list user create date
dsquery * domainroot –d [domain name] -limit 0 -filter "(&(objectCategory=Person)(objectClass=User))" -attr sAMAccountName name whencreated userAccountControl > c:\adUserCreateDate.txt
list user set no expire
dsquery * domainroot –d [domain name] -limit 0 -filter "(&(objectCategory=Person)(objectClass=User)(userAccountControl:1.2.840.113556.1.4.803:=65536))" -attr sAMAccountName name > c:\adUserPasswordNoExpire.txt
list user set disabled
dsquery * domainroot –d [domain name] -limit 0 -filter "(&(objectCategory=Person)(objectClass=User)(userAccountControl:1.2.840.113556.1.4.803:=2))" -attr sAMAccountName name > c:\adUserSetDiabled.txt

No comments:
Post a Comment