User account query

[Mike]

Hey everyone, need to know if a query can be ran against my AD to give me
User account names, the security group that they are a part of, if they are
active or disabled accounts, and when they last logged on. Does one exist??
Thanks!!

Mike

 

[Bjarne Duelund]

Hey everyone, need to know if a query can be ran against my AD to give me
User account names, the security group that they are a part of, if they are
active or disabled accounts, and when they last logged on. Does one exist??

You can get most of the information with DSquery/DSget from Windows 2003,
except 'last logged on'. It also works on 2000 AD.

Perhaps it will be easier for you to use the free util DumpSec from SomarSoft:
http://www.somarsoft.com

 

[Cary Shultz [A.D. MVP]]

Mike,

I have not played with DumpSec from somarsoft but I think that I will take a
look at it.

Anyway, as Bjarne suggested you can use the newer dsquery/dsget tools or you
can try ldifde if you are familiar with that tool. However, as Bjarne
stated, you will not get the last logon from this.

HTH,

Cary