Solved

Need command line function to compare two user AD entries

Posted on 2011-03-22
14
765 Views
Last Modified: 2012-05-11
I would like to do a comparison of two user entries in Active Directory.

Preferably via a commandline function
0
Comment
Question by:cschene
  • 7
  • 4
  • 2
  • +1
14 Comments
 
LVL 41

Accepted Solution

by:
Amit earned 167 total points
Comment Utility
0
 

Assisted Solution

by:cschene
cschene earned 0 total points
Comment Utility
Those are power Shell scripts?
0
 
LVL 41

Expert Comment

by:Amit
Comment Utility
yes it is PS
0
 

Author Comment

by:cschene
Comment Utility
Ok, I am complete power chart novice....have never written one single line. so i have REALLY basic questions:

1) What servers or OS can I run  power Shell on? ( I am using windows 2003, XP). I do not have the ability to update software on these systems as they are customer production systems
2) Can I run it from DOS command line? If not, how do I run it?
0
 

Author Comment

by:cschene
Comment Utility
Oh...One other thing, I want to compare WHAT is different between the users....not just a "yes or no" they are different
0
 

Author Comment

by:cschene
Comment Utility
"Ok, I am complete power chart novice"

of course I mean

"Ok, I am a complete power shell novice"
0
 
LVL 57

Expert Comment

by:Mike Kline
Comment Utility
You would need to install powershell on the 2003 or XP machine.  Do you have any 7/2008 boxes around?

Thanks

Mike
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:cschene
Comment Utility
I would need to install it on my XP machine which I cannot via VPN to my customer.

Where do I get PS?
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 167 total points
Comment Utility
You can download it here

http://www.microsoft.com/windowsserver2003/technologies/management/powershell/download.mspx

A lot of examples you will see here and on other forums for AD also utilize the Quest AD cmdlets http://www.quest.com/powershell/activeroles-server.aspx

Thanks

Mike
0
 
LVL 41

Expert Comment

by:Amit
Comment Utility
0
 
LVL 5

Assisted Solution

by:xylog
xylog earned 166 total points
Comment Utility
Dsquery user and dsget user can be used to do many ldap functions quickly and easily from the command line. For example to retrieve group memberships based on a users sam account name:

dsquery user -samid username|dsget user -memberof
0
 

Author Comment

by:cschene
Comment Utility
increase points to 500
0
 
LVL 41

Expert Comment

by:Amit
Comment Utility
Thanks, Check Hyena tool also
http://www.systemtools.com/hyena/index.html

It can give you lot of information and you can do the custom query.  Paid one but free for trial.
0
 

Author Closing Comment

by:cschene
Comment Utility
All three suggestions were helpful. thanks.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Synchronize a new Active Directory domain with an existing Office 365 tenant
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now