current date
>>>> > >
>>>> > > $old = (Get-Date).AddDays(-90)
>>>> > >
>>>> > > # get the list of computers with the date earlier than this date
>>>> > >
>>>> > > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where
>>>> {
>>>> > > $_.pwdLastSet -le $old }
>>>> > >
>>>> > > A few variations to this depending on how you want to use the data:
>>>> > >
>>>> > > # get a csv report
>>>> > >
>>>> > > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where
>>>> {
>>>> > > $_.pwdLastSet -le $old } | select-object Name, ParentContainer,
>>>> > Description,
>>>> > > pwdLastSet | export-csv c:\temp\outdated.csv
>>>> > >
>>>> > > # move such computers to another OU
>>>> > >
>>>> > > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where
>>>> {
>>>> > > $_.pwdLastSet -le $old } | Move-QADObject -to test.lab/obsolete
>>>> > >
>>>> > > # remove the computer records from AD (caution: this actually
>>>> deletes
>>>> > the
>>>> > > records, run the command with -whatif switch before running without
>>>> > it)
>>>> > >
>>>> > > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where
>>>> {
>>>> > > $_.pwdLastSet -le $old } | Remove-QADObject -to test.lab/obsolete
>>>> > >
>>>> > > On Fri, Apr 3, 2009 at 9:39 AM, joe <listmail@joeware.net> wrote:
>>>> > >
>>>> > > Yes. However you may want to look at oldcmp... 4 out of 5 admins who
>>>> > clean
>>>> > > up computers prefer oldcmp.
>>>> > >
>>>> > > http://www.joeware.net/freetools/tools/oldcmp/index.htm
>>>> > >
>>>> > >
>>>> > > joe
>>>> > >
>>>> > > --
>>>> > > O'Reilly Active Directory Fourth Edition -
>>>> > > http://www.joeware.net/win/ad4e.htm
>>>> > >
>>>> > > -----Original Message-----
>>>> > > From: ActiveDir-owner@mail.activedir.org
>>>> > >
>>>> > > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele
>>>> > Scolaro
>>>> > > Sent: Friday, April 03, 2009 6:02 AM
>>>> > > To: ActiveDir@mail.activedir.org
>>>> > >
>>>> > > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
>>>> > >
>>>> > > What attribute "dsquery user/computer -inactive" will query?
>>>> > > Hopefully it's the replicated lastLogonTimeStamp... isn't it? :-o
>>>> > >
>>>> > > Thanks - Gabriele.
>>>> > >
>>>> > >> > -----Original Message-----
>>>> > >> > From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-
>>>> > >> > owner@mail.activedir.org] On Behalf Of Laura E. Hunter
>>>> > >> > Sent: lunedì 16 febbraio 2009 16.22
>>>> > >> > To: ActiveDir@mail.activedir.org
>>>> > >> > Subject: Re: [ActiveDir] dstools to disable inactive
>>>> > users/computers
>>>> > >> >
>>>> > >> > 'Cos oldcmp.exe is way cooler? :-)
>>>> > >> >
>>>> > >> > On Mon, Feb 16, 2009 at 9:16 AM, Gabriele Scolaro
>>>> > <gabro@gabro.net>
>>>> > >> > wrote:
>>>> > >> > > I would like to disable inactive users and computers by simply
>>>> > >> using
>>>> > >> > the native dstools via tasksch.exe:
>>>> > >> > > Example:
>>>> > >> > > dsquery user -inactive 60 -limit 5000 | dsmod user -disabled
>>>> yes
>>>> > >> > > dsquery computer -inactive 60 -limit 10000 | dsmod computer -
>>>> > >> disabled
>>>> > >> > yes
>>>> > >> > >
>>>> > >> > > but I recall I read in this list dstools were not recommended
>>>> > for
>>>> > >> > some reasons.... tried to search in the list archive but did not
>>>> > >> > find anything relevant.
>>>> > >> > >
>>>> > >> > > Can someone tell me why it's better not to use dsquery/dsmod?
>>>> > >> > >
>>>> > >> > > Thanks - Gabriele.
>>>> > >> > >
>>>> > >> > > List info : http://www.activedir.org/List.aspx
>>>> > >> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> > >> > > List archive: http://www.activedir.org/ma/default.aspx
>>>> > >> > >
>>>> > >> >
>>>> > >> >
>>>> > >> >
>>>> > >> > --
>>>> > >> > -----------------------
>>>> > >> > Laura E. Hunter
>>>> > >> > Architect, Oxford Computer Group
>>>> > >> > (http://www.oxfordcomputergroup.com)
>>>> > >> > Microsoft MVP, Directory Services
>>>> > >> > (https://mvp.support.microsoft.com/profile/laura)
>>>> > >> > Author, Active Directory Consultant's Field Guide
>>>> > >> > (http://tinyurl.com/7f8ll)
>>>> > >> > Author, Active Directory Cookbook, Third Edition
>>>> > >> > (http://tinyurl.com/7kp3ct)
>>>> > >> > List info : http://www.activedir.org/List.aspx
>>>> > >> > List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> > >> > List archive: http://www.activedir.org/ma/default.aspx
>>>> > >
>>>> > > List info : http://www.activedir.org/List.aspx
>>>> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> > > List archive: http://www.activedir.org/ma/default.aspx
>>>> > >
>>>> > > List info : http://www.activedir.org/List.aspx
>>>> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> > > List archive: http://www.activedir.org/ma/default.aspx
>>>> > >
>>>> > >
>>>> > >
>>>> > > ________________________________
>>>> > >
>>>> > > This e-mail message has been scanned for Viruses and cleared by
>>>> NetIQ
>>>> > > MailMarshal
>>>> > >
>>>> > > ________________________________
>>>> > > ________________________________
>>>> > >
>>>> > > Please Note:
>>>> > >
>>>> > > The information contained in this email message and any attached
>>>> > files may
>>>> > > be confidential and subject to privilege. Any opinions expressed in
>>>> > this
>>>> > > message are not necessarily those of the Department of Building and
>>>> > Housing.
>>>> > > All technical opinions are offered on a 'no-liability' basis. This
>>>> > message
>>>> > > and any files transmitted with it are confidential and solely for
>>>> the
>>>> > use of
>>>> > > the intended recipient. If you are not the intended recipient, you
>>>> > are
>>>> > > notified that any use, disclosure or copying of this email is
>>>> > unauthorised.
>>>> > > If you have received this email in error, please notify us
>>>> > immediately by
>>>> > > reply email and delete the original and any attachment(s). Thank
>>>> you.
>>>> > >
>>>> > > ________________________________
>>>> > List info : http://www.activedir.org/List.aspx
>>>> > List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> > List archive: http://www.activedir.org/ma/default.aspx
>>>>
>>>> List info : http://www.activedir.org/List.aspx
>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> List archive: http://www.activedir.org/ma/default.aspx
>>>>
>>>> This e-mail, including any attached files, may contain confidential and
>>>> privileged information for the sole use of the intended recipient. Any
>>>> review, use, distribution, or disclosure by others is strictly prohibited.
>>>> If you are not the intended recipient (or authorized to receive information
>>>> for the intended recipient), please contact the sender by reply e-mail and
>>>> delete all copies of this message.
>>>>
>>>> List info : http://www.activedir.org/List.aspx
>>>> List FAQ : http://www.activedir.org/ListFAQ.aspx
>>>> List archive: http://www.activedir.org/ma/default.aspx
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>
>
| | | |
| gabriel/tfi
Posts:427
| | 04/10/2009 7:06 AM |
| Dont get it personal, but the PoSH chapeter will be one of those I will
step over
. May I claim for a partial refund of the book price??? :-)))
Gabriele.
