Active Directory UDF

[water]

According to MS System Error Codes this means:

ERROR_LOGON_FAILURE The user name or password is incorrect. 1326 (0x52E)

How do you enter the username?

• Windows Login Name e.g. "DJ"
• NetBIOS Login Name e.g. "<DOMAIN>\DJ"
• User Principal Name e.g. "DJ@domain.com"

[Akarillon]

Which version of the UDF and which operating system do you run?

I am using version 1.2.0

Windows 7 64-bit(program also runs in 64-bit.

According to MS System Error Codes this means:

ERROR_LOGON_FAILURE The user name or password is incorrect. 1326 (0x52E)

How do you enter the username?

• Windows Login Name e.g. "DJ"
• NetBIOS Login Name e.g. "<DOMAIN>DJ"
• User Principal Name e.g. "DJ@domain.com"

Windows login name: "Akarillon"

EDIT: When I use the other method that worked, it goes straight past the @error and into the next MsgBox even when the username and password is "Username" and "Password"

Edited June 26, 2012 by Akarillon

[water]

Could you try

_AD_Open(@LogonDomain & "" & $Username, $Password)

[Akarillon]

Could you try

_AD_Open(@LogonDomain & "" & $Username, $Password)

Tried exactly what you wrote, but still the same error =/

[water]

How about

_AD_Open()

[Akarillon]

How about

_AD_Open()

Ye, both "Username" and "DomainUsername" works..

Maybe there is a security feature I do not know about?

[BrewManNH]

The problem is that $username and $password are referencing labels, not your inputs, plus you're not using GUICtrlRead on the $username and $password, you're just passing the handles to the ADOpen command.

;your code
GUICtrlCreateInput("Username", 112, 24, 121, 21)
GUICtrlCreateInput("Password", 112, 64, 121, 21, BitOR($GUI_SS_DEFAULT_INPUT,$ES_PASSWORD))
$Username = GUICtrlCreateLabel("Username", 24, 24, 52, 17)
$Password = GUICtrlCreateLabel("Password", 24, 64, 50, 17)

How it should be written

$Username = GUICtrlCreateInput("Username", 112, 24, 121, 21)
$Password = GUICtrlCreateInput("Password", 112, 64, 121, 21, BitOR($GUI_SS_DEFAULT_INPUT,$ES_PASSWORD))
GUICtrlCreateLabel("Username", 24, 24, 52, 17)
GUICtrlCreateLabel("Password", 24, 64, 50, 17)
; more code

_ADOpen(GUICtrlRead($username), GUICtrlRead($Password))

[water]

This is because they are not used. If no parameters are used the credentials of the currently logged on user are passed.

Could you try to run the _AD_Open.au3 example script? If gives detailed error information when running on Windows 7.

Looks like BrewManNH found the problem

I was just concentrating on the AD part.

Edited June 26, 2012 by water

[Akarillon]

Finally worked.

Thanks water and BrewManNH!

[gcue]

hey water =)

i was looking through the available functions in your udf, do you have the ability to do this (list active connections)?

http://gallery.technet.microsoft.com/scriptcenter/61539a7d-271e-421e-b7c3-2f4d99a77588

once again, thanks for working on this awesome udf!

[water]

Sure. Shouldn't be to hard because it's written in VB.

How fast do you need it?

[gcue]

whenever you can is cool - curious to see what the output would look like. (trying to find out where users are connected - especially if they have lingering connections)

wasn't sure how to translate it all (want to see what results will look like)

$strDcRDN   = "cn=atl-dc-01"
$strSiteRDN = "cn=Ga-Atl-Sales"

$objRootDSE = ObjGet("LDAP://RootDSE")
$strConfigurationNC = $objRootDSE.Get("configurationNamingContext")

$strNtdsSettingsPath = "LDAP://CN=NTDS Settings," & $strDcRDN & _
    ",cn=Servers," & $strSiteRDN & ",cn=Sites," & $strConfigurationNC
    
    
$objNtdsSettings = ObjGet($strNtdsSettingsPath)

$objNtdsSettings.Filter = Array("nTDSConnection") ;????

Edited July 3, 2012 by gcue

[water]

If you want to see the results, copy the VB code to a file with extension .VBS and run it. Then you can tell if it is worth to translate the code to AutoIt.

[water]

The script should look like:

Global $strDcRDN = "cn=atl-dc-01" - Your Domain Server
Global $strSiteRDN = "cn=Ga-Atl-Sales" - Your Site name
Global $objRootDSE = ObjGet("LDAP://RootDSE")
Global $strConfigurationNC = $objRootDSE.Get("configurationNamingContext")
Global $strNtdsSettingsPath = "LDAP://CN=NTDS Settings," & $strDcRDN & _
        ",cn=Servers," & $strSiteRDN & ",cn=Sites," & $strConfigurationNC
Global $objNtdsSettings = ObjGet($strNtdsSettingsPath)
Global $aFilter[1] = ["nTDSConnection"]
$objNtdsSettings.Filter = $aFilter
ConsoleWrite($strDcRDN & " NTDS Connection Objects" & @CRLF & @CRLF)

For $objConnection In $objNtdsSettings
    ConsoleWrite("Name:   " & $objConnection.Name & @CRLF)
    ConsoleWrite("Enabled:   " & $objConnection.enabledConnection & @CRLF)
    ConsoleWrite("From:   " & $objConnection.fromServer & @CRLF) ;Split(objConnection.fromServer, ",")(1)
    ConsoleWrite("Options:   " & $objConnection.Options & @CRLF)
    ConsoleWrite("Transport: " & $objConnection.transportType & @CRLF) ; Split(objConnection.transportType, ",")(0)
    ConsoleWrite(@CRLF & "Naming Contexts" & @CRLF)
    ConsoleWrite("---------------" & @CRLF)
    For $objDNWithBin In $objConnection.GetEx("ms-DS-ReplicatesNCReason")
        ConsoleWrite($objDNWithBin.DNString & @CRLF)
    Next
Next

Edited July 4, 2012 by water

[gcue]

sorry water - had to leave early day before yesterday and had yesterday off! =)

i wasn't able to get it to work.. i think this is querying for sites? i think id want it to query for user object and see where the user is connected. is there something else i can use for users instead of cn=sites ?

[water]

The script returns replication connections.

What do you exactly want to do?

[gcue]

what i want it to do is return computernames or ip addresses of where a user object is connected

so feed it a sAMAccountName and return where its actively connected.

found this other one but not sure if its returning active connections or just accounts on the domain

http://ss64.com/vb/syntax-ad.html

Edited July 5, 2012 by gcue

[water]

"where a user object is connected" what does this mean?

The DC the computer used to login to the domain?

[gcue]

yea the ipaddress or computername the user object is connected to.

so if a user logs on somewhere - report all the computers the user is logged onto..

[water]

Can't be done using the UDF. We use the logon script here to store this information on a fileserver.