Active Directory UDF

[jazzyjeff]

Seems like exchange didn't like me just modifying the exchange attribute for the proxyAddresses Attribute. I need to remove the attributes now and then added them. Its quite depressing, but I think I am going to be doing this manually :-) I'm sure there is a away to powershell this, but I'm a little weak with Powershell andby the time I figure it out I will probably mostly have been able to do this manually. Live and learn 

[jazzyjeff]

Actually thinking about this, what I did was use the update feature in the Modify Attribute command.

So this all started because there were some old legacy addresses in the proxyAddresses attribute. I got all this information into an array and remove the legacy addresses from the array. I then used the update option of Modify attribute to add only the ones I had left in the array. if I had just deleted the addresses that I didn't want using the modify attribute and not use Update I probably would have been ok.

Darn it!

Well, I'm not going to worry about this now, but I certainly have learned a lesson on this! :-)

[water]

Is there anything you would like to be changed to enhance the UDF?

[jazzyjeff]

I guess the ability to add contact smtp addresses and x400 addresses would be great.

[water]

To add addresses you still can use _AD_ObjectModify. To set the primary SMTP address (the sender address) there is a function in the UDF (I'm on vacation right now so don't know the exact name).

[water]

The name of this function is: _AD_AddEmailAddress

[ludoo]

Hi,

is it possible to use the _AD_ObjectExists function to find a user with only the beginning of the name or other, and to have the results in a array
 

ex : search user , "Marley bob" ou "Marley Paul" , with only "marley" and have the result in a array.

thank you for your help

Edited January 7, 2015 by ludoo

[water]

No: _AD_ObjectExists needs the exact SamAccountName or FQDN. The function only checks for a single object.

But you could use function _AD_GetObjectsInOU. The example script and the description in the UDF tell you how to use (