faizuuu
asked on
how to List of user in the AD, which Group they belong, their full namein 2000
Sorry I know its basic but I do not know Im in Cisco . No idea about MS.MS Admin R an away now I am in big trouble cause we planning to upgrade to 2003. I hope that I will get all the support from here to save myself
I would like to do the following thing on windows 2000 Domain controller
1. List of user in the AD, which Group they belong, their full name
2. Second I would like to get the list of user who is inactive for 90 days
3. Third list of user whos password has not been changed for 90 days
4. List of computer account who did not showed up for authentication for 90 days or unused for 90 days
I would like to do the following thing on windows 2000 Domain controller
1. List of user in the AD, which Group they belong, their full name
2. Second I would like to get the list of user who is inactive for 90 days
3. Third list of user whos password has not been changed for 90 days
4. List of computer account who did not showed up for authentication for 90 days or unused for 90 days
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
gs121
Note: -limit, means all results, without it it defaults to 100 results
You asked for a lot of them. You can use saved queries in ADUC for the 30,60, 90 logon time for users.
in days
dsquery user -stalepwd 60 -limit 0
List all users who ahve not logged in in 18 weeks (need 2003 function level)
dsquery user -name * -inactive 18
Note -limit 0 for all results, otherwise just 100 results.
Make sure you AD enviroment is 2003 functionality or inactiveand last logon will not work.
in days
dsquery user -stalepwd 60 -limit 0
List all users who ahve not logged in in 18 weeks (need 2003 function level)
dsquery user -name * -inactive 18
Note -limit 0 for all results, otherwise just 100 results.
Make sure you AD enviroment is 2003 functionality or inactiveand last logon will not work.