AD description field question

Hi Experts,

How can I check if the Description field in my AD accounts [windows 2008 r2 forest/domain level] is linked to any other application such as Lync.

Going forward, I would like to use the Description field for special notes relating to the status of the user account

Please advise
Jerry SeinfieldAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
coraxalConnect With a Mentor Commented:
If your AD users have values in the Description that you can query and apply filters on, then yes you can. However, if the Description is empty then like ve3ofa mentioned you won't be able to.

For example, if you have users like this:

"DisplayName", "Description"
John Doe, SAP user
Jane Doe, Lynch user

And if you were looking for the users with the string "SAP" in the Description field, you'd do something like this:
# With the Win2k8 R2 Active-Directory module

Get-ADUser -Properties Description -Filter {Description -like "*SAP*"} -ResultSetSize $null | Select-Object Name,Description

# With Quest Active Roles cmdlets

Get-QADUser -LdapFilter "(Description=*SAP*)"-SizeLimit 0 | Select-Object Name,Description

Open in new window

0
 
coraxalCommented:
Well, not really sure what you mean by "linked to any other applications...", but I'll guess that you'd be looking for specific things in the description field such as "Lynch" or "Other app". If that's the case, you can check the Description field of AD accounts using PowerShell
# With the Win2k8 R2 Active-Directory module

Get-ADUser -Filter * -Properties Description -ResultSetSize $null | Select-Object Name,Description

# With Quest Active Roles cmdlets

Get-QADUser -SizeLimit 0 | Select-Object Name,Description

Open in new window

http://www.quest.com/powershell/activeroles-server.aspx
0
 
Jerry SeinfieldAuthor Commented:
Thanks Coraxal

Basically what i need is to find a way via script or powershell to identify if this field is being used by another MS application /non MS application such as Lync, SAP, etc

Any ideas?
0
 
David Johnson, CD, MVPOwnerCommented:
You can't unless you test every application as ANY application can query AD and use any value returned.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.