UserAccountControl Attribute of a Computer object in AD

Hi Rob,
Thanks so much I will test this.
Rob, the following snippet is a modification of one of your great scripts.
I believe this will return all attributes of the computer object in AD, but I cant see in the following, the attribute AccountDisabled. I must be doing something wrong.

(M) cn
(M) instanceType
(M) nTSecurityDescriptor
(M) objectCategory
(M) objectClass
(M) objectSid
(M) sAMAccountName
(O) accountExpires
(O) accountNameHistory
(O) aCSPolicyName
(O) adminCount
(O) adminDescription
(O) adminDisplayName
(O) allowedAttributes
(O) allowedAttributesEffective
(O) allowedChildClasses
(O) allowedChildClassesEffective
(O) altSecurityIdentities
(O) assistant
(O) attributeCertificateAttribute
(O) audio
(O) badPasswordTime
(O) badPwdCount
(O) bridgeheadServerListBL
(O) businessCategory
(O) c
(O) canonicalName
(O) carLicense
(O) catalogs
(O) co
(O) codePage
(O) comment
(O) company
(O) controlAccessRights
(O) countryCode
(O) createTimeStamp
(O) dBCSPwd
(O) defaultClassStore
(O) defaultLocalPolicyObject
(O) department
(O) departmentNumber
(O) description
(O) desktopProfile
(O) destinationIndicator
(O) directReports
(O) displayName
(O) displayNamePrintable
(O) distinguishedName
(O) division
(O) dNSHostName
(O) dSASignature
(O) dSCorePropagationData
(O) dynamicLDAPServer
(O) employeeID
(O) employeeNumber
(O) employeeType
(O) extensionName
(O) facsimileTelephoneNumber
(O) flags
(O) fromEntry
(O) frsComputerReferenceBL
(O) fRSMemberReferenceBL
(O) fSMORoleOwner
(O) garbageCollPeriod
(O) generationQualifier
(O) givenName
(O) groupMembershipSAM
(O) groupPriority
(O) groupsToIgnore
(O) homeDirectory
(O) homeDrive
(O) homePhone
(O) homePostalAddress
(O) houseIdentifier
(O) info
(O) initials
(O) internationalISDNNumber
(O) ipPhone
(O) isCriticalSystemObject
(O) isDeleted
(O) isPrivilegeHolder
(O) jpegPhoto
(O) l
(O) labeledURI
(O) lastKnownParent
(O) lastLogoff
(O) lastLogon
(O) lastLogonTimestamp
(O) legacyExchangeDN
(O) lmPwdHistory
(O) localeID
(O) localPolicyFlags
(O) location
(O) lockoutTime
(O) logonCount
(O) logonHours
(O) logonWorkstation
(O) machineRole
(O) mail
(O) managedBy
(O) managedObjects
(O) manager
(O) masteredBy
(O) maxStorage
(O) memberOf
(O) mhsORAddress
(O) middleName
(O) mobile
(O) modifyTimeStamp
(O) mS-DS-ConsistencyChildCount
(O) mS-DS-ConsistencyGuid
(O) mS-DS-CreatorSID
(O) msCOM-PartitionSetLink
(O) msCOM-UserLink
(O) msCOM-UserPartitionSetLink
(O) msDRM-IdentityCertificate
(O) msDS-AdditionalDnsHostName
(O) msDS-AdditionalSamAccountName
(O) msDS-AllowedToDelegateTo
(O) msDS-Approx-Immed-Subordinates
(O) msDS-Cached-Membership
(O) msDS-Cached-Membership-Time-Stamp
(O) msDS-KeyVersionNumber
(O) msDs-masteredBy
(O) msDS-MembersForAzRoleBL
(O) msDS-NCReplCursors
(O) msDS-NCReplInboundNeighbors
(O) msDS-NCReplOutboundNeighbors
(O) msDS-NonMembersBL
(O) msDS-ObjectReferenceBL
(O) msDS-OperationsForAzRoleBL
(O) msDS-OperationsForAzTaskBL
