[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 530
  • Last Modified:

Extract from AD

How can I extract from AD the name, title and department of all our users into a spreadsheet?
Also, I am not a programmer, so I have no knowledge of scripting.
Thanks!
0
tolinrome
Asked:
tolinrome
  • 2
  • 2
  • 2
  • +2
3 Solutions
 
TonyRebaCommented:
You can Use a software such as LDAPsoft


http://www.ldapsoft.com/tutorials.html
0
 
TonyRebaCommented:
0
 
KenMcFCommented:
I would use powershell and the quest ad cmdlets.


get-qaduser -sizelimit 0 | Select Name, Title, department | export-csv c:\temp\users.csv -notype
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 
Mike KlineCommented:
If you are not comfortable with the command line there is a free tool called adinfo that you may like

http://www.cjwdev.co.uk/Software/ADReportingTool/Info.html

Having said that you should start to get familiar with the command line and poweshell is a good start so at least try what Ken gave you above.

Thanks


Mike
0
 
tolinromeAuthor Commented:
Ken,
I typed in the command you wrote exactly and it errored.
Z:\>get-qaduser -sizelimit 0 | Select Name, Title, department | export-csv c:\temp\users.csv -notype

"The term 'get-qaduser' is not recognized as the name of a cmdlet....
I also tried "get-aduser"
0
 
Mike KlineCommented:
You have to download and install the Quest cmdlets (free)

http://www.quest.com/powershell/activeroles-server.aspx

Thanks

Mike
0
 
tolinromeAuthor Commented:
great tool, I wonder why MS just cant make it like that?
now the next question will be how do I edit all those users at once? Need to update the pulled info.
0
 
KenMcFCommented:
If you are talking about the Quest tools you can try something like this below, and MS does have this. They have the AD cmdlets with 2008R2 and Win7.


$Users = import-csv c:\temp\user.csv
$Users | Foreach {
Get-qaduser $_.Name | Set-qaduser -title $_.title -department $_. Department
}

But it would be better to export the samaccountname as weel do this would be better

get-qaduser -sizelimit 0 | Select samaccountname, Name, Title, department | export-csv c:\temp\users.csv -notype

$Users = import-csv c:\temp\user.csv
$Users | Foreach {
Get-qaduser $_.samaccountName | Set-qaduser -title $_.title -department $_. Department
}
0
 
SandeshdubeyCommented:
You can use third party software True Last Logon 2.9.You can export the file in excel for report creation.You can use the trial version this will achieve what you are looking for.

True Last Logon displays the following Active Directory information:
--Users real name and logon name
--Detailed account status
--Last Logon Date & Time
--Last Logon Timestamp (Replicated value)
--Account Expiry Date & Time
--Enabled or Disabled Account
--Locked Accounts
--Password Expires
--Password Last Set Date & Time
--Logon Count
--Bad Password Count
--Expiry Date
--You can also query for any other attribute (Example: Description, telephone Number, custom attibutes etc)

Refer the below link for trial version:
http://www.dovestones.com/products/True_Last_Logon.asp
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

  • 2
  • 2
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now