Windows Forum

Ask something
Discussion Locked

LDAP queries in Windows 2000

0 helpful
4 replies

by alanb

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I would like to discover the easiest method for determining user account information from within Win2K AD.

Does anyone know of an easy/cheap solution?

The types of query I would like to run would be to check a domain for dialup privilege, users who have passwords that do not expire etc.

Thanks,
Alan

4 replies

by sativocomputerservices

Microsoft had a tool called LDIFDe. This is available in the W2K resource kit. Here is a link to the info from microsoft:

http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_ad_ldif_csv.htm

You can get any information from AD through LDAP, there are easier programs available, but you will pay for them. This one is hairy, but once you get the hang of it, it will take simple mods to get other information. The link helps get you started though. Good Luck!

by alanb

I am actually looking for a solution that will query for attributes like dial-in privileges etc in an easy to use package. If you can link me to LDIFDE (or CSVDE) scripts that can help accomplish this that would be great.

This discussion is closed to new replies.