Active Directory UDF - GetObjectsInOU - Revision history

Water at 15:33, 27 August 2018

2018-08-27T15:33:34Z

← Older revision		Revision as of 15:33, 27 August 2018
Line 59:		Line 59:

	Get Bitlocker recovery information object for the current computer.		Get Bitlocker recovery information object for the current computer.
	Note that you need elevated permissions, the query doesn't work for ordinary users. For more information please check [https://blog.nextxpert.com/2011/01/11/how-to-delegate-access-to-bitlocker-recovery-information-in-active-directory/ the following site]. More detailed information can be derived using the following [https://www.autoitscript.com/forum/topic/195416-func-bitlocker-drive-info/ script].<syntaxhighlight lang="autoit">		Note that you need elevated permissions, the query doesn't work for ordinary users. For more information please check [https://blog.nextxpert.com/2011/01/11/how-to-delegate-access-to-bitlocker-recovery-information-in-active-directory/ the following site]. More detailed information can be derived using the following [https://www.autoitscript.com/forum/topic/195416-func-bitlocker-drive-info/ script] written by colombeen.<syntaxhighlight lang="autoit">
	$sAD_OU = _AD_SamAccountNameToFQDN(@ComputerName & "$")		$sAD_OU = _AD_SamAccountNameToFQDN(@ComputerName & "$")
	$aResult = _AD_GetObjectsInOU($sAD_OU, "(objectcategory=msFVE-RecoveryInformation)", 2 , "distinguishedname")		$aResult = _AD_GetObjectsInOU($sAD_OU, "(objectcategory=msFVE-RecoveryInformation)", 2 , "distinguishedname")

Water at 20:33, 25 August 2018

2018-08-25T20:33:08Z

← Older revision		Revision as of 20:33, 25 August 2018
Line 58:		Line 58:


	Get ~~the~~ Bitlocker recovery information object for the current computer.		Get Bitlocker recovery information object for the current computer.
	Note that you need elevated permissions, the query doesn't work for ordinary users. For more information please check: [https://blog.nextxpert.com/2011/01/11/how-to-delegate-access-to-bitlocker-recovery-information-in-active-directory/ ~~https://blog.nextxpert.com/2011/01/11/how-to-delegate-access-to-bitlocker-recovery-information-in-active-directory/~~]. More information can be derived ~~directly~~ using the following [https://www.autoitscript.com/forum/topic/195416-func-bitlocker-drive-info/ script].<syntaxhighlight lang="autoit">		Note that you need elevated permissions, the query doesn't work for ordinary users. For more information please check [https://blog.nextxpert.com/2011/01/11/how-to-delegate-access-to-bitlocker-recovery-information-in-active-directory/ the following site]. More detailed information can be derived using the following [https://www.autoitscript.com/forum/topic/195416-func-bitlocker-drive-info/ script].<syntaxhighlight lang="autoit">
	$sAD_OU = _AD_SamAccountNameToFQDN(@ComputerName & "$")		$sAD_OU = _AD_SamAccountNameToFQDN(@ComputerName & "$")
	$aResult = _AD_GetObjectsInOU($sAD_OU, "(objectcategory=msFVE-RecoveryInformation)", 2 , "distinguishedname")		$aResult = _AD_GetObjectsInOU($sAD_OU, "(objectcategory=msFVE-RecoveryInformation)", 2 , "distinguishedname")

Water: Added Bitlocker Recovery Information

2018-08-25T20:25:22Z

Added Bitlocker Recovery Information

← Older revision		Revision as of 20:25, 25 August 2018
Line 47:		Line 47:
	</syntaxhighlight>		</syntaxhighlight>

	Users that never logged on before:<syntaxhighlight lang="autoit">
			Users that have never logged on before:<syntaxhighlight lang="autoit">
	$aObjects = _AD_GetObjectsInOU("", "(&(&(objectCategory=person)(objectClass=user))(\|(lastLogon=0)(!(lastLogon=*))))", 2, "sAMAccountName,distinguishedName,displayname")		$aObjects = _AD_GetObjectsInOU("", "(&(&(objectCategory=person)(objectClass=user))(\|(lastLogon=0)(!(lastLogon=*))))", 2, "sAMAccountName,distinguishedName,displayname")
	</syntaxhighlight>		</syntaxhighlight>


	Users that must change their password the next time they logon:<syntaxhighlight lang="autoit">		Users that must change their password the next time they logon:<syntaxhighlight lang="autoit">
	$aObjects = _AD_GetObjectsInOU("", "(&(objectCategory=person)(objectClass=user)(pwdLastSet=0))", 2, "sAMAccountName,distinguishedName,displayname")		$aObjects = _AD_GetObjectsInOU("", "(&(objectCategory=person)(objectClass=user)(pwdLastSet=0))", 2, "sAMAccountName,distinguishedName,displayname")
			</syntaxhighlight>


			Get the Bitlocker recovery information object for the current computer.
			Note that you need elevated permissions, the query doesn't work for ordinary users. For more information please check: [https://blog.nextxpert.com/2011/01/11/how-to-delegate-access-to-bitlocker-recovery-information-in-active-directory/ https://blog.nextxpert.com/2011/01/11/how-to-delegate-access-to-bitlocker-recovery-information-in-active-directory/]. More information can be derived directly using the following [https://www.autoitscript.com/forum/topic/195416-func-bitlocker-drive-info/ script].<syntaxhighlight lang="autoit">
			$sAD_OU = _AD_SamAccountNameToFQDN(@ComputerName & "$")
			$aResult = _AD_GetObjectsInOU($sAD_OU, "(objectcategory=msFVE-RecoveryInformation)", 2 , "distinguishedname")
			_ArrayDisplay($aResult, "FQDN for the Bitlocker Recovery Information objects")
			$aResult = _AD_GetObjectProperties($aResult[1])
			_ArrayDisplay($aResult, "All properties of the first Bitlocker Recovery Information object")
	</syntaxhighlight>		</syntaxhighlight>

	[[Category:UDF]]		[[Category:UDF]]

Water at 17:10, 24 March 2018

2018-03-24T17:10:33Z

← Older revision		Revision as of 17:10, 24 March 2018
Line 1:		Line 1:
	~~The function~~ _AD_GetObjectsInOU is the swiss army knife of the Active Directory UDF.<br>It allows to search for whatever criteria you specify and returns whatever properties you want.		Function _AD_GetObjectsInOU is the swiss army knife of the Active Directory UDF.<br>It allows to search for whatever criteria you specify and returns whatever properties you want.

	==Parameters==		==Parameters==

Water at 17:05, 24 March 2018

2018-03-24T17:05:34Z

← Older revision		Revision as of 17:05, 24 March 2018
Line 43:		Line 43:

	==Examples==		==Examples==
	List all Group Policies<syntaxhighlight lang="autoit">		List all Group Policies:<syntaxhighlight lang="autoit">
	$aObjects = _AD_GetObjectsInOU("", "(objectClass=groupPolicyContainer)", 2, "displayName,gPCFileSysPath")		$aObjects = _AD_GetObjectsInOU("", "(objectClass=groupPolicyContainer)", 2, "displayName,gPCFileSysPath")
	</syntaxhighlight>		</syntaxhighlight>

			Users that never logged on before:<syntaxhighlight lang="autoit">
	Users that never logged on before<syntaxhighlight lang="autoit">
	$aObjects = _AD_GetObjectsInOU("", "(&(&(objectCategory=person)(objectClass=user))(\|(lastLogon=0)(!(lastLogon=*))))", 2, "sAMAccountName,distinguishedName,displayname")		$aObjects = _AD_GetObjectsInOU("", "(&(&(objectCategory=person)(objectClass=user))(\|(lastLogon=0)(!(lastLogon=*))))", 2, "sAMAccountName,distinguishedName,displayname")
	</syntaxhighlight>		</syntaxhighlight>

			Users that must change their password the next time they logon:<syntaxhighlight lang="autoit">
	Users that must change their password the next time they logon<syntaxhighlight lang="autoit">
	$aObjects = _AD_GetObjectsInOU("", "(&(objectCategory=person)(objectClass=user)(pwdLastSet=0))", 2, "sAMAccountName,distinguishedName,displayname")		$aObjects = _AD_GetObjectsInOU("", "(&(objectCategory=person)(objectClass=user)(pwdLastSet=0))", 2, "sAMAccountName,distinguishedName,displayname")
	</syntaxhighlight>		</syntaxhighlight>

	[[Category:UDF]]		[[Category:UDF]]

Water at 17:04, 24 March 2018

2018-03-24T17:04:42Z

← Older revision		Revision as of 17:04, 24 March 2018
Line 40:		Line 40:
	* To make sure that all properties you specify in $sDataToRetrieve exist in the AD you can use _AD_ObjectExistsInSchema.		* To make sure that all properties you specify in $sDataToRetrieve exist in the AD you can use _AD_ObjectExistsInSchema.
	* This function returns the selected properties "as is". To "decode" unreadable properties you need to use function _AD_GetObjectProperties.		* This function returns the selected properties "as is". To "decode" unreadable properties you need to use function _AD_GetObjectProperties.
	* If you need a single property of a single object you can use function _AD_GetObjectAttribute. Note: This function returns the property "as is" (undecoded) as well		* If you need a single property of a single object you can use function _AD_GetObjectAttribute. Note: This function returns the property "as is" (undecoded) as well.

