Solved

Quest cmdlets get-qaduser profilepath strangeness

Posted on 2010-08-31
7
1,427 Views
Last Modified: 2012-06-22
I am having a weird problem with something that I thought would be quite easy. I am looking to get all of my users who have a specific profile path specifiec in there terminal services tab in AD.  See a sample use below.

Now i thought this would be a simple as doing
get-qaduser -profilepath \\server\share

However this does not work. I have tried many combinations of using quotes " hyphens ' etc with no luck. The even stranger thing is if i do a global wildcard search * it only returns 3 results. I know alot more people have this set.

Any ideas?
1.jpg
0
Comment
Question by:Joseph Daly
7 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 400 total points
Comment Utility
It is a limit of how that value is stored.  See this question that I helped with (along with Chris Dent)
http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_26278805.html
 
Thanks
Mike
0
 
LVL 35

Author Comment

by:Joseph Daly
Comment Utility
Ahhh crappy. I knew about the ADmodify being able to change the values. I was actually planning on using that but was hoping I would be able to come up with an ldap query to filter down the people I am changing.

We have users who have our old TS servers set for these as well as users who have our new ones in different offices. Kind of makes a blankey change not possible, If possible I would have liked to only select and modify them. Im surprised LDAP/powershell doesnt have a method for handling these.
0
 
LVL 57

Expert Comment

by:Mike Kline
Comment Utility
give Chris (or others) a chance; maybe there is a way to filter in powershell that I'm not aware of.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 35

Author Comment

by:Joseph Daly
Comment Utility
Hopefully someone has some ideas otherwise the points are yours. It just stinks because we have two regional offices with their own TS settings and I just thought of this now but the two companies we migrated into our AD also have their own TS settings.

I would love to be able to do a find where servername is a specificname and only replace that. Make things a whole lot easier and less chance of causing issues elsewhere.
0
 
LVL 13

Expert Comment

by:soostibi
Comment Utility
Unfortunately these parameters are in a binary blob in the 'userparameters' LDAP attribute of the user. Quest quys did not implement a searcher parameter for Get-QADUser for these, inspite of the fact, that you can see these TS parameters as 'normal' parameters in the output of Get-QADUser.

As far as I know you can only search on these attributes on the client side, that means you have to grab all users into PowerShell and PowerShell will select the relevant users for you. (see attached code) That is not very efficient and uses a lot of resources if you have several users.

If these were 'normal' attributes, you could use this form:

Get-QADUser -SearchAttributes @{tsprofilepath = '\\server\share'}

But in this case it does not work.
Get-QADUser | ?{$_.tsprofilepath -eq "\\server\share"}

Open in new window

0
 
LVL 70

Assisted Solution

by:Chris Dent
Chris Dent earned 100 total points
Comment Utility

It's quite a problem. You can use LDAP filters to search for binary data, however, it doesn't let you use wildcards so it's really not very useful unfortunately.

Chris
0
 
LVL 35

Author Closing Comment

by:Joseph Daly
Comment Utility
Thanks guys
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Synchronize a new Active Directory domain with an existing Office 365 tenant
This article will help you understand what HashTables are and how to use them in PowerShell.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now