(O) msDS-ReplAttributeMetaData
(O) msDS-ReplValueMetaData
(O) msDS-Site-Affinity
(O) msDS-TasksForAzRoleBL
(O) msDS-TasksForAzTaskBL
(O) msDS-User-Account-Control-Computed
(O) msExchAssistantName
(O) msExchHouseIdentifier
(O) msExchLabeledURI
(O) msIIS-FTPDir
(O) msIIS-FTPRoot
(O) mSMQDigests
(O) mSMQDigestsMig
(O) mSMQSignCertificates
(O) mSMQSignCertificatesMig
(O) msNPAllowDialin
(O) msNPCallingStationID
(O) msNPSavedCallingStationID
(O) msRADIUSCallbackNumber
(O) msRADIUSFramedIPAddress
(O) msRADIUSFramedRoute
(O) msRADIUSServiceType
(O) msRASSavedCallbackNumber
(O) msRASSavedFramedIPAddress
(O) msRASSavedFramedRoute
(O) name
(O) netbootGUID
(O) netbootInitialization
(O) netbootMachineFilePath
(O) netbootMirrorDataFile
(O) netbootSCPBL
(O) netbootSIFFile
(O) networkAddress
(O) nonSecurityMemberBL
(O) ntPwdHistory
(O) o
(O) objectGUID
(O) objectVersion
(O) operatingSystem
(O) operatingSystemHotfix
(O) operatingSystemServicePack
(O) operatingSystemVersion
(O) operatorCount
(O) otherFacsimileTelephoneNumber
(O) otherHomePhone
(O) otherIpPhone
(O) otherLoginWorkstations
(O) otherMailbox
(O) otherMobile
(O) otherPager
(O) otherTelephone
(O) otherWellKnownObjects
(O) ou
(O) ownerBL
(O) pager
(O) partialAttributeDeletionList
(O) partialAttributeSet
(O) personalTitle
(O) photo
(O) physicalDeliveryOfficeName
(O) physicalLocationObject
(O) policyReplicationFlags
(O) possibleInferiors
(O) postalAddress
(O) postalCode
(O) postOfficeBox
(O) preferredDeliveryMethod
(O) preferredLanguage
(O) preferredOU
(O) primaryGroupID
(O) primaryInternationalISDNNumber
(O) primaryTelexNumber
(O) profilePath
(O) proxiedObjectName
(O) proxyAddresses
(O) pwdLastSet
(O) queryPolicyBL
(O) registeredAddress
(O) replPropertyMetaData
(O) replUpToDateVector
(O) repsFrom
(O) repsTo
(O) revision
(O) rid
(O) rIDSetReferences
(O) roomNumber
(O) sAMAccountType
(O) scriptPath
(O) sDRightsEffective
(O) secretary
(O) securityIdentifier
(O) seeAlso
(O) serialNumber
(O) serverReferenceBL
(O) servicePrincipalName
(O) showInAddressBook
(O) showInAdvancedViewOnly
(O) sIDHistory
(O) siteGUID
(O) siteObjectBL
(O) sn
(O) st
(O) street
(O) streetAddress
(O) structuralObjectClass
(O) subRefs
(O) subSchemaSubEntry
(O) supplementalCredentials
(O) systemFlags
(O) telephoneNumber
(O) teletexTerminalIdentifier
(O) telexNumber
(O) terminalServer
(O) textEncodedORAddress
(O) thumbnailLogo
(O) thumbnailPhoto
(O) title
(O) tokenGroups
(O) tokenGroupsGlobalAndUniversal
(O) tokenGroupsNoGCAcceptable
(O) uid
(O) unicodePwd
(O) url
(O) userAccountControl
(O) userCert
(O) userCertificate
(O) userParameters
(O) userPassword
(O) userPKCS12
(O) userPrincipalName
(O) userSharedFolder
(O) userSharedFolderOther
(O) userSMIMECertificate
(O) userWorkstations
(O) uSNChanged
(O) uSNCreated
(O) uSNDSALastObjRemoved
(O) USNIntersite
(O) uSNLastObjRem
(O) uSNSource
(O) volumeCount
(O) wbemPath
(O) wellKnownObjects
(O) whenChanged
(O) whenCreated
(O) wWWHomePage
(O) x121Address
(O) x500uniqueIdentifier

