As Neil indicated, you can look at accountExpires attribute. Adfind will decode that to a date for you if you use the -tdc switch. Unfortunately at the present time you can't specify a date in the query to adfind in the query and have it give you the objects matching. However, there is another tool on the website called findexpacc which will find expired accounts and expired passwords and can be set to tell you what accounts/passwords are expired in X days. You could put in say 10000 for that value and it will tell you all accounts that will be expired in the next 10000 days.
 
findexpacc /?
 
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Johnson
Sent: Thursday, September 01, 2005 5:09 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Finding user's with certain attributes

Hi all

 

How could I, using adfind, really useful tool by the way respect to joe!!, find all users who have an expiry date set on their account. What would the name of that attribute be?

 

 

Thanks in advance

 

Regards

 

Peter Johnson

 

 

Reply via email to