Using LDAP syntax to find disabled user account

There is also a built in query within Saved Queries.  Just select Define Query and on the User TAB just check Disabled accounts.  Or you can use the custom query above.

smart@ss for making it look so easy.  : )

Awesome job!  Thanks for the help.  

I was trying to combine two searches at once and I guess that wasn't such a good idea.  I will resort to doing one at a time.  I like your LDAP entry.

Heh Heh,

Glad to help.

Take care!

-Aaron

What two queries are you trying to join?

Good question!

Query 1) The pre-Windows 2000 logon name <this is for the user accounts we had before merging> and 2) trying to find out which accounts were disabled.  I figured I would try to get the list of user accounts and the ones that were disabled would be included.  I'm sure I dorked something up in the process.

If you know how, I will create a new question and have you answer.

The Pre-Windows 2000 logon name attribute is "sAMAccountName".
All accounts will have one, even non migrated accounts.

Thus to find disabled accounts with a prefix of "ADC_" the query would be:

(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=2)(sAMAccountName=ADC_*)

Don't worry about a new questions.  

woops, that was missing a trailing bracket:

Try this:

(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=2)(sAMAccountName=ADC_*))

You're awesome!  Wish I would have posted that sooner and saved the frustration.  You sure about the points for a new question?  As I get more involved with the AD management (everyone that was doing it is gone, so I have a little learning curve), I am sure I will be asking more questions.  

I will try out the query you posted.

Once again.  Glad to help.  

I never mind posting follow ups to a question.  
Don't worry about a new question, I don't need the points.
(:

I tried out the query and it produced "no results".  It didn't even list the people with the pre-Windows 2000 login.  I was hoping it would list all the users in the OU and include the accounts that were disabled but nothing showed up.

This will list all disabled users that the Pre Windows 2000 logon name starts with ADC_

&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=2)(sAMAccountName=ADC_*))

This will list all enabled users that the Pre Windows 2000 logon name starts with ADC_

&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2)(sAMAccountName=ADC_*))

What do you want to list?  Just all users within an OU?