<div>
Thanks Rob, &nbsp;I didn't get notified there was a comment last week. &nbsp;I'll check it out and let you know.
</div>

<div>
Rob, 
I can't thank you enough! &nbsp;You just saved me a ton of work. &nbsp;Fort Hood DOIM thanks you! 
 
Tim
</div>

<div>
That link was exactly what I needed!
</div>

<div>
Just incase someone had to do what I needed to do, here is the script that I used. &nbsp;It will pull both certs, compare, and write all the results to excel. &nbsp; 
 
 

<pre><code class="code-100 nolinks" id="code-123010">On Error Resume Next
Const ADS_SCOPE_SUBTREE = 2
 
Set objConnection = CreateObject(&quot;ADODB.Connection&quot;)
Set objCommand = CreateObject(&quot;ADODB.Command&quot;)
objConnection.Provider = &quot;ADsDSOObject&quot;
objConnection.Open &quot;Active Directory Provider&quot;
Set objCommand.ActiveConnection = objConnection
objCommand.Properties(&quot;Page Size&quot;) = 1000
objCommand.Properties(&quot;Searchscope&quot;) = ADS_SCOPE_SUBTREE 
 
objCommand.CommandText = _
 &quot;SELECT mail,department,sAMAccountName,distinguishedName FROM 'LDAP://OU=Users,DC=your,DC=stuff'&quot; &amp; _
 &quot; WHERE objectCategory='User' AND department = 'Marketing'&quot;
Set objRecordSet = objCommand.Execute
 
Set objExcel = CreateObject(&quot;Excel.Application&quot;)
objExcel.Visible = True
objExcel.Workbooks.Add
intRow = 2
 
objExcel.Cells(1, 1).Value = &quot;User Name&quot;
objExcel.Cells(1, 2).Value = &quot;Certificate Email&quot; 
objExcel.Cells(1, 3).Value = &quot;AD Email&quot; 
objExcel.Cells(1, 4).Value = &quot;Result&quot; 
 
objRecordSet.MoveFirst
Do Until objRecordSet.EOF
 
SAM = objRecordSet.Fields(&quot;sAMAccountName&quot;).Value
MAIL = objRecordSet.Fields(&quot;mail&quot;).Value
MAILU = UCase(MAIL)
strDN = objRecordSet.Fields(&quot;distinguishedName&quot;).Value
 
objExcel.Cells(intRow, 1).Value = SAM
objExcel.Cells(intRow, 3).Value = MAILU
 
Const E_ADS_PROPERTY_NOT_FOUND = &amp;h8000500D
Const ForWriting = 2
Const WshRunning = 0
 
Set objUser = GetObject _
 (&quot;GC://&quot; &amp; strDN &amp; &quot;&quot;)
objUser.GetInfoEx Array(&quot;userCertificate&quot;), 0
arrUserCertificates = objUser.GetEx(&quot;userCertificate&quot;)
 
If Err.Number = E_ADS_PROPERTY_NOT_FOUND Then
	objExcel.Cells(intRow, 4).Value = &quot;No Certificates Published&quot;
Else
 Set objShell = CreateObject(&quot;WScript.Shell&quot;)
 Set objFSO = CreateObject(&quot;Scripting.FileSystemObject&quot;)
 strPath = &quot;.&quot; 
 intFileCounter = 0
 
 For Each arrUserCertificate in arrUserCertificates
 strFileName = &quot;file&quot; &amp; intFileCounter
 strFullName = objFSO.BuildPath(strPath, strFileName)
 Set objFile = objFSO.OpenTextFile(strFullName, ForWriting, True)
 
 For i = 1 To LenB(arrUserCertificate)
 ReDim Preserve arrUserCertificatesChar(i - 1)
 arrUserCertificatesChar(i-1) = Hex(AscB(MidB(arrUserCertificate, i, 3)))
 Next
 
 intCounter=0
 For Each HexVal in arrUserCertificatesChar
 intCounter=intCounter + 1
 If Len(HexVal) = 1 Then 
 objFile.Write(0 &amp; HexVal &amp; &quot; &quot;)
 Else
 objFile.Write(HexVal &amp; &quot; &quot;)
 End If
 Next
 objFile.Close
 Set objFile = Nothing
 
 Set objExecCmd1 = objShell.Exec _
 (&quot;certutil -decodeHex &quot; &amp; strFileName &amp; &quot; &quot; &amp; strFileName &amp; &quot;.cer&quot;)
 Do While objExecCmd1.Status = WshRunning
 WScript.Sleep 100
 Loop
 Set objExecCmd1 = Nothing
 
 Set objExecCmd2 = objShell.Exec(&quot;certutil &quot; &amp; strFileName &amp; &quot;.cer&quot;)
 Set objStdOut = objExecCmd2.StdOut
 Set objExecCmd2 = Nothing
 
 While Not objStdOut.AtEndOfStream
 strLine = objStdOut.ReadLine
 If InStr(strLine, &quot;Name=&quot;) Then
				strLine = Replace(strLine,&quot;RFC822 Name=&quot;,&quot;&quot;)
 strEmail = Trim(strLine)
 strEmailU = UCase(strEmail)
 objExcel.Cells(intRow, 2).Value = strEmail
				If strEmailU = MAILU Then
				objExcel.Cells(intRow, 4).Value = &quot;We have a match!&quot;
				Else
				objExcel.Cells(intRow, 4).Value = &quot;WRONG!!!&quot;
				End If
 End If
 Wend
 
 objFSO.DeleteFile(strFullName)
 objFSO.DeleteFile(strPath &amp; &quot;\&quot; &amp; strFileName &amp; &quot;.cer&quot;) 
 
 intFileCounter = intFileCounter + 1
 Next
End If
intRow = intRow + 1
objRecordSet.MoveNext
loop 
objExcel.Range(&quot;A1:D1&quot;).Select
objExcel.Selection.Interior.ColorIndex = 19
objExcel.Selection.Font.ColorIndex = 11
objExcel.Selection.Font.Bold = True
objExcel.Cells.EntireColumn.AutoFit
 
msgbox &quot;Done&quot;
</code></pre>
</div>

<div>
Hi Sunnyd24, glad you got it working. Thanks for posting the code, and thanks for the grade. 
 
Regards, 
 
Rob.
</div>

<div>
I found this and it works perfectly, except, I really need to use java in an html page. &nbsp;Any conversion tips? &nbsp;I am stuck on pulling the hex array and decoding it to string. &nbsp;Thanks!
</div>

<div>
<div class="content wysiwyg-content">
I need to be able to pull out the email address from a published certificate and use it to compare with something else, but can't figure out how to get at it. &nbsp;I'm assuming it can be read since everything else in AD is accessible using VBS, but combing through ADSI edit didn't yield any solutions. &nbsp;Anyone done this before? &nbsp;Google is letting me down.
</div>
</div>

I need to be able to pull out the email address from a published certificate and use it to compare with something else, but can't figure out how to get at it.  I'm assuming it can be read since everything else in AD is accessible using VBS, but combing through ADSI edit didn't yield any solutions.  Anyone done this before?  Google is letting me down.

Can you pull the email address from a published user certificate in Active Directory by script?

VBScript (Visual Basic Scripting Edition) is an interpreted scripting language developed by Microsoft that is modeled on Visual Basic, but with some important differences. VBScript is commonly used for automating administrative and other tasks in Windows operating systems (by means of the Windows Script Host) and for server-side scripting in ASP web applications. It is also used for client-side scripting in Internet Explorer, specifically in intranet web applications.

VB Script

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).