RE: Adfind Active Email CSV Dump.
Adfind –csv –nodn –b “dc=domain,dc=org” –f “((objectCategory=person)(mail=*)(!userAccountControl:1.2.840.113556.1.4.803:=2))” name mail displayName You won’t be able to copy-n-paste that, but if you type it in, it gives you what you want. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Harry Singh [mailto:hbo...@gmail.com] Sent: Monday, January 09, 2012 1:44 PM To: NT System Admin Issues Subject: Adfind Active Email CSV Dump. All -- I could use a hand with generating the output i need using adfind. I'm trying to dump all active e-mail addresses excluding those belonging to Disabled Users to a csv file for HR. I'm using the following syntax. C:\Tools\AdFindadfind -csv -nodn -b dc=domain,dc=org -f ((objectCategory= person)(objectClass=user)) name mail displayName mailusersjan62012.csv I suppose i could remove the -nodn and do find/replace within excel, but am curious if there was a way to exclude disabled users. I do keep all my disabled users in a single OU, so i'm assuming there could be a filter switch i could use but am unfamiliar with that syntax as well. Also, the above dumps name, mail and displayname, but is there to way to only output if the the mail field is not null ? Since my objective is to get all email addresses, I don't want those users who don't have anything populated in the mail field to appear. Again, if i have to manipulate excel, that could work but it would sweet if i could accomplish everything with one command. Regards, Harry. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: Adfind Active Email CSV Dump.
Perfect! Worked like a charm! Thanks Michael. On Mon, Jan 9, 2012 at 2:53 PM, Michael B. Smith mich...@smithcons.comwrote: Adfind –csv –nodn –b “dc=domain,dc=org” –f “((objectCategory=person)(mail=*)(!userAccountControl:1.2.840.113556.1.4.803:=2))” name mail displayName You won’t be able to copy-n-paste that, but if you type it in, it gives you what you want. ** ** Regards, ** ** Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com ** ** *From:* Harry Singh [mailto:hbo...@gmail.com] *Sent:* Monday, January 09, 2012 1:44 PM *To:* NT System Admin Issues *Subject:* Adfind Active Email CSV Dump. ** ** All -- ** ** I could use a hand with generating the output i need using adfind. I'm trying to dump all active e-mail addresses excluding those belonging to Disabled Users to a csv file for HR. I'm using the following syntax. ** ** C:\Tools\AdFindadfind -csv -nodn -b dc=domain,dc=org -f ((objectCategory= person)(objectClass=user)) name mail displayName mailusersjan62012.csv* *** ** ** I suppose i could remove the -nodn and do find/replace within excel, but am curious if there was a way to exclude disabled users. I do keep all my disabled users in a single OU, so i'm assuming there could be a filter switch i could use but am unfamiliar with that syntax as well. ** ** Also, the above dumps name, mail and displayname, but is there to way to only output if the the mail field is not null ? Since my objective is to get all email addresses, I don't want those users who don't have anything populated in the mail field to appear. Again, if i have to manipulate excel, that could work but it would sweet if i could accomplish everything with one command. ** ** Regards, ** ** Harry. ** ** ** ** ** ** ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Adfind Active Email CSV Dump.