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: giovedì 9 aprile 2009 5.25
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] dstools to disable inactive users/computers
Gabriele, let me know how you like or dislike the Powershell chapter. I can
take it 
On Wed, Apr 8, 2009 at 10:48 PM, Gabriele Scolaro <gabro@gabro.net> wrote:
Ive just ordered AD4! I cant wait to get it and start reading! Gabriele.
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond
Sent: giovedì 9 aprile 2009 3.27
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] dstools to disable inactive users/computers
There are a couple chapters in AD4 on powerShell/AD one is a 30 page
PowerShell 101 and the other is 30-40 pages of AD PowerShell. Also have a
chapter on Exchange 2007 PowerShell stuff. Link below.
Brandon Shell (of this DL) helped me write those chapters in a major way.
Thanks,
Brian Desmond
brian@briandesmond.com
c - 312.731.3132
Active Directory, 4th Ed - <http://www.briandesmond.com/ad4/>
http://www.briandesmond.com/ad4/
Microsoft MVP - <https://mvp.support.microsoft.com/profile/Brian>
https://mvp.support.microsoft.com/profile/Brian
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of ShannAn Lawson
Sent: Wednesday, April 08, 2009 9:59 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] dstools to disable inactive users/computers
I took and AD class a few months ago and he was saying that PowerShell is
the next biggest thing. I would love to learn PowerShell and I am new to
scripting. I have basic knowledge of programming, but that is it
any
really good sources?
Shannan
_____
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Wednesday, April 08, 2009 7:16 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] dstools to disable inactive users/computers
This is SUPER simple with Powershell and the free Quest cmdlets. If you are
interested I will show you.
If you are new to IT or scripting in general... I would invest some time
into PowershellΏ]. It will help you greatly.
Ώ] I bet joe agrees but you would never hear it
On Wed, Apr 8, 2009 at 1:05 AM, ShannAn Lawson <ShannAn.Lawson@kbr.com>
wrote:
Very cool! I will see what we can do with this one J Right now we have a
script that runs off of last login and it disables users and stamps them for
30 days unused, and 120 unused before they are completely deleted.
I am actually trying to find a way to add the employee ID field to my AD on
my pc. We just acquired a company that uses the employee ID field to auto
add groups and I need to be able to do this and cant right now.
_____
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe
Sent: Tuesday, April 07, 2009 11:29 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] dstools to disable inactive users/computers
http://www.joeware.net/freetools/tools/oldcmp/index.htm
try it.....
--
O'Reilly Active Directory Fourth Edition -
http://www.joeware.net/win/ad4e.htm
_____
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of ShannAn Lawson
Sent: Tuesday, April 07, 2009 10:47 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] dstools to disable inactive users/computers
Brandon,
Here is my input
.
I LOVE beer. Im definitely a beer girl
bring it on! LOL As far as the
actual conversation
. Im learning. We use VB Scripts to disable accounts
depending on their logon stamp. Other then that, I am plain dumb
wish I
had more input
but like I said I am a newbie and taking all of the awesome
advice in!
_____
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Tuesday, April 07, 2009 9:27 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] dstools to disable inactive users/computers
Shannan,
Very glad to provide comedic value, but not sitting on the side lines...
what is your take
On Tue, Apr 7, 2009 at 10:00 PM, ShannAn Lawson <ShannAn.Lawson@kbr.com>
wrote:
You guys are killing me!!! Haha... I am a newbie, but I just wanted to say
that you guys have been pretty exciting lately... LOL
-----Original Message-----
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele Scolaro
Sent: Tuesday, April 07, 2009 8:47 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] dstools to disable inactive users/computers
Yes, there might be other nice beers, but I prefer to "win easy"... we have
less rivals in the wine arena! ;-)
What Montepulciano are you talking about? There are two:
1) Nobile (Siena-Tuscany)
http://en.wikipedia.org/wiki/Vino_Nobile_di_Montepulciano
2) d'Abruzzo (Marche)
http://en.wikipedia.org/wiki/Montepulciano_d%27Abruzzo
Regards - Gabriele.
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-
> owner@mail.activedir.org] On Behalf Of Kurt Buff
> Sent: mercoledì 8 aprile 2009 3.31
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] dstools to disable inactive users/computers
>
> Oh, don't cave in like that!
>
> Moretti is a very good beer, and I'm sure there are others, too.
>
> Heh.
>
> Although, if you must make it wine, make it a good Montepulciano - one
> of my favorites.
>
> On Tue, Apr 7, 2009 at 17:12, Gabriele Scolaro <gabro@gabro.net> wrote:
> > Arrggghhhh! You got me! I'm Italian and I live in Italy.... may I
> change
> > beer cans with bottles of wine? - Gabriele.
> >
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert
> Singers
> > Sent: mercoledì 8 aprile 2009 1.48
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> >
> >
> > Are the beer cans for target practice? If not you might want to
> state your
> > country of origin so we can determine if it is actually beer.
> >
> >
> >
> > ________________________________
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele
> Scolaro
> > Sent: Wednesday, 8 April 2009 11:39 a.m.
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> > I also got a load of beer cans for the event... don't stand on
> ceremony! ;-) -
> > Gabriele.
> >
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Craig,
> Coleman
> > Sent: lunedì 6 aprile 2009 23.40
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> >
> >
> > Pass the pop-corn please...I am all out.
> >
> >
> >
> >
> >
> >
> >
> > I couldn't resist.
> >
> >
> >
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele
> Scolaro
> > Sent: Friday, April 03, 2009 12:23 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> >
> >
> > My GOD.... someone dared to tell joe that one of his tools is
> "obsolete,
> > dead meat", while PoSH is THE CHANGE, THE INNOVATION!!!
> >
> >
> >
> > OK, I prepare myself, get a bag of pop-corn and wait anxiously to
> watch the
> > reply...... J
> >
> >
> >
> > Gabriele
> >
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Scha rique
> > Sent: venerdì 3 aprile 2009 17.25
> > To: ActiveDir@mail.activedir.org
> > Subject: Re: [ActiveDir] dstools to disable inactive users/computers
> >
> >
> >
> > Joe, your tool was the bomb back in the days...but I would use PoSH
> now
> >
> > Here is the meat for deleting inactive computer accounts.
> >
> > # set the date to be used as a limit - in this example: 90 days
> earlier than
> > the current date
> >
> > $old = (Get-Date).AddDays(-90)
> >
> > # get the list of computers with the date earlier than this date
> >
> > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where {
> > $_.pwdLastSet -le $old }
> >
> > A few variations to this depending on how you want to use the data:
> >
> > # get a csv report
> >
> > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where {
> > $_.pwdLastSet -le $old } | select-object Name, ParentContainer,
> Description,
> > pwdLastSet | export-csv c:\temp\outdated.csv
> >
> > # move such computers to another OU
> >
> > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where {
> > $_.pwdLastSet -le $old } | Move-QADObject -to test.lab/obsolete
> >
> > # remove the computer records from AD (caution: this actually deletes
> the
> > records, run the command with -whatif switch before running without
> it)
> >
> > Get-QADComputer -IncludedProperties pwdLastSet -SizeLimit 0 | where {
> > $_.pwdLastSet -le $old } | Remove-QADObject -to test.lab/obsolete
> >
> > On Fri, Apr 3, 2009 at 9:39 AM, joe <listmail@joeware.net> wrote:
> >
> > Yes. However you may want to look at oldcmp... 4 out of 5 admins who
> clean
> > up computers prefer oldcmp.
