Thanks Paul.
That works great :)
Yann
Paul Williams <[EMAIL PROTECTED]> a écrit :
Paul Williams <[EMAIL PROTECTED]> a écrit :
Perform an AND query.In ADFIND, this looks like this:adfind -default -bit -f "&(objectCategory=person)(userAccountControl:AND:=65536)" cnIf you want to use ADUC, or something else, you'll need to use this:(&(objectCategory=person)(useraccountcontrol:1.2.840.113556.1.4.803:=65536))--Paul----- Original Message -----From: YannSent: Monday, October 09, 2006 4:43 PMSubject: [ActiveDir] finding users that password never expire.Hello all,I had to do dump in AD all users whose password never expires.I used the saved queries with this custom ldap query :useraccountcontrol=66048 which corresponds to NORMAL_ACCOUNT & DONT_EXPIRE_PASSWORD properties flag.BUT i found that this search was not complete, because some users have other properties flag such asUF_ACCOUNTDISABLE | UF_NORMAL_ACCOUNT | UF_DONT_EXPIRE_PASSWD or UF_ACCOUNTDISABLE | UF_NORMAL_ACCOUNT | UF_DONT_EXPIRE_PASSWD | UF_NOT_DELEGATED ... :(So the question is:How to search for user accounts that have at least the DONT_EXPIRE_PASSWORD property flag set to their useraccountcontrol ?Is there a way to do it with a custom ldap query ?Thanks,Yann
Découvrez un nouveau moyen de poser toutes vos questions quel que soit le sujet ! Yahoo! Questions/Réponses pour partager vos connaissances, vos opinions et vos expériences. Cliquez ici.
Yahoo! Mail réinvente le mail ! Découvrez le nouveau Yahoo! Mail et son interface révolutionnaire.
- [ActiveDir] finding users that password never expi... Yann
- Re: [ActiveDir] finding users that password n... Paul Williams
- RE : Re: [ActiveDir] finding users that p... Yann
- RE: [ActiveDir] finding users that password n... Almeida Pinto, Jorge de
- RE : RE: [ActiveDir] finding users that p... Yann
- RE: RE : RE: [ActiveDir] finding user... Almeida Pinto, Jorge de
- Re: RE: [ActiveDir] finding users tha... Paul Williams
Reply via email to