' ListObjectProperties.vbs
' VBScript program to list all properties (attributes) for a given Active Directory object. All properties in the Schema are listed, whether assigned a
' value or not. The values of the properties are not output. The program requires the full AdsPath to an Active Directory object, using either
' the WinNT provider or the LDAP provider. Each provider exposes different properties.
' ----------------------------------------------------------------------
' This script is designed to be run at a command prompt, using the Cscript host. The output can be redirected to a text file.
' For example:
' cscript //nologo ListObjectProperties.vbs "ADSPATH" > Properties.txt
' ADSPATH can be similar to:
'     "WinNT://MyDomain/TestUser,user"
' or
'     "LDAP://cn=TestUser,ou=Sales,dc=MyDomain,dc=com"
 
Option Explicit
 
Dim objADObject, strProperty, objClass, strAdsPath
 
' Check for required argument.
If (Wscript.Arguments.Count = 0) Then
    Wscript.Echo "Error, required argument missing."
    Wscript.Echo "ListObjectProperties.vbs"
    Wscript.Echo "Program to list AD object properties"
    Wscript.Echo "Syntax:"
    Wscript.Echo "cscript ListObjectProperties.vbs ADSPATH > output.txt"
    Wscript.Echo "where ADSPATH is the full AdsPath of an AD object."
    Wscript.Echo "For example, ADSPATH could be:"
    Wscript.Echo "  WinNT://MyDomain/TestUser,user"
    Wscript.Echo "or"
    Wscript.Echo "  LDAP://cn=TestUser,ou=Sales,dc=MyDomain,dc=com"
'cscript //nologo ListObjectProperties.vbs "LDAP://CN=shar1,OU=MEL,OU=Merged,OU=AllSites,DC=au,DC=kworld,DC=kpmg,DC=com" > TestUser.txt
 
 
    Wscript.Quit(1)
End If
 
strAdsPath = Wscript.Arguments(0)
 
' Bind to Active Directory object.
On Error Resume Next
Set objADObject = GetObject(strAdsPath)
If (Err.Number <> 0) Then
    On Error GoTo 0
    Wscript.Echo "Object not found in Active Directory"
    Wscript.Echo strAdsPath
    Wscript.Quit(1)
End If
On Error GoTo 0
 
Set objClass = GetObject(objADObject.Schema)
 
' Enumerate mandatory properties of the object.
For Each strProperty In objClass.MandatoryProperties
    Wscript.Echo "(M) " & strProperty
Next
 
' Enumerate optional properties of the object.
For Each strProperty In objClass.OptionalProperties
    Wscript.Echo "(O) " & strProperty
Next
 
' Clean up.
Set objADObject = Nothing
Set objClass = Nothing
                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:

Rob,
Also, we have several domains here.
Currently in your script, you have:

Set objRootDSE = GetObject("LDAP://RootDSE")
strDNSDomain = objRootDSE.Get("defaultNamingContext")

If I wanted to change the domains, would I need to change the above?

Yeah, just change
strDNSDomain = objRootDSE.Get("defaultNamingContext")

to
strDNSDomain = "DC=DomainA,DC=Domain,DC=Com"

or whatever domain you want.

That's odd, I can't find AccountDisabled in Softerra LDAP Browser either, but it works for me!

Regards,

Rob.

Is it possible that using different providers like LDAP or WinNT expose different properties Rob?

Yes, they definaly will, but what you and I have looked at is LDAP properties, and my code binds to the LDAP object......strange....

Rob.

Youre a champion and wealth of information mate. Your script works perfectly too.

Thanks for the grade.

Using this code it still doesn't show accountDisabled....I'm not sure where that comes from...

Rob.

If LCase(Right(Wscript.FullName, 11)) = "wscript.exe" Then
    strPath = Wscript.ScriptFullName
    strCommand = "%comspec% /k cscript  """ & strPath & """"
    Set objShell = CreateObject("Wscript.Shell")
    objShell.Run(strCommand), 1, True
    Wscript.Quit
End If
 
' See: http://www.microsoft.com/technet/scriptcenter/resources/qanda/jun05/hey0628.mspx
 
ListProperties "computer"
'ListProperties "user"
 
Sub ListProperties(strClass)
	Set objSchema = GetObject("LDAP://schema/" & strClass)
	Wscript.Echo "Computer Mandatory attributes"
	For Each strAttribute In objSchema.MandatoryProperties
	    Wscript.Echo strAttribute
	Next
	Wscript.Echo
	Wscript.Echo "Computer Optional attributes"
	For Each strAttribute In objSchema.OptionalProperties
	    Wscript.Echo strAttribute
	Next
End Sub

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25: