RE: [ActiveDir] Quick CSVDE question
Nevermind, I added "mail" to the filters and then parsed the data accordingly. Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 9:28 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Quick CSVDE question I'm trying to export a list of security groups, but not distribution groups. The string below gets all groups, is there a way I can exclude DLs? csvde -f c:\groups.csv -s ad7 -d "dc=tcu,dc=edu" -p subtree -r(&(objectCategory=Group)(objectClass=group))" -l displayname,samaccountname,description" Thanks, Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Quick CSVDE question
If you need to distinguish between true distribution groups and mail-enabled security groups you would be better querying the group type attribute. If you add this to the query you will only get back security-enabled groups, regardless of mail status. (groupType:1.2.840.113556.1.4.803:=2147483648) John Roberts JLR Technology Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 10:49 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Quick CSVDE question Nevermind, I added "mail" to the filters and then parsed the data accordingly. Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 9:28 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Quick CSVDE question I'm trying to export a list of security groups, but not distribution groups. The string below gets all groups, is there a way I can exclude DLs? csvde -f c:\groups.csv -s ad7 -d "dc=tcu,dc=edu" -p subtree -r(&(objectCategory=Group)(objectClass=group))" -l displayname,samaccountname,description" Thanks, Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Quick CSVDE question
Great thanks. Where did you find this 1.2.840... number? Is there a reference table somewhere? Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Roberts Sent: Tuesday, February 28, 2006 10:11 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Quick CSVDE question If you need to distinguish between true distribution groups and mail-enabled security groups you would be better querying the group type attribute. If you add this to the query you will only get back security-enabled groups, regardless of mail status. (groupType:1.2.840.113556.1.4.803:=2147483648) John Roberts JLR Technology Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 10:49 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Quick CSVDE question Nevermind, I added "mail" to the filters and then parsed the data accordingly. Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 9:28 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Quick CSVDE question I'm trying to export a list of security groups, but not distribution groups. The string below gets all groups, is there a way I can exclude DLs? csvde -f c:\groups.csv -s ad7 -d "dc=tcu,dc=edu" -p subtree -r(&(objectCategory=Group)(objectClass=group))" -l displayname,samaccountname,description" Thanks, Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Quick CSVDE question
Bryan, see here: http://support.microsoft.com/?kbid=269181 or google the string -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 11:18 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Quick CSVDE question Great thanks. Where did you find this 1.2.840... number? Is there a reference table somewhere? Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Roberts Sent: Tuesday, February 28, 2006 10:11 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Quick CSVDE question If you need to distinguish between true distribution groups and mail-enabled security groups you would be better querying the group type attribute. If you add this to the query you will only get back security-enabled groups, regardless of mail status. (groupType:1.2.840.113556.1.4.803:=2147483648) John Roberts JLR Technology Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 10:49 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Quick CSVDE question Nevermind, I added "mail" to the filters and then parsed the data accordingly. Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 9:28 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Quick CSVDE question I'm trying to export a list of security groups, but not distribution groups. The string below gets all groups, is there a way I can exclude DLs? csvde -f c:\groups.csv -s ad7 -d "dc=tcu,dc=edu" -p subtree -r(&(objectCategory=Group)(objectClass=group))" -l displayname,samaccountname,description" Thanks, Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail transmission contains information that is intended to be confidential and privileged. If you receive this e-mail and you are not a named addressee you are hereby notified that you are not authorized to read, print, retain, copy or disseminate this communication without the consent of the sender and that doing so is prohibited and may be unlawful. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please delete and otherwise erase it and any attachments from your computer system. Your assistance in correcting this error is appreciated. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Quick CSVDE question
It's an OID that designates a Bitwise AND comparison. Since the grouptype attribute value could contain multiple bit values scope (local,global,univ) and security setting (enabled/disabled) you must perform a comparison to see if the value 2147483648 (security enabled) is part of the attribute value. More info: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/s earch_filter_syntax.asp You can also use this comparison to identify the group type from a single group object. Here's a routine I generally use. Just pass in the value from the grouptype attribute. * * Function GroupType(intGroupType) ' --- ' Routine Name: GroupType ' Purpose: Provide a friendly description of the type of group ' ' intGroupType (integer) - an integer retieved from the groupType attribute of an AD group object ' ' Returns (string) - Description of the group type ' --- Dim group Dim objMembers Dim members Dim strGroupType Const ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP = 1 Const ADS_GROUP_TYPE_GLOBAL_GROUP = 2 Const ADS_GROUP_TYPE_LOCAL_GROUP = 4 Const ADS_GROUP_TYPE_SECURITY_ENABLED = -2147483648 Const ADS_GROUP_TYPE_UNIVERSAL_GROUP = 8 strGroupType = "" If intGroupType And ADS_GROUP_TYPE_UNIVERSAL_GROUP Then strGroupType = "Universal" Else If intGroupType And ADS_GROUP_TYPE_GLOBAL_GROUP Then strGroupType = "Global" Else If intGroupType And ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP Then strGroupType = "DomainLocal" Else If intGroupType And ADS_GROUP_TYPE_LOCAL_GROUP Then strGroupType = "Local" End If End If End If End If If intGroupType And ADS_GROUP_TYPE_SECURITY_ENABLED Then strGroupType = strGroupType & "-Security Enabled" Else strGroupType = strGroupType & "-Security Disabled" End If GroupType = strGroupType End Function * * John Roberts JLR Technology Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 11:18 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Quick CSVDE question Great thanks. Where did you find this 1.2.840... number? Is there a reference table somewhere? Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Roberts Sent: Tuesday, February 28, 2006 10:11 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Quick CSVDE question If you need to distinguish between true distribution groups and mail-enabled security groups you would be better querying the group type attribute. If you add this to the query you will only get back security-enabled groups, regardless of mail status. (groupType:1.2.840.113556.1.4.803:=2147483648) John Roberts JLR Technology Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 10:49 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Quick CSVDE question Nevermind, I added "mail" to the filters and then parsed the data accordingly. Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lucas, Bryan Sent: Tuesday, February 28, 2006 9:28 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Quick CSVDE question I'm trying to export a list of security groups, but not distribution groups. The string below gets all groups, is there a way I can exclude DLs? csvde -f c:\groups.csv -s ad7 -d "dc=tcu,dc=edu" -p subtree -r(&(objectCategory=Group)(objectClass=group))" -l displayname,samaccountname,description" Thanks, Bryan Lucas Server Administrator Texas Christian University (817) 257-6971 List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ
