Active Directory UDF (II)

[david1337]

Thanks!
I think that I have tried every possible combination now, and can't make it work. How exactly would I extend with your filter into my existing line?

[water]

$Users = _AD_GetObjectsInOU("OU=Department,OU=Users,OU=topOU,DC=company,DC=local", "(&(objectcategory=person)(objectclass=user)(!userAccountControl:1.2.840.113556.1.4.803:=" & $ADS_UF_ACCOUNTDISABLE & "))")

 

[david1337]

That's perfect, thank you water!

[water]

[legend]

Hi  

I want to get the attribute:  pwdLastSet, so I can see when the user changed his password.

I tried :  _AD_GetObjectAttribute(@UserName, "pwdLastSet") 

But without luck, any suggestions :D?

[water]

Use _AD_GetPasswordInfo. This returns a lot of properties, one of them (#8) being the needed date.

[legend]

2 minutes ago, water said:

Use _AD_GetPasswordInfo. This returns a lot of properties, one of them (#8) being the needed date.

thank's a lot =)

[legend]

.

Edited May 23, 2017 by legend

[water]

How about:

#include <AD.au3>
#include <Date.au3>

_AD_Open()
Global $pwInfo = _AD_GetPasswordInfo(@UserName)
_AD_Close()
_ArrayDisplay($pwinfo)
MsgBox(0, "", _DateTimeFormat($pwinfo[8], 0))

 

[Valnurat]

I have been using this:

$aObjManager = _AD_GetObjectsInOU("OU=Users,OU=zz,OU=xx,OU=company,DC=AD,DC=company,DC=ORG","(&(objectclass=person)(objectCategory=person)(StaffManager=TRUE))",2,"displayname", "displayname")

for some reason I having trouble with it now.

if I use _ArrayDisplay($aObjManager,'') it does just freeze.

Does someone know how I can troubleshot this?

[water]

Try _ArrayDisplay without setting further parameters. Means

_ArrayDisplay($aObjManager)

Plus check the returncode of _AD_GetObjectsInOU. Do you get an error?

[Valnurat]

I did this:

$aObjManager = _AD_GetObjectsInOU("OU=Users,OU=zz,OU=xx,OU=company,DC=AD,DC=company,DC=ORG","(&(objectclass=person)(objectCategory=person)(StaffManager=TRUE))",2,"displayname", "displayname")
ConsoleWrite('Error=' & @error)
If IsArray($aObjManager) Then
    _ArrayDisplay($aObjManager)
EndIf

Error=0

and _ArrayDisplay just showing a gray screen.

[water]

You could write all elements of the array to the console to check the content.

[Valnurat]

If I do this:

For $i = 1 To $aObjManager[0][0]
    ConsoleWrite($aObjManager[$i][0])
Next

 

I get this:

"C:\Users\Working Apps\Create Consultant.au3" (291) : ==> Array variable has incorrect number of subscripts or subscript dimension range exceeded.:
For $i = 1 To $aObjManager[0][0]
For $i = 1 To ^ ERROR

 

[water]

The result is a 1D array.

[jazzyjeff]

Water, is it possible to create a function that would add a security group to be a member of another security group?

 

Thanks!

[jazzyjeff]

I'm sorry Water. Forget this. I just thought I would try for giggles to use the group where I would insert the user name and the groups added the same. Thanks.

[MattHiggs]

Hey.  So I am actually trying to use one of the example scripts that you (water) created to demonstrate this AD udf, the Compare users ad tool, which I have added the information to for the domain I am trying to connect to.  Here is the thing: the machine that I working from is NOT domain joined and not even (technically) local to the domain, but I am connected to a vpn which is connected to the domain.  I modified the _ADOpen function to include all relevant information concerning the domain, and the script is able to connect (at least I assume so, since the form loads successfully), but I keep getting the error "No users found" when I search for a user that is a member of the domain.  Am I doing something wrong or is the initial connection to the domain failing?  I should also note that, since "Departments" aren't assigned, I commented out the _Check_access function as well, but I wouldn't think that that would matter as the value which it returns only appears at the top of the script.  I am able to interact with the domain from this computer (when using psexec or some other tool), so I know I can connect to the domain, but just don't know why it is failing.  Any advice would be awesome.

Nevermind.   Did not set the dnsdomain name correctly.

Edited May 18, 2017 by MattHiggs

[Teckx]

Hello all!

 

excellent source of information. I have just joined the masses in automating AD

 

i looked around but didn't see these and curious if it's possible

 

remove all memberships from user

modify user description

[Teckx]

I'm not at work but now that I think about it I believe there is a modify description one. Tested it today and worked great. Any to remove all memberships?

hide from exchange lists?