Solved

Extract from AD

Posted on 2011-09-21
9
514 Views
Last Modified: 2012-05-12
How can I extract from AD the name, title and department of all our users into a spreadsheet?
Also, I am not a programmer, so I have no knowledge of scripting.
Thanks!
0
Comment
Question by:tolinrome
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +2
9 Comments
 
LVL 9

Expert Comment

by:TonyReba
ID: 36575803
You can Use a software such as LDAPsoft


http://www.ldapsoft.com/tutorials.html
0
 
LVL 9

Expert Comment

by:TonyReba
ID: 36575810
0
 
LVL 27

Accepted Solution

by:
KenMcF earned 333 total points
ID: 36575842
I would use powershell and the quest ad cmdlets.


get-qaduser -sizelimit 0 | Select Name, Title, department | export-csv c:\temp\users.csv -notype
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 
LVL 57

Expert Comment

by:Mike Kline
ID: 36576078
If you are not comfortable with the command line there is a free tool called adinfo that you may like

http://www.cjwdev.co.uk/Software/ADReportingTool/Info.html

Having said that you should start to get familiar with the command line and poweshell is a good start so at least try what Ken gave you above.

Thanks


Mike
0
 
LVL 7

Author Comment

by:tolinrome
ID: 36576380
Ken,
I typed in the command you wrote exactly and it errored.
Z:\>get-qaduser -sizelimit 0 | Select Name, Title, department | export-csv c:\temp\users.csv -notype

"The term 'get-qaduser' is not recognized as the name of a cmdlet....
I also tried "get-aduser"
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 167 total points
ID: 36576401
You have to download and install the Quest cmdlets (free)

http://www.quest.com/powershell/activeroles-server.aspx

Thanks

Mike
0
 
LVL 7

Author Comment

by:tolinrome
ID: 36576775
great tool, I wonder why MS just cant make it like that?
now the next question will be how do I edit all those users at once? Need to update the pulled info.
0
 
LVL 27

Assisted Solution

by:KenMcF
KenMcF earned 333 total points
ID: 36576865
If you are talking about the Quest tools you can try something like this below, and MS does have this. They have the AD cmdlets with 2008R2 and Win7.


$Users = import-csv c:\temp\user.csv
$Users | Foreach {
Get-qaduser $_.Name | Set-qaduser -title $_.title -department $_. Department
}

But it would be better to export the samaccountname as weel do this would be better

get-qaduser -sizelimit 0 | Select samaccountname, Name, Title, department | export-csv c:\temp\users.csv -notype

$Users = import-csv c:\temp\user.csv
$Users | Foreach {
Get-qaduser $_.samaccountName | Set-qaduser -title $_.title -department $_. Department
}
0
 
LVL 24

Expert Comment

by:Sandeshdubey
ID: 36578226
You can use third party software True Last Logon 2.9.You can export the file in excel for report creation.You can use the trial version this will achieve what you are looking for.

True Last Logon displays the following Active Directory information:
--Users real name and logon name
--Detailed account status
--Last Logon Date & Time
--Last Logon Timestamp (Replicated value)
--Account Expiry Date & Time
--Enabled or Disabled Account
--Locked Accounts
--Password Expires
--Password Last Set Date & Time
--Logon Count
--Bad Password Count
--Expiry Date
--You can also query for any other attribute (Example: Description, telephone Number, custom attibutes etc)

Refer the below link for trial version:
http://www.dovestones.com/products/True_Last_Logon.asp
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question