[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

how to List of user in the AD, which Group they belong, their full namein 2000

Posted on 2008-06-09
3
Medium Priority
?
724 Views
Last Modified: 2008-06-11
Sorry I know its basic but I do not know Im in Cisco  . No idea about MS.MS Admin R an away now I am in big trouble cause we planning to upgrade to 2003. I hope that I will get all the support from here to save myself


I would like to do the following thing on windows 2000 Domain controller

1.      List of user in the AD, which Group they belong, their full name
2.      Second I would like to get the list of user who is inactive for 90 days
3.      Third list of user whos password has not been changed for 90 days
4.      List of computer account who did not showed up for authentication for 90 days or unused for 90 days
0
Comment
Question by:faizuuu
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
3 Comments
 
LVL 3

Accepted Solution

by:
gs121 earned 750 total points
ID: 21744745
Avaiable form admin pack
dsquery


List all groups a user (e.g. username) is a memeber of (use -expand to get nested groups. or without for nonnested groups)
dsquery user -samid tsmith | dsget user -memberof -expand


Search for inactive Computer account  (not working until ad is Windows 2003) Inactive is in weeks
dsquery computer -inactive 8 -limit 0

Search for a Computer that has not updated ist password in 60 days (should update every 30 days)
dsquery computer -stalepwd 60 -limit 0

In weeks
dsquery user  -inactive 4
in weeks
dsquery computer  -inactive 4

If you want more utilities try www.joeware.com   adfind, oldcmp  admod etc.


0
 
LVL 3

Expert Comment

by:gs121
ID: 21744758
Note: -limit, means all results, without it it defaults to 100 results
0
 
LVL 3

Expert Comment

by:gs121
ID: 21744795
You asked for a lot of them.  You can use saved queries in ADUC for the 30,60, 90 logon time for users.

in days
dsquery user -stalepwd 60 -limit 0

List all users who ahve not logged in in 18 weeks (need 2003 function level)
dsquery user -name * -inactive 18

Note -limit 0   for all results, otherwise just 100 results.

Make sure you AD enviroment is 2003 functionality or inactiveand last logon will not work.

0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question