List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] AD Reports

Prev Next

You are not authorized to post a reply.

Page 2 of 2

Author

Messages

listmail

Posts:821

12/02/2008 10:48 AM
Oh I absolutely agree. I was smiling because it is something I have said for a long long time... Person A says "show me the active users", I respond "Define Active because MSFT doesn't..." And then I spend 30+ minutes explaining what that means. My response on what to grab is simply based on what req's I did hear. -- O'Reilly Active Directory Fourth Edition - http://www.joeware.net/win/ad3e.htm _____ From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of neil.ruston@barclayswealth.com Sent: Tuesday, December 02, 2008 4:00 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Reports Well, until the req is defined, we're all guessing - yourself included :-) _____ From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe Sent: 01 December 2008 17:48 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD Reports I love how most everyone started out with "define active". That was great, made me smile. I think I would start out with all enabled users, you could get a little fancier and pull out users with expired accounts as well. I wouldn't filter out people with expired passwords because they just have to change the password and they have access again. So an AdFind query of like adfind -default -bit -f "&(objectcategory=person)(objectclass=user)(!(useraccountcontrol:AND:=2))(\|( accountexpires=*)(accountexpires>={{LOCAL:2008/12/01}}))" samaccountname userprincipalname -csv Would dump the DN, SAM Name, and 2K Logon Name to CSV for you. joe -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm _____ From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Chris Pohlschneider Sent: Monday, December 01, 2008 9:36 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD Reports Hello, For auditing purposes, I need to provide a report of current active users in Active Directory. I have stumbled through Active Directory Users and Computers and there is nothing that I can find that would give me this type of report. I am wondering if it is possibly buried somewhere in the tool or if I have to run this type of report from a different tool. Thanks in advance for any help. AD forest in Windows 2003 AD native. Chris Pohlschneider Network Administrator chris.pohlschneider@hollowayusa.com 937-494-2559 _____ Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group. The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk. This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments. Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons. Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group. Barclays Bank PLC. Registered in England and Wales (registered no. 1026167). Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom. Barclays Bank PLC is authorised and regulated by the Financial Services Authority.

You are not authorized to post a reply.

Page 2 of 2

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] AD Reports

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads