Sunday, December 20, 2009

AD CMD info query

list user create date
dsquery * domainroot –d [domain name] -limit 0 -filter "(&(objectCategory=Person)(objectClass=User))" -attr sAMAccountName name whencreated userAccountControl > c:\adUserCreateDate.txt

list user set no expire
dsquery * domainroot –d [domain name] -limit 0 -filter "(&(objectCategory=Person)(objectClass=User)(userAccountControl:1.2.840.113556.1.4.803:=65536))" -attr sAMAccountName name > c:\adUserPasswordNoExpire.txt

list user set disabled
dsquery * domainroot –d [domain name] -limit 0 -filter "(&(objectCategory=Person)(objectClass=User)(userAccountControl:1.2.840.113556.1.4.803:=2))" -attr sAMAccountName name > c:\adUserSetDiabled.txt

No comments:

Post a Comment