lf Of Sitton Glen
ESent: Wednesday, February 08, 2006 1:06 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] DSQUERY filter
for space character only
Thanks Joe. I did use that MSDN article before I posted, but it didn't list the escape
sequence for the space character. Knowing what I know
m: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sitton Glen
ESent: Wednesday, February 08, 2006 1:06 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] DSQUERY filter
for space character only
Thanks Joe. I did use that MSDN article before I posted, but it didn't list the e
oeSent: Tuesday, February 07, 2006 5:39 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] DSQUERY filter
for space character only
The tricky piece here is the space, the displayname=\20
mechanism would work as well as the very cute little query Dean posted of
displayname<
bad query before
then.
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David
AragonSent: Tuesday, February 07, 2006 2:19 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] DSQ
Have you tried:
(&(objectCategory=Person)(objClass=User)(displayName=\\
))
David AragonYour ability to perceive a solution is
limitedonly by your understanding of the problem
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sitton Glen
ESent: Tuesday, Febru
Thank you Gil, Dean, Hunter. That works
perfectly.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Coleman,
HunterSent: Tuesday, February 07, 2006 12:48 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] DSQUERY filter
for space character only
(&objectCate
Cool, buckle up, lots of very smart folks
here (not me K) you will see lots of chances to learn.
Dan
From: Olivarez, Sergio
J Mr ANOSC/FCBS [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 07, 2006
11:39 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] DSQUERY
(&objectCategory=user)(displayName=\20))
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sitton Glen
ESent: Tuesday, February 07, 2006 10:17 AMTo:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] DSQUERY filter for
space character only
I need to run an obscure DSQUERY with
IIRC,
the query processor barks at the use of values comprised entirely of
spaces. As such, use the following -
dsquery * dc=mset,dc=local -scope subtree -filter
"(&(objectcategory=user)(displayname=\20))
... or
for a more creative approach -
dsquery * dc=mset,dc=local -scope subtree
: [ActiveDir] DSQUERY
filter for space character only
You follow this list?
From: Olivarez, Sergio
J Mr ANOSC/FCBS [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 07, 2006
11:23 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] DSQUERY
filter for space character only
@mail.activedir.orgSubject: RE: [ActiveDir]
DSQUERY filter for space character only
Have you tried *
*
Thanks...
... ... ...
Sergio J.
Olivarez
From: Sitton
Glen E [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 07, 2006 10:17
AMTo:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] DSQUERY filter
Title: RE: [ActiveDir] DSQUERY filter for space character only
Some automated process has thrown a single space character into the
displayName and I'm hoping to construct a simple DSQUERY to find them
and then fix them.
Yes, the workaround you describe is pretty much what I am doi
You follow this list?
From: Olivarez, Sergio
J Mr ANOSC/FCBS [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 07, 2006
11:23 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] DSQUERY
filter for space character only
Have you tried * *
Thanks
Have you tried * *
Thanks...
... ... ...
Sergio J.
Olivarez
From: Sitton Glen E
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 07, 2006
10:17 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] DSQUERY
filter for space character only
I need to run an obs
What's the query for? Can you not query on all objects then export to excel or
word and look for the spaces? Crude but it should work.
Mark
-Original Message-
From: Sitton Glen E <[EMAIL PROTECTED]>
Date: Tue, 7 Feb 2006 11:16:53
To:ActiveDir@mail.activedir.org
Subject: [ActiveDir] DSQU
I would check the metadata on the group object and see if
it is being constantly updated. This could signify that you have a
restricted group configured and FRS has screwed up and the GPO isn't replicated
to all DCs and the DCs are "duking it out" and changing the membership back and
forth.
: RE: [ActiveDir] DSQUERY
& DSGET provide inconsistent results - help
it's a global group, which can't have
accounts from other domains as a member. I very much doubt you have an
issue with DSQUERY - more likely some DC that's out of sync => which DC is
DSQUERY connecti
me
one?
I'd say it's certainly time to connect to each DC and check
the values directly to compare...
/Guido
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Peter
JohnsonSent: Montag, 11. Juli 2005 21:41To:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveD
Hmmm...every 15minutes or so
Are you sure it's DSGET that's reporting things incorrectly
or could it be that this is the true state?
Al
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan
HolmeSent: Monday, July 11, 2005 3:15 PMTo:
ActiveDir@mail.activedir.orgSubjec
Is this a single domain forest?? If not Does the Domain Admins Group contain
users from other domains in the forest. I;m wondering if it might be a
cross-domain name resolution issue? MAybe intermittent?
From: [EMAIL PROTECTED] on behalf of Dan Holme
Sent: Mon 2
Could it be that one of your DCs is out of sync with the rest?
Would this happen if you used the '-s' option to explicitly connect to the same
server each time? (not that *that* would solve a DC out of sync, but at
least you'd understand why)
-DaveC
Reuters IS&T Service
Delivery
From:
ECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Depp, Dennis M.
Sent: Tuesday, August 03, 2004 5:48 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] dsquery
You need OLDCMP which can be found at
http://www.joeware.net/win32/index.html near the bottom of the page.
The output of OLDCMP can either be a csv,
, August 03, 2004 12:07 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] dsquery
Ok, good to know,
Is there an alternative way to identify User objects that have not
logged on in given amount of time 'Stale'? I'd like to be able to first
query this or log it to a file then option
orrow you were worried about Yesterday? -anon
From: Cody FlemingSent: Mon 8/2/2004 9:07 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] dsquery
Ok, good to know,
Is there an alternative way to identify User objects that have not logged on in given amount of time 'Stale'? I'd like
riginal Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Free, Bob
Sent: Monday, August 02, 2004 3:37 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] dsquery
>Does 'dsquery -inactive' work against a Windows 2000 domain with SP4?
