Active Directory UDF - Help & Support

[water]

I downloaded Sysinternals (now M$) ADInsight and checked what's going on during LDAP execution.

Just download and run the exe. The AutoIt script becomes very, very slow but on the other hand you get a very good insight.

I inserted the modified RootDSE access and the number of binds dropped significantly.

Can we create a test script (one that uses read-only functions as I only have read access to our AD) and check it with different operating systems?

Edit:

I checked an application already in production and the number of binds dropped from many hundreds or thousands (had to kill it because it took hours to monitor) to only 2 (one bind to the domain and one to domain + server).

I think our problem can be solved with the modified RootDSE access.

Edited December 17, 2010 by water

[SpinningCone]

I downloaded Sysinternals (now M$) ADInsight and checked what's going on during LDAP execution.

Just download and run the exe. The AutoIt script becomes very, very slow but on the other hand you get a very good insight.

I inserted the modified RootDSE access and the number of binds dropped significantly.

Can we create a test script (one that uses read-only functions as I only have read access to our AD) and check it with different operating systems?

Edit:

I checked an application already in production and the number of binds dropped from many hundreds or thousands (had to kill it because it took hours to monitor) to only 2 (one bind to the domain and one to domain + server).

I think our problem can be solved with the modified RootDSE access.

nice. yeah looks like your production environment could handle enough connections to keep up. ours was punking out. i'm guessing the original root dse is good enough to pull data out (after all it can query the server for the proper information) but not good enough to properly re-use as a base ldap connection.

would be nice to get a few more testers out there to make sure that this won;t cause otehr problems but it looks like a solid update tot he UDF. nice work.

[water]

I did some more testing:

_AD_Open() - no additional binds

_AD_Open("", "", $sAD_DNSDomainParam, $sAD_HostServerParam, $sAD_ConfigurationParam) - no additional binds

_AD_Open("userid", "password") - gives large number of binds

_AD_Open("userid", "password", $sAD_DNSDomainParam, $sAD_HostServerParam, $sAD_ConfigurationParam) - gives large number of binds

[sOLVED] If I understand the link you provided correctly the bind cache should be used even when OpenDSObject is used.

Do you know what might cause this problem?

Edited December 19, 2010 by water

[water]

Version 0.42 has been released.

This version does some major bug fixing in _AD_Open!

Thanks a lot to SpinningCone for taking the time to help me solve this problem!

Now your AD scripts should run noticeably faster (depending on the number of AD requests) and it should no longer be necessary to insert SLEEP statements into your script to avoid some strange COM errors.

Please test before using it in production!

For download please see signature.

[HaeMHuK]

Thanks a lot for AD UDF.

I have configured it according to my purposes.

But there is one thing should work for me too.

All created users has empty fields (First name and Last name).

Is there any ways to fill this fields with this UDF?

Thanks in advanced.

[water]

_AD_CreateUser only sets the properties necessary to create the user.

To set further properties please use _AD_ModifyAttribute.

[HaeMHuK]

_AD_CreateUser only sets the properties necessary to create the user.

To set further properties please use _AD_ModifyAttribute.

Thanks a lot. Everything perfect now.

[water]

Glad to hear!

Merry Christmas and a happy new year to all AutoIT users!

I'm on vacation now and will be back the 3rd January.

[kor]

I'm trying to get the username of the first row of GetAccountsExpired. But it is a multidimensional array and I can't seem to extra the value into a string. Is there some way I can read the expired accounts from the first row and first column of the array so I can do a stringtrim to get just the CN=<username> ??

[water]

To access the first element of each row I would use:

#include <ad.au3>
_AD_Open()
$aExpired = _AD_GetAccountsExpired()
For $i = 1 to $aExpired[0][0]
  $aTemp = StringSplit($aExpired[$i][0],",")
  ConsoleWrite(StringMid($aTemp[1],4) & @CRLF)
Next

[secman]

First of all, thanks for all your work and John's of course, on this brilliant set of UDFs. Although I am not a programmer by trade, I have been able to put together a couple of utilities for use here at the school where I work to help us in day to day tasks.

I am currently putting together a script to create our yearly batch of new students from a csv file. I have also developed a script to create a single user which works fine but when I use the same functions and AD UDFs to create a number of users I get an error when the program starts to process the second user in the csv file.