> >
> > http://www.joeware.net/freetools/tools/oldcmp/index.htm
> >
> >
> > joe
> >
> > --
> > O'Reilly Active Directory Fourth Edition -
> > http://www.joeware.net/win/ad4e.htm
> >
> > -----Original Message-----
> > From: ActiveDir-owner@mail.activedir.org
> >
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Gabriele
> Scolaro
> > Sent: Friday, April 03, 2009 6:02 AM
> > To: ActiveDir@mail.activedir.org
> >
> > Subject: RE: [ActiveDir] dstools to disable inactive users/computers
> >
> > What attribute "dsquery user/computer -inactive" will query?
> > Hopefully it's the replicated lastLogonTimeStamp... isn't it? :-o
> >
> > Thanks - Gabriele.
> >
> >> > -----Original Message-----
> >> > From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-
> >> > owner@mail.activedir.org] On Behalf Of Laura E. Hunter
> >> > Sent: lunedì 16 febbraio 2009 16.22
> >> > To: ActiveDir@mail.activedir.org
> >> > Subject: Re: [ActiveDir] dstools to disable inactive
> users/computers
> >> >
> >> > 'Cos oldcmp.exe is way cooler? :-)
> >> >
> >> > On Mon, Feb 16, 2009 at 9:16 AM, Gabriele Scolaro
> <gabro@gabro.net>
> >> > wrote:
> >> > > I would like to disable inactive users and computers by simply
> >> using
> >> > the native dstools via tasksch.exe:
> >> > > Example:
> >> > > dsquery user -inactive 60 -limit 5000 | dsmod user -disabled yes
> >> > > dsquery computer -inactive 60 -limit 10000 | dsmod computer -
> >> disabled
> >> > yes
> >> > >
> >> > > but I recall I read in this list dstools were not recommended
> for
> >> > some reasons.... tried to search in the list archive but did not
> >> > find anything relevant.
> >> > >
> >> > > Can someone tell me why it's better not to use dsquery/dsmod?
> >> > >
> >> > > Thanks - Gabriele.
> >> > >
> >> > > List info : http://www.activedir.org/List.aspx
> >> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> > > List archive: http://www.activedir.org/ma/default.aspx
> >> > >
> >> >
> >> >
> >> >
> >> > --
> >> > -----------------------
> >> > Laura E. Hunter
> >> > Architect, Oxford Computer Group
> >> > (http://www.oxfordcomputergroup.com
<http://www.oxfordcomputergroup.com/> )
> >> > Microsoft MVP, Directory Services
> >> > (https://mvp.support.microsoft.com/profile/laura)
> >> > Author, Active Directory Consultant's Field Guide
> >> > (http://tinyurl.com/7f8ll)
> >> > Author, Active Directory Cookbook, Third Edition
> >> > (http://tinyurl.com/7kp3ct)
> >> > List info : http://www.activedir.org/List.aspx
> >> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> >> > List archive: http://www.activedir.org/ma/default.aspx
> >
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> >
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> >
> >
> >
> > ________________________________
> >
> > This e-mail message has been scanned for Viruses and cleared by NetIQ
> > MailMarshal
> >
> > ________________________________
> > ________________________________
> >
> > Please Note:
> >
> > The information contained in this email message and any attached
> files may
> > be confidential and subject to privilege. Any opinions expressed in
> this
> > message are not necessarily those of the Department of Building and
> Housing.
> > All technical opinions are offered on a 'no-liability' basis. This
> message
> > and any files transmitted with it are confidential and solely for the
> use of
> > the intended recipient. If you are not the intended recipient, you
> are
> > notified that any use, disclosure or copying of this email is
> unauthorised.
> > If you have received this email in error, please notify us
> immediately by
> > reply email and delete the original and any attachment(s). Thank you.
> >
> > ________________________________
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
This e-mail, including any attached files, may contain confidential and
privileged information for the sole use of the intended recipient. Any
review, use, distribution, or disclosure by others is strictly prohibited.
If you are not the intended recipient (or authorized to receive information
for the intended recipient), please contact the sender by reply e-mail and
delete all copies of this message.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
|
|