Nope, it needs uses an attribute ca
>Does 'dsquery -inactive' work against a Windows 2000 domain with SP4?
Nope, it needs uses an attribute called lastLogonTimestamp that is not
available in 2000.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Cody Fleming
Sent: Monday, August 02,
Title: Message
The response is correct (staggering really). You
cannot perform this query against a 2000 AD since it does not replicate _any
form_ of a last logon timestamp which is the basis for this feature ... 2003
does (to a point).
Dean
-- Dean Wells MSEtechnology ( Tel: +1 (954)
501
Title: Message
I believe that the specified query is
dependent on a user attribute not replicated under Windows 2000.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cody Fleming
Sent: Monday, August 02, 2004
12:18 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] dsq
PROTECTED]
Sent: Monday, February 02, 2004
7:13 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] dsquery
computer -inactive vs -stalepwd
Hi Rich,
From my
knowledge the password change request is initiated by the COMPUTER itself to a
domain controller. Your output lets us believe that
:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] dsquery computer
-inactive vs -stalepwd
Jorge –
The thing I’m not
understanding is why there are so many more computers with stale passwords, half
of them over 6 months old, yet I only get a handful when running inactive for
the same time period
for months without changing their password?
Thanks –
Rich
From: Jorge de Almeida
Pinto [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 28, 2004
9:33 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] dsquery
computer -inactive vs -stalepwd
-inactive NumberOfWeeks
Return Receipt
Your RE: [ActiveDir] dsquery computer -inactive vs -stalepwd
document
-inactive NumberOfWeeks (number of weeks that a PC has not logged on to the
domain)
Searches for all computers that have been inactive (stale) for the specified
number of weeks.
-stalepwd NumberOfDays (number of days that a PC uses the
same password)
Searches for all computers that have not
PROTECTED]
Sent: Tuesday, January 27, 2004 9:52 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] dsquery computer -inactive vs -stalepwd
My guess is that the "-inactive" switch queries the chosen DC for the
lastLogon value.
Have you tried running it against different DCs to see if you
My guess is that the "-inactive" switch queries the chosen DC for the lastLogon value.
Have you tried running it against different DCs to see if you get different values?
Tony
-- Original Message --
Wrom: JJPHSCRTNHGSWZIDREXCAXZOWCONEUQZAAFXISHJE
Reply-To:
going insane for a bit there. ;-)
Damian Scoles
Senior Technical Analyst
MCSE, CCNP, CNA, A+
-Original Message-
From: Flight, L. [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 25, 2003 5:38 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role
Wh
Actually make one change: netdom query /server:dcname fsmo
-Original Message-
From: Flight, L. [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 25, 2003 6:38 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role
When we were moving roles around
When we were moving roles around recently for Windows 2003
upgrade we scripted:
netdom query /server: fmso
to check consistency. As some roles are stored as attributes
on the schema and configuration containers changes (KB 223787)
may take longer to replicate than those stored as attributes on
:14 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role
If I recall all it does is check CN=Infrastructure,DC=Domain,DC=COM
fsmoRoleOwner attribute.
Grab adfind and do a
Adfind -h DCServerName -b CN=Infrastructure,DC=domain,DC=com -s base
fsmoroleowner
For
]
Sent: Tuesday, September 23, 2003 8:14 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role
If I recall all it does is check CN=Infrastructure,DC=Domain,DC=COM
fsmoRoleOwner attribute.
Grab adfind and do a
Adfind -h DCServerName -b CN=Infrastructure,DC=domain
PM
To: '[EMAIL PROTECTED] '
Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role
dsquery queries AD directly. You might use the -s switch (using IP addresses
in stead of FQDN's to rule out DNS issues) that can be used with DSquery to
run the query once against every server. Thi
: Tuesday, September 23, 2003 7:14 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role
Yeah, there's got to something with the way dsquery is (not?) working. You
might try ADSIEdit or LDP as well. I don't think NTDSUtil will indicate if
t
ll for
a 2 DC forest :)
Gil Kirkpatrick
CTO, NetPro
-Original Message-
From: John Reijnders [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 23, 2003 2:32 PM
To: '[EMAIL PROTECTED] '
Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role
dsquery queries AD directl
e you tried using NTDSUtil? I've never seen this tool giving the wrong
answer.
Cheers!
John Reijnders.
-Original Message-
From: Scoles, Damian
To: [EMAIL PROTECTED]
Sent: 23-9-2003 21:41
Subject: RE: [ActiveDir] DSQuery shows wrong DC as holding role
As for the GC/Infrastructure thi
CTED] Sent: Tuesday, September 23,
2003 12:59 PMTo:
'[EMAIL PROTECTED]'Subject: RE: [ActiveDir] DSQuery
shows wrong DC as holding role
The DCs definitely need to agree on FSMO ownership. Forcing a
replication might help, but its hard to imagine some changes replicating
EMAIL PROTECTED]'Subject: RE:
[ActiveDir] DSQuery shows wrong DC as holding role
The
DCs definitely need to agree on FSMO ownership. Forcing a replication might
help, but its hard to imagine some changes replicating and others not. Usally
its an all-or-nothing affair between
Title: Message
The
DCs definitely need to agree on FSMO ownership. Forcing a replication might
help, but its hard to imagine some changes replicating and others not. Usally
its an all-or-nothing affair between replication partners.
The
infrastructure master should not be on a GC, although
47 matches
Mail list logo
