Accessing whencreated attribute of AD via LDAP - permissions issue

Posted on 2011-05-12
Last Modified: 2012-05-11
I am using an ASP (vb) script to access AD via LDAP to obtain attributes for users to put on a web page.  I want to use the whenCreated and whenChanged attributes to identify new and changed users.

The script I have works perfectly when 'Everyone' is part of the Pre-Windows 2000 Compatible Access built-in group (W2003 server) but not when only 'Domain Users'  is in that group.

Now I'm a  domain user and I can get the script to show my login name etc. but I can't get it to show the whenCreated and whenChanged attributes.

My systems manager and I are reluctant to re-open the security hole associated with Everyon in the Pre-Windows 2000 Compatible Access group - is there a way to fix this?
Question by:OwenParry
    LVL 24

    Accepted Solution

    Have you tried using the "Authenticated Users" failing that create an account to run the script with that has more permissions maybe..rather than using an open account like "Everyone"

    Author Closing Comment

    Worked a treat - many thanks indeed

    Featured Post

    Do email signature updates give you a headache?

    Do you feel like all of your time is spent managing email signatures? Too busy to visit every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

    Join & Write a Comment

    Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found listed in my profile here: http:…
    Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
    This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now