How odd, I responded to this yesterday right after the original post came in, wonder why it didn't hit the list...
 
  joe


From: joe [mailto:[EMAIL PROTECTED]
Sent: Monday, November 15, 2004 3:10 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] adfind and -excl

Sure. Just name them on the command line
 
adfind -gc -b "" -f name=joe samaccountname homeMDB blah1 blah2 blah3 blah4
 
 
Basically ADFind takes a couple of main parameters
 
Search Base
Search Filter
Attributes to Return
 
If no filter is specified, unless it is a BASE scope search, it will fail. If it is a BASE scope it will assume objectclass=*
 
If no base (or special base such as -root, -schema, -default, etc) it will fail.
 
If no attributes specified it will return the * set which is the default return set for a given object. If you want everything in the * set PLUS some stuff not normally there you can specify * as one of the attributes along with others.
 
adfind -gc -b "" -f objectcategory=group * modifyTimeStamp ntsecuritydescriptor
 
 
  joe
 
 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon
Sent: Monday, November 15, 2004 2:51 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] adfind and -excl

Adfind.exe has a switch called –excl which basically exclude certain attributes.  Does anyone know if it can do the opposite?  I want to specify only certain attributes to include. (too many to exclude)

 

Devon Harding

Windows Systems Engineer

Southern Wine & Spirits - GSD

954-602-2469

 


__________________________________
This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You.

Reply via email to