Exporting data from AD such as Accountlockout, passwordage homedirectory etc.

[Jason Stanley]

Is there a way to do this? csvde allows for simple things like name,
homedir and script, but in order to get account or password related
attributes it seems you have to connect to the user and it takes forever to
go through each user in AD, connect to them and pull the attributes. Does
anyone know an easier way? Here is the info I need

Thanks for anyhelp.

User Name

User Full Name

User Description

User Script Path

User Home Directory Path

Must Change Password Flag

Cannot Change Password Flag

Password Never Expires Flag

Account Disabled Flag

Account Lockout Flag

Grant Dialin Permissions Flag

Password Age In Days

Last Logon Date

Account Expiration Date

Workstations

 

[PKaz]

This data is produced by the free Dumpsec tool : http://www.somarsoft.com/
Or is that not your point ?

 

[Jason Stanley]

That is a good tool, but I need it in a format that can be scripted or a
program that can dump it via script.

 

[Cary Shultz [A.D. MVP]]

Jason,

You can always look at ldifde or the newer dsmod/dsquery/et al tools.

And, I will take this opportunity to turn you on to ADModify. This is a
wonderful little utility that will allow you to make bulk changes. Say that
you take over an organization and the previous Sys Admin did not include any
information - such as address and telephone number, etc. - when creating
user account objects. Well, this could be useful information. Instead of
using ldifde or some other tool to populate all those attributes with values
you could use ADModify and in a few seconds you are done! I know that
ADModify does not necessarily help you in this case but you might want to
take a look at it!

HTH,

Cary