LDAP to query Active Directory

An enquiry if a normal user account without any administrator access to the domain can query the domain and get all user attributes to a excel file. In summary, can a normal user account without admin access do this job?
Shankar3003Asked:
Who is Participating?
 
Premkumar YogeswaranConnect With a Mentor Analyst II - System AdministratorCommented:
To Query AD, Admin rights not required. Adminpak installed system is the requirement and the user account should be the domain user.

Bydefault AD give read access to domain users.

I searched for the document if any, but sorry i unable to pull from internet.

Regards,
Prem
0
 
Premkumar YogeswaranAnalyst II - System AdministratorCommented:
Yep, if they have adminpak installed in there system, it can be done.

If not, not possible.

AD have read access for all users.

ADMINPAK is mandatory to do so...!

Regards,
Prem
0
 
Shankar3003Author Commented:
Hi, thank you, do you happen to have any documentaion from microsoft which supports this?
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Premkumar YogeswaranAnalyst II - System AdministratorCommented:
Hi,

This dont need any documentation.

Its a smandatory thing, for any query if end user or IT person to have in AD, they need ADMINPAK to be installed.

Note: i am telling this for client OS. this will not applicatble for server OS. since it will be inbuilt in that.

Regards,
Prem
0
 
Shankar3003Author Commented:
Well i need to verify this in documentation as a vendor requires to query the domain using LDAP. We cannot give them more than administrator rights for the user account. Using a non administrative domain user account can this account query the AD and get user attributes? If it cannot, than require to support this with documentation, thank you.
0
 
Shankar3003Author Commented:
how about to query AD and gather the query into a excel file. Does this require admin access?
0
 
dave_itCommented:
Alternately, you could use Joeware's ADFind tool - ADFind.  This may give you a little more flexibility to accomplish what you are trying to do.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.