[SoCoSA/discuss] AD query question

[Sean]

My tools are quite limited. I only have access to the default tools
provided by MS on a standard install. We run Windows 2003 servers with
the exception of one Windows 2000 domain server, which is why we are
still on a 2000 native AD schema.


Sean


On Wed, Sep 9, 2009 at 8:14 PM, Eric T. Landerville
<eric at landerville.com> wrote:
> Since it's been a long time since I've even seen a native 2000 domain
> what tools do you have available?
>
> Eric
>
> Sean wrote:
>> I've been requested to come up with a list of "active users" on a
>> Windows domain, but unfortunately it's a Windows 2000 native domain.
>> From what I've read I can't use the "dsquery user -inactive (number of
>> weeks)" command line query because that will only work for 2003
>> domains. I did find a way to accomplish something similar, but is
>> there a better way to get this data without converting our domain
>> functional level to 2003?
>>
>> I ran a custom search query using ActiveDirectory Users and Computers,
>> selecting custom search and trying to get users that need to change
>> their passwords at the next login ( i.e.
>> "(&(&(objectcategory=user)(pwdLastSet<=128856000000000000)))") as of
>> about 4 month ago. This might be enough for our purposes.
>>
>>
>> Thank you!
>>
>> Sean
>>
>> _______________________________________________
>> SoCoSA discuss mailing list
>> discuss at socosa.org
>> Your address: eric at landerville.com
>> http://socosa.org/mailman/listinfo/discuss
>> http://socosa.org/mailman/options/discuss/eric%40landerville.com
>>
>
>
> _______________________________________________
> SoCoSA discuss mailing list
> discuss at socosa.org
> Your address: seanvanco at gmail.com
> http://socosa.org/mailman/listinfo/discuss
> http://socosa.org/mailman/options/discuss/seanvanco%40gmail.com
>