The bit of code that is failing is as follows:-

Func CreateUser($sOU, $sUser, $sFullName)
    ; Create User
        MsgBox(0,"Create User", $sOU & $sUser & $sFullName)
    Global $iValue = _AD_CreateUser($sOU, $sUser, $sFullName)
    If $iValue = 1 Then
        MemoWrite ("User " & $sUser & " created")
    ElseIf @error = 1 Then
        $val = "XX"
        MsgBox(64, "Create New User", "User '" & $sUser & "' already exists")
    ElseIf @error = 2 Then
        $val = "XX"
        MsgBox(64, "Create New User", "OU '" & $sOU & "' does not exist")
    ElseIf @error = 3 Then
        $val = "XX"
        MsgBox(64, "Create New User", "Value for CN (e.g. Lastname Firstname) is missing")
    ElseIf @error = 4 Then
        $val = "XX"
        MsgBox(64, "Create New User", "Value for $sAD_User is missing")
    Else
        $val = "XX"
        MsgBox(64, "Create New User", "Return code '" & @error & "' from Active Directory")
    EndIf

EndFunc

(Some of the code is part of my testing/error handling/checking and will be removed once everything is working.)

I get the following error (running from within the SciTE4Autoit3 Editor) :-

>"C:\Program Files\AutoIt3\SciTE\..\autoit3.exe" /ErrorStdOut "H:\Scripts\User Admin\Create Multipl User.au3"

C:\Program Files\AutoIt3\Include\AD.au3 (569) : ==> Variable must be of type "Object".:

Local $oAD_RecordSet = $oAD_Connection.Execute($sAD_Query)

Local $oAD_RecordSet = $oAD_Connection^ ERROR

>Exit code: 1 Time: 34.667

As the error reported is from within the AD.au3 UDF I thought I had better seek (much) more knowledgeable help.

Alan

[water]

C:\Program Files\AutoIt3\Include\AD.au3 (569) : ==> Variable must be of type "Object".:
Local $oAD_RecordSet = $oAD_Connection.Execute($sAD_Query)
Local $oAD_RecordSet = $oAD_Connection^ ERROR
>Exit code: 1   Time: 34.667

It looks like the object $oAD_Connection is not available. This object is defined in function _AD_Open.

So my question is: Did you call _AD_Open() at the top of your script?

For details please see the ReadMe.txt file in the AD.ZIP:

How to use the Active Directory UDF                             2010-06-14
--------------------------------------------------------------------------
* Every script has to have the following format:
_AD_Open()                     ; open a onnection to the AD 
calls to other _AD-functions   ; query or manipulate the AD
_AD_Close()

Edited January 21, 2011 by water

[secman]

C:\Program Files\AutoIt3\Include\AD.au3 (569) : ==> Variable must be of type "Object".:
Local $oAD_RecordSet = $oAD_Connection.Execute($sAD_Query)
Local $oAD_RecordSet = $oAD_Connection^ ERROR
>Exit code: 1   Time: 34.667

It looks like the object $oAD_Connection is not available. This object is defined in function _AD_Open.

So my question is: Did you call _AD_Open() at th top of your script?

For details please see the ReadMe.txt file in the AD.ZIP:

How to use the Active Directory UDF                             2010-06-14
--------------------------------------------------------------------------
* Every script has to have the following format:
_AD_Open()                     ; open a onnection to the AD 
calls to other _AD-functions   ; query or manipulate the AD
_AD_Close()

Oops!

That's what was missing...

There is a "AD Open" statement at the top of the whole script for something else and that must have allwoed the first ID to be created. All OK Now.

Many thanks again for you excellent work and such a quick response.

Alan

[water]

Glad to be of service

[water]

Hi Water:

I know you've heard it many times, but your Active Directory Function Library is fantastic.

Quick question, do you have a sample script that would include all the functions/steps necessary to join a machine to the domain (that has never been joined before)? I've looked and looked, but can't seem to find anything. I'm very new at this and just want to ensure I don't miss anything.

Thanks!!!

Hi peomalle,

can't hear it too often

To join a computer to a domain two steps are necessary:

• _AD_CreateComputer($sAD_OU, $sAD_Computer, $sAD_User) to create a computer account in the specified OU. $sAD_User is the user or group that will be allowed to add the computer to the domain (SamAccountName)
• _AD_JoinDomain($sAD_Computer[, $sAD_UserParam, $sAD_PasswordParam]) to join the computer to the domain. UserParam and PasswordParam are optional and need to be used when the user who is running the script doesn't have the needed rights to join the computer to the domain
• Reboot the computer

BTW: This reminds me of the Monthy Python Sketch "The Spanish Inquisition". Always listing one more weapon as they announced to have. Edited March 1, 2011 by water

[water]

Version 0.43 has been released.

Please test before using in production!

For download please see my signature.

Edited March 1, 2011 by water

[BrewManNH]

Not really a bug, but I noticed in the latest download the version number is showing 0.41.

Great UDF by the way, love having it available.

[water]

Hi BrewManNH,

just did a download from the download page and AD.au3 shows version 0.43 in the header.

Where did you find version number 0.41?

[BrewManNH]

Sorry about that, I must have had the wrong files in one of my include folders, I just reopened the download and checked the version numbers in that and it's fine.

[water]

I like this kind of problems - so easy to solve