You can do it a bit easier with the –bit switch: Adfind –csv –nodn –b “dc=domain,dc=org” –f “((objectCategory=person)(mail=*)(!userAccountControl:AND:=2))” –bit name mail displayName Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, January 09, 2012 1:53 PM To: NT System Admin Issues Subject: RE: Adfind Active Email CSV Dump. Adfind –csv –nodn –b “dc=domain,dc=org” –f “((objectCategory=person)(mail=*)(!userAccountControl:1.2.840.113556.1.4.803:=2))” name mail displayName You won’t be able to copy-n-paste that, but if you type it in, it gives you what you want. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Harry Singh [mailto:hbo...@gmail.com]mailto:[mailto:hbo...@gmail.com] Sent: Monday, January 09, 2012 1:44 PM To: NT System Admin Issues Subject: Adfind Active Email CSV Dump. All -- I could use a hand with generating the output i need using adfind. I'm trying to dump all active e-mail addresses excluding those belonging to Disabled Users to a csv file for HR. I'm using the following syntax. C:\Tools\AdFindadfind -csv -nodn -b dc=domain,dc=org -f ((objectCategory= person)(objectClass=user)) name mail displayName mailusersjan62012.csv I suppose i could remove the -nodn and do find/replace within excel, but am curious if there was a way to exclude disabled users. I do keep all my disabled users in a single OU, so i'm assuming there could be a filter switch i could use but am unfamiliar with that syntax as well. Also, the above dumps name, mail and displayname, but is there to way to only output if the the mail field is not null ? Since my objective is to get all email addresses, I don't want those users who don't have anything populated in the mail field to appear. Again, if i have to manipulate excel, that could work but it would sweet if i could accomplish everything with one command. Regards, Harry. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: Adfind Active Email CSV Dump.
Yes, BUT – that makes the filter/query non-portable. ☺ I just copy-n-pasted the query out of a PowerShell window I already had open. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Monday, January 09, 2012 4:44 PM To: NT System Admin Issues Subject: RE: Adfind Active Email CSV Dump. You can do it a bit easier with the –bit switch: Adfind –csv –nodn –b “dc=domain,dc=org” –f “((objectCategory=person)(mail=*)(!userAccountControl:AND:=2))” –bit name mail displayName Thanks, Brian Desmond br...@briandesmond.commailto:br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Monday, January 09, 2012 1:53 PM To: NT System Admin Issues Subject: RE: Adfind Active Email CSV Dump. Adfind –csv –nodn –b “dc=domain,dc=org” –f “((objectCategory=person)(mail=*)(!userAccountControl:1.2.840.113556.1.4.803:=2))” name mail displayName You won’t be able to copy-n-paste that, but if you type it in, it gives you what you want. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Harry Singh [mailto:hbo...@gmail.com]mailto:[mailto:hbo...@gmail.com] Sent: Monday, January 09, 2012 1:44 PM To: NT System Admin Issues Subject: Adfind Active Email CSV Dump. All -- I could use a hand with generating the output i need using adfind. I'm trying to dump all active e-mail addresses excluding those belonging to Disabled Users to a csv file for HR. I'm using the following syntax. C:\Tools\AdFindadfind -csv -nodn -b dc=domain,dc=org -f ((objectCategory= person)(objectClass=user)) name mail displayName mailusersjan62012.csv I suppose i could remove the -nodn and do find/replace within excel, but am curious if there was a way to exclude disabled users. I do keep all my disabled users in a single OU, so i'm assuming there could be a filter switch i could use but am unfamiliar with that syntax as well. Also, the above dumps name, mail and displayname, but is there to way to only output if the the mail field is not null ? Since my objective is to get all email addresses, I don't want those users who don't have anything populated in the mail field to appear. Again, if i have to manipulate excel, that could work but it would sweet if i could accomplish everything with one command. Regards, Harry. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: ADFIND
Late to the party, but I would use sed for this, no question. --Steve On Fri, Oct 28, 2011 at 2:08 PM, Kurt Buff kurt.b...@gmail.com wrote: Get cut.exe from either https://gnuwin32.st.net or http://unxutils.sf.net. Then set up the command line something like this: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t | cut -d, -f 1,2 C:\automate\ftp\nweaoutput.txt Explanation: the 'cut' command parses input on stdin, and in this case sets the delimiter to the comma character, and the takes the first and second fields. This does leave the cruft 'CN=' before the full name, but strips away everything after the name. You can further massage the output to get rid of the 'CN=' with 'sed' from the same place you get 'cut' - I'll leave that as an exercise for you... Kurt On Fri, Oct 28, 2011 at 09:54, David Lum david@nwea.org wrote: Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email
Re: ADFIND
adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the “manager” field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager’s CN? Probably some piping needed in the command line right? Just can’t get my head around it this morning… David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: ADFIND
AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the “manager” field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager’s CN? Probably some piping needed in the command line right? Just can’t get my head around it this morning… David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: ADFIND
Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the “manager” field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager’s CN? Probably some piping needed in the command line right? Just can’t get my head around it this morning… David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: ADFIND
Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the “manager” field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager’s CN? Probably some piping needed in the command line right? Just can’t get my head around it this morning… David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: ADFIND
Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: ADFIND
Email joe. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 12:55 PM To: NT System Admin Issues Subject: RE: ADFIND Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: ADFIND
You have manager included in the list of attributes returned and say the batch file works as advertised. Then you say that if you add manager it all goes to pot. What does all goes to pot mean? -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 10:55 AM To: NT System Admin Issues Subject: RE: ADFIND Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: ADFIND
Did, awaiting reply. :-) -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, October 28, 2011 10:00 AM To: NT System Admin Issues Subject: RE: ADFIND Email joe. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 12:55 PM To: NT System Admin Issues Subject: RE: ADFIND Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read
RE: ADFIND
Sorry, manager isn't in the command line that works, for the first time ever [1] I mis-posted. [1] ever defined as the last 5 minutes -Original Message- From: Coleman, Hunter [mailto:hcole...@mt.gov] Sent: Friday, October 28, 2011 10:11 AM To: NT System Admin Issues Subject: RE: ADFIND You have manager included in the list of attributes returned and say the batch file works as advertised. Then you say that if you add manager it all goes to pot. What does all goes to pot mean? -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 10:55 AM To: NT System Admin Issues Subject: RE: ADFIND Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally
RE: ADFIND
The batch file you posted (including manager) runs fine for me (tweaking the base and email filter for my environment). Are you not getting any output, or not getting what you expect/want? -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 11:28 AM To: NT System Admin Issues Subject: RE: ADFIND Sorry, manager isn't in the command line that works, for the first time ever [1] I mis-posted. [1] ever defined as the last 5 minutes -Original Message- From: Coleman, Hunter [mailto:hcole...@mt.gov] Sent: Friday, October 28, 2011 10:11 AM To: NT System Admin Issues Subject: RE: ADFIND You have manager included in the list of attributes returned and say the batch file works as advertised. Then you say that if you add manager it all goes to pot. What does all goes to pot mean? -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 10:55 AM To: NT System Admin Issues Subject: RE: ADFIND Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body
RE: ADFIND
For the manager the output includes CN=Billybob,OU=Main,CN=Users, DC=nwea,DC=org when all I want is billybob Dave -Original Message- From: Coleman, Hunter [mailto:hcole...@mt.gov] Sent: Friday, October 28, 2011 10:39 AM To: NT System Admin Issues Subject: RE: ADFIND The batch file you posted (including manager) runs fine for me (tweaking the base and email filter for my environment). Are you not getting any output, or not getting what you expect/want? -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 11:28 AM To: NT System Admin Issues Subject: RE: ADFIND Sorry, manager isn't in the command line that works, for the first time ever [1] I mis-posted. [1] ever defined as the last 5 minutes -Original Message- From: Coleman, Hunter [mailto:hcole...@mt.gov] Sent: Friday, October 28, 2011 10:11 AM To: NT System Admin Issues Subject: RE: ADFIND You have manager included in the list of attributes returned and say the batch file works as advertised. Then you say that if you add manager it all goes to pot. What does all goes to pot mean? -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 10:55 AM To: NT System Admin Issues Subject: RE: ADFIND Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint
RE: ADFIND
If all your managers have similar DNs, you could use somethink like below to get down to CN=billybob -replacedn ,OU=Main,CN=Users, DC=nwea,DC=org: Note that you need the trailing colon. Replacedn takes the arguments yyy:xxx where yyy is replaced with xxx so leaving xxx blank effectively deletes part of it. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 12:50 PM To: NT System Admin Issues Subject: RE: ADFIND For the manager the output includes CN=Billybob,OU=Main,CN=Users, DC=nwea,DC=org when all I want is billybob Dave -Original Message- From: Coleman, Hunter [mailto:hcole...@mt.gov] Sent: Friday, October 28, 2011 10:39 AM To: NT System Admin Issues Subject: RE: ADFIND The batch file you posted (including manager) runs fine for me (tweaking the base and email filter for my environment). Are you not getting any output, or not getting what you expect/want? -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 11:28 AM To: NT System Admin Issues Subject: RE: ADFIND Sorry, manager isn't in the command line that works, for the first time ever [1] I mis-posted. [1] ever defined as the last 5 minutes -Original Message- From: Coleman, Hunter [mailto:hcole...@mt.gov] Sent: Friday, October 28, 2011 10:11 AM To: NT System Admin Issues Subject: RE: ADFIND You have manager included in the list of attributes returned and say the batch file works as advertised. Then you say that if you add manager it all goes to pot. What does all goes to pot mean? -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 10:55 AM To: NT System Admin Issues Subject: RE: ADFIND Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt
Re: ADFIND
Get cut.exe from either https://gnuwin32.st.net or http://unxutils.sf.net. Then set up the command line something like this: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t | cut -d, -f 1,2 C:\automate\ftp\nweaoutput.txt Explanation: the 'cut' command parses input on stdin, and in this case sets the delimiter to the comma character, and the takes the first and second fields. This does leave the cruft 'CN=' before the full name, but strips away everything after the name. You can further massage the output to get rid of the 'CN=' with 'sed' from the same place you get 'cut' - I'll leave that as an exercise for you... Kurt On Fri, Oct 28, 2011 at 09:54, David Lum david@nwea.org wrote: Looking for 100% hands free export and FTP Here's the first batch file, works as advertised: c:\automate\adfind -b ou=main,cn=users,dc=nwea,dc=org -csv -f (objectcategory=user) (mail=*@nwea.org*) -csvnoq -nodn mail CN streetAddress postalCode title company department physicalDeliveryOfficeName telephoneNumber manager -csvdelim \t C:\automate\ftp\nweaoutput.txt If I add manager it all goes to pot. Dave -Original Message- From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Friday, October 28, 2011 9:05 AM To: NT System Admin Issues Subject: Re: ADFIND Yeah, -nodn is just to stop adfind from outputting the dn for each object found no matter what attributes you find. If you're doing a larger report and not including group memberships, just add -csv and redirect to file. Then open in excel and text to column twice, once for the file and once more for the manager column. -Anders Sent from my iPhone On 28 okt 2011, at 17:58, David Lum david@nwea.org wrote: Eh, answered my own Q. I already have -nodn in the command line...adding it again in front if manager predictably had no effect. -Original Message- From: David Lum [mailto:david@nwea.org] Sent: Friday, October 28, 2011 8:52 AM To: NT System Admin Issues Subject: RE: ADFIND AH! Do you use -nodn in front of *each* field that might contain all that stuff? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, October 28, 2011 8:38 AM To: NT System Admin Issues Subject: Re: ADFIND adfind -b dc=mycompany,dc=com -f samaccountname=kbuff -nodn manager On Fri, Oct 28, 2011 at 06:14, David Lum david@nwea.org wrote: ADFIND is outputting the complete details of the manager field (CN=BillyBob,CN=Users,DC=nwea,DC=org), anyone here how to to make it output just the manager's CN? Probably some piping needed in the command line right? Just can't get my head around it this morning... David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http
RE: ADFIND not finding by homeDirectory (sometimes)
See Special Characters http://msdn.microsoft.com/en-us/library/aa746475(v=vs.85).aspx That answers your specific question. A more complete handling of escape characters is here: http://www.rlmueller.net/CharactersEscaped.htm Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Thursday, July 14, 2011 10:30 AM To: NT System Admin Issues Subject: OT: ADFIND not finding by homeDirectory (sometimes) I am confused. I am trying to search AD by homeDirectory entries. and then returning user name, login, etc. And sometimes it seems to work, and sometimes not ... Let's pick a user as a test: Z:\adfind -f sAMAccountName=abneyw homeDirectory AdFind V01.42.00cpp Joe Richards (j...@joeware.net) April 2010 Using server: Directory: Windows Server 2008 R2 Base DN: DC=so-on-and-so-forth dn:CN=Wayneshia Abney,OU= homeDirectory: \\nt_san1\users\abneyw 1 Objects returned OK, so we know now what this user's home directory (i.e., profile) is. So now let's try and find that homeDirectory ... Z:\adfind -f homeDirectory=\\nt_san1\users\abneyw sAMAccountName AdFind V01.42.00cpp Joe Richards (j...@joeware.net) April 2010 Using server: Directory: Windows Server 2008 R2 Base DN: DC=so-on-and-so-forth 0 Objects returned So why is it failing, if we see from the first search of what the value of homeDirectory is? -- But sometimes the search by homeDirectory works: Z:\adfind -f sAMAccountName=LeoneM homeDirectory AdFind V01.42.00cpp Joe Richards (j...@joeware.net) April 2010 Using server: Directory: Windows Server 2008 R2 Base DN: DC=so-on-and-so-forth dn:CN=Michael Leone,OU=... homeDirectory: \\nt_san1\users\leonem 1 Objects returned Z:\adfind -f homeDirectory=\\nt_san1\users\leonem sAMAccountName AdFind V01.42.00cpp Joe Richards (j...@joeware.net) April 2010 Using server: Directory: Windows Server 2008 R2 Base DN: DC=so-on-and-so-forth dn:CN=Michael Leone,OU= sAMAccountName: leonem 1 Objects returned So what is the difference between the non-working first user and the working second user? The search parameters seem the same, but one matches, and the other doesn't. I'm sure it's just something simple I am not understanding, or constructing the search correctly or some such. Thanks ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: ADFIND not finding by homeDirectory (sometimes)
On 7/14/2011 10:34 AM, Michael B. Smith wrote: See Special Characters D'OH! Of course ... http://msdn.microsoft.com/en-us/library/aa746475(v=vs.85).aspx That answers your specific question. A more complete handling of escape characters is here: http://www.rlmueller.net/CharactersEscaped.htm OK, the escape characater is \, right? So I'd need to preface each \ in the filepath with a \? None of these seems to work .. Z:\adfind -f homeDirectory=nt_san1\\users\\abneyw sAMAccountName Z:\adfind -f homeDirectory=\\nt_san1\users\abneyw sAMAccountName So I guess a need another dose of the clue-bat ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: ADFIND not finding by homeDirectory (sometimes)
No. you replace each backslash by \5c. The '\' means that the next two characters are to be treated as hexadecimal characters. So... adfind -f homeDirectory=\5c\5cnt_san1\5cusers\5cabneyw sAMAccountName Granted, not very readable. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Thursday, July 14, 2011 11:00 AM To: NT System Admin Issues Subject: Re: ADFIND not finding by homeDirectory (sometimes) On 7/14/2011 10:34 AM, Michael B. Smith wrote: See Special Characters D'OH! Of course ... http://msdn.microsoft.com/en-us/library/aa746475(v=vs.85).aspx That answers your specific question. A more complete handling of escape characters is here: http://www.rlmueller.net/CharactersEscaped.htm OK, the escape characater is \, right? So I'd need to preface each \ in the filepath with a \? None of these seems to work .. Z:\adfind -f homeDirectory=nt_san1\\users\\abneyw sAMAccountName Z:\adfind -f homeDirectory=\\nt_san1\users\abneyw sAMAccountName So I guess a need another dose of the clue-bat ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: ADFIND not finding by homeDirectory (sometimes)
On 7/14/2011 11:00 AM, Michael B. Smith wrote: No. you replace each backslash by \5c. The '\' means that the next two characters are to be treated as hexadecimal characters. So... adfind -f homeDirectory=\5c\5cnt_san1\5cusers\5cabneyw sAMAccountName Granted, not very readable. Now, THAT is what I call UGLY. LOL But it works, and that's the important thing. OK, so I will go re-work my script to use \5c instead of \ in the filter parameter for ADFIND. Thanks! Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Thursday, July 14, 2011 11:00 AM To: NT System Admin Issues Subject: Re: ADFIND not finding by homeDirectory (sometimes) On 7/14/2011 10:34 AM, Michael B. Smith wrote: See Special Characters D'OH! Of course ... http://msdn.microsoft.com/en-us/library/aa746475(v=vs.85).aspx That answers your specific question. A more complete handling of escape characters is here: http://www.rlmueller.net/CharactersEscaped.htm OK, the escape characater is \, right? So I'd need to preface each \ in the filepath with a \? None of these seems to work .. Z:\adfind -f homeDirectory=nt_san1\\users\\abneyw sAMAccountName Z:\adfind -f homeDirectory=\\nt_san1\users\abneyw sAMAccountName So I guess a need another dose of the clue-bat ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: ADFIND not finding by homeDirectory (sometimes)
When I do this stuff in volume, I go ahead and escape the entire darn thing so I don't get confused. I wrote an article about it a long time ago: http://theessentialexchange.com/blogs/michael/archive/2007/11/13/working-with-binary-data-guids-in-vbscript.aspx The core content being: Function myADsEncodeBinaryData (arrByte) Dim str, s, i str = OctetToHexStr (arrByte) ''WScript.Echo Length = len(str) ' str ' s = For i = 1 to Len (str) Step 2 s = s \ Mid (str, i, 2) Next ''WScript.Echo s myADsEncodeBinaryData = s End Function Function OctetToHexStr (arrbytOctet) ' Function to convert OctetString (byte array) to Hex string. ' Code from Richard Mueller, a MS MVP in Scripting and ADSI Dim k OctetToHexStr = For k = 1 To Lenb (arrbytOctet) OctetToHexStr = OctetToHexStr _ Right(0 Hex(Ascb(Midb(arrbytOctet, k, 1))), 2) Next End Function Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Thursday, July 14, 2011 11:15 AM To: NT System Admin Issues Subject: Re: ADFIND not finding by homeDirectory (sometimes) On 7/14/2011 11:00 AM, Michael B. Smith wrote: No. you replace each backslash by \5c. The '\' means that the next two characters are to be treated as hexadecimal characters. So... adfind -f homeDirectory=\5c\5cnt_san1\5cusers\5cabneyw sAMAccountName Granted, not very readable. Now, THAT is what I call UGLY. LOL But it works, and that's the important thing. OK, so I will go re-work my script to use \5c instead of \ in the filter parameter for ADFIND. Thanks! Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Mike Leone [mailto:oozerd...@gmail.com] Sent: Thursday, July 14, 2011 11:00 AM To: NT System Admin Issues Subject: Re: ADFIND not finding by homeDirectory (sometimes) On 7/14/2011 10:34 AM, Michael B. Smith wrote: See Special Characters D'OH! Of course ... http://msdn.microsoft.com/en-us/library/aa746475(v=vs.85).aspx That answers your specific question. A more complete handling of escape characters is here: http://www.rlmueller.net/CharactersEscaped.htm OK, the escape characater is \, right? So I'd need to preface each \ in the filepath with a \? None of these seems to work .. Z:\adfind -f homeDirectory=nt_san1\\users\\abneyw sAMAccountName Z:\adfind -f homeDirectory=\\nt_san1\users\abneyw sAMAccountName So I guess a need another dose of the clue-bat ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: ADFIND/ADMOD question
Change -dsq to -adcsv and try it -Original Message- From: Michael Leone [mailto:oozerd...@gmail.com] Sent: Wednesday, November 18, 2009 11:21 AM To: NT System Admin Issues Subject: Fwd: ADFIND/ADMOD question I've got what is probably a simple question about using the joeware tools, adfind and admod. Unfortunately, the forums there are no more, so I thought I'd ask here. What I've got: a text file, listing user login IDs. What I need to do: change the home directory entry for each of those users. So, if I read a line of the file that says LeoneM, I need to find the entry for that user, and change the home folder from \\server1\users\LeoneM to \\server2\users\LeoneM. This isn't working (in a CMD script): SET _HomeFolder=\\server2\users\LeoneM adfind -b DC=my-dn -f sAMAccountName=%%C -dsq | admod homeDirectory::!_HomeFolder! I get: AdMod V01.10.00cpp Joe Richards (j...@joeware.net) February 2007 ERROR: Issue with attrib parameter - [admod] ERROR: Missing operation. Any ideas what I'm doing wrong here? I can find it OK, using the above snippet, but admod is complaining, and I'm unsure why. I even tried hard-coding the value, with no luck. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: ADFIND filter question
Well, that isn't going to do quite what you want.
For example, if you have a disabled user who also has password never
expires set, instead of userAccountControl being 514, it will be 66050.
I just happened to write a blog post about a related matter earlier today.
Wrappage:
http://theessentialexchange.com/blogs/michael/archive/2008/12/11/useraccoun
tcontrol-manipulation.aspx
You can take that same technique and do something like the below in
PowerShell. Redirect that into a file, sort it in Excel, and exclude the OU
you don't want. Save it and hand it to your dept mate.
Now, there is a way to do bit-wise searches in adfind. Now that I've told
you a different way to do it, you can do what you want in adfind this way:
Adfind -default -bit -f userAccountControl:AND:2 -excldn
ou=someou,dc=example,dc=com -list -csv -nocsvheader givenName sn
sAMAccountName
PowerShell
$ADS_UF_ACCOUNTDISABLE = 0x02
$objDomain = New-Object
System.DirectoryServices.DirectoryEntry()
$objSearcher = New-Object
System.DirectoryServices.DirectorySearcher
$objSearcher.SearchRoot = $objDomain
$objSearcher.Filter =
((objectCategory=person)(objectClass=user))
$results = $objSearcher.FindAll()
foreach ($result in $results)
{
$user = [adsi]$result.Path
$value = $user.userAccountControl.Item(0)
if (($value -band $ADS_UF_ACCOUNTDISABLE)
-ne 0)
{
(`t +
$user.givenName.item(0) + + $user.sn.item(0) + +
$user.sAMAccountName.item(0) + + $result.Path)
}
}
Regards,
Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
My blog: http://TheEssentialExchange.com/blogs/michael
I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php
From: michael.le...@pha.phila.gov [mailto:michael.le...@pha.phila.gov]
Sent: Thursday, December 11, 2008 3:39 PM
To: NT System Admin Issues
Subject: ADFIND filter question
Sorry for the slightly OT question, but joeware.net seems to be under
construction, so I can't get to the forums.
Here's what I wanna do ... list all disabled users, in all OUs, *except* one
particular OU. And contructing LDAP style filters is far from my strong
suit. And I will then feed this over to my dept mate, who will use the
extracted file as input to clean up our Notes server.
adfind -b DC=company,DC=com -list -csv -nocsvheader -f
(userAccountControl=514) givenName sn sAMAccountName
I know that a value of 514 means disabled; what I don't know is how to
construct a compund expression to say (userAccountControl=514 AND OU !=
name-of-OU).
Pointers? And how do you specify just the OU portion of the dn, anyway, for
use in filters or return values?
Thanks
--
Michael Leone
Network Administrator, ISM
Philadelphia Housing Authority
2500 Jackson St
Philadelphia, PA 19145
Tel: 215-684-4180
Cell: 215-252-0143
mailto:michael.le...@pha.phila.gov
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: ADFIND tool
Um - how is it supposed to know where every server is? DC information is stored in AD - that's easy to extract. Server information means querying the OS version of every computer object. Then locating the IP address of that server, say, in DNS (and then what happens if you have duplicate records for a particular server?), and then adding it to a diagram. That said, I think Visio 2002 Enterprise Architect edition did this. But you may be better off just writing some script that has the necessary logic for your environment to do this. Cheers Ken From: David Lum [mailto:[EMAIL PROTECTED] Sent: Wednesday, 26 March 2008 6:55 AM To: NT System Admin Issues Subject: RE: ADFIND tool Darn...will any tool auto-map out *all* the servers? From: Rankin, James R [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 25, 2008 11:10 AM To: NT System Admin Issues Subject: RE: ADFIND tool Remarkable what lawsuits can do these days :) From: mck1012 [mailto:[EMAIL PROTECTED] Sent: 25 March 2008 17:55 To: NT System Admin Issues Subject: Re: ADFIND tool ADFind does not create Visio diagrams. Are you suing ADTD? If so this will show you all of your DC's, GC's and Sites not all the workstations and servers. - Original Message From: David Lum [EMAIL PROTECTED] To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Tuesday, March 25, 2008 1:46:26 PM Subject: ADFIND tool I'm trying to use the ADFIND tool that draws Visio's of your Active Directory structure, it seems to give me most things, but when I select Draw Servers I'm expecting it to draw out every server it find in AD...shouldn't that be the case? ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: ADFIND tool
From: Ken Schaefer [mailto:[EMAIL PROTECTED] Subject: RE: ADFIND tool That said, I think Visio 2002 Enterprise Architect edition did this. When I was at TechEd 2006 I got to talk to the guy who was in charge of the old Visio product that did the complete network discovery. He said the coding to do the discovery was immensely complex, had be rewritten from scratch in C++ then the Vision group got merged into the Office group and all the source code was lost. No one had a backup of it so they started over. He said that is why the newer Visio versions are not as good as that one old version. He left the team and most of the original coders left the team after that fiasco. I still have my copy of the version of Visio cuz I am one of the, probably, few people who popped the $500 to add the enterprise features. Webster ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: ADFIND tool
It draws DC's, but that is it... It will map out Exchange for you though... On Tue, Mar 25, 2008 at 10:46 AM, David Lum [EMAIL PROTECTED] wrote: I'm trying to use the ADFIND tool that draws Visio's of your Active Directory structure, it seems to give me most things, but when I select Draw Servers I'm expecting it to draw out every server it find in AD…shouldn't that be the case? *Dave Lum* - Systems Engineer [EMAIL PROTECTED] - (971)-222-1025 ***When you step on the brakes your life is in your foot's hands *** ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: ADFIND tool
Remarkable what lawsuits can do these days…. :-) _ From: mck1012 [mailto:[EMAIL PROTECTED] Sent: 25 March 2008 17:55 To: NT System Admin Issues Subject: Re: ADFIND tool ADFind does not create Visio diagrams. Are you suing ADTD? If so this will show you all of your DC's, GC's and Sites not all the workstations and servers. - Original Message From: David Lum [EMAIL PROTECTED] To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Tuesday, March 25, 2008 1:46:26 PM Subject: ADFIND tool I’m trying to use the ADFIND tool that draws Visio’s of your Active Directory structure, it seems to give me most things, but when I select “Draw Servers” I’m expecting it to draw out every server it find in AD…shouldn’t that be the case? Dave Lum - Systems Engineer [EMAIL PROTECTED] - (971)-222-1025 When you step on the brakes your life is in your foot's hands _ Never miss a thing. Make Yahoo http://us.rd.yahoo.com/evt=51438/*http:/www.yahoo.com/r/hs your homepage. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
