might want to do.
Thanks again.
Dave
-Original Message-
From: Dean Wells [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 14, 2003 4:35 PM
To: AD mailing list (send)
Subject: RE: [ActiveDir] LDAP search filter for enabled accounts ?
Non-disabled user accounts (excluding system security
Non-disabled user accounts (excluding system security principals such as
trust accounts) -
(&(objectcategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!
userAccountControl=2080))
Disabled user accounts (excluding system security principals such as trust
accounts) -
(&(objectcatego
Jerry - Thanks ! Works like a charm.
Dave
-Original Message-
From: Jerry Welch [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 14, 2003 1:55 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] LDAP search filter for enabled accounts ?
Dave,
As I understand it, the following identifies a
Dave,
As I understand it, the following identifies a user account that is
disabled:
(userAccountControl:1.2.840.113556.1.4.803:=2) That is, the account is
disabled when this value is set to 2.
To exclude disabled accounts you would use the following string, plus any
other filters you want to apply
