As Neil indicated, you can look at accountExpires
attribute. Adfind will decode that to a date for you if you use the -tdc switch.
Unfortunately at the present time you can't specify a date in the query to
adfind in the query and have it give you the objects matching. However, there is
another tool on the website called findexpacc which will find expired accounts
and expired passwords and can be set to tell you what accounts/passwords are
expired in X days. You could put in say 10000 for that value and it will tell
you all accounts that will be expired in the next 10000 days.
findexpacc /?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Johnson Sent: Thursday, September 01, 2005 5:09 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Finding user's with certain attributes Hi all How could I, using adfind, really
useful tool by the way respect to joe!!, find all users who have an expiry date
set on their account. What would the name of that attribute
be? Thanks in
advance Regards
Peter
Johnson |