	==Examples==		==Examples==

Water: /*

2018-03-24T17:04:23Z

← Older revision		Revision as of 17:04, 24 March 2018
Line 40:		Line 40:
	* To make sure that all properties you specify in $sDataToRetrieve exist in the AD you can use _AD_ObjectExistsInSchema.		* To make sure that all properties you specify in $sDataToRetrieve exist in the AD you can use _AD_ObjectExistsInSchema.
	* This function returns the selected properties "as is". To "decode" unreadable properties you need to use function _AD_GetObjectProperties.		* This function returns the selected properties "as is". To "decode" unreadable properties you need to use function _AD_GetObjectProperties.
	* If you need a single property of a single object you can use function _AD_GetObjectAttribute.		* If you need a single property of a single object you can use function _AD_GetObjectAttribute. Note: This function returns the property "as is" (undecoded) as well

	==Examples==		==Examples==

Rt01: /* Remarks */

2014-12-07T21:48:57Z

Remarks

← Older revision		Revision as of 21:48, 7 December 2014
Line 38:		Line 38:
	==Remarks==		==Remarks==
	* Multi-value attributes are returned as a string with the pipe character (\|) as separator.		* Multi-value attributes are returned as a string with the pipe character (\|) as separator.
	* To make sure that all properties you specify in $~~sAD_DataToRetrieve~~ exist in the AD you can use _AD_ObjectExistsInSchema.		* To make sure that all properties you specify in $sDataToRetrieve exist in the AD you can use _AD_ObjectExistsInSchema.
	* This function returns the selected properties "as is". To "decode" unreadable properties you need to use function _AD_GetObjectProperties.		* This function returns the selected properties "as is". To "decode" unreadable properties you need to use function _AD_GetObjectProperties.
	* If you need a single property of a single object you can use function _AD_GetObjectAttribute.		* If you need a single property of a single object you can use function _AD_GetObjectAttribute.

Rt01: /* Parameters */

2014-12-07T21:47:32Z

Parameters

← Older revision		Revision as of 21:47, 7 December 2014
Line 4:		Line 4:
	The following parameters define what is searched for and what properties are returned by the function:		The following parameters define what is searched for and what properties are returned by the function:

	;$~~sAD_OU~~		;$sOU
	:The Active Directory container where to begin the search.		:The Active Directory container where to begin the search.

	;$~~sAD_Filter~~		;$sFilter
	:The LDAP filter defines what to search for. More details can be found in the next section.		:The LDAP filter defines what to search for. More details can be found in the next section.

	;$~~iAD_SearchScope~~		;$iSearchScope
	:Defines the search constraints. The following constraints are supported:		:Defines the search constraints. The following constraints are supported:

	:'''''Base''''':		:'''''Base''''':
	:You search only the so-called “base” object (that is, the Active Directory container where you begin your search as defined by $~~sAD_OU~~); child containers are not searched. The base search is useful when you want to pull out information for a single OU (for example, a list of all the user accounts in the Finance OU).		:You search only the so-called “base” object (that is, the Active Directory container where you begin your search as defined by $sOU); child containers are not searched. The base search is useful when you want to pull out information for a single OU (for example, a list of all the user accounts in the Finance OU).
	:Set the parameter to 0 to use this contraint.		:Set the parameter to 0 to use this contraint.

Line 27:		Line 27:
	:For more information please check this site [http://technet.microsoft.com/en-us/library/ee692830.aspx#EFAA].		:For more information please check this site [http://technet.microsoft.com/en-us/library/ee692830.aspx#EFAA].

	;$~~sAD_DataToRetrieve~~		;$sDataToRetrieve
	:A comma separated list of properties to be returned for each object that matches the search criteria.		:A comma separated list of properties to be returned for each object that matches the search criteria.

	;$~~sAD_SortBy~~		;$sSortBy
	:A single property the resulting records will be sorted by. This has to be one of the properties specified in $~~sAD_DataToRetrieve~~.		:A single property the resulting records will be sorted by. This has to be one of the properties specified in $sDataToRetrieve.

	==LDAP filter==		==LDAP filter==

Jaberwocky6669: Removed Category:AD_UDF

2013-08-01T03:30:31Z

Removed Category:AD_UDF

← Older revision		Revision as of 03:30, 1 August 2013
Line 1:		Line 1:
	~~[[Category:AD_UDF]]~~
	The function _AD_GetObjectsInOU is the swiss army knife of the Active Directory UDF.<br>It allows to search for whatever criteria you specify and returns whatever properties you want.		The function _AD_GetObjectsInOU is the swiss army knife of the Active Directory UDF.<br>It allows to search for whatever criteria you specify and returns whatever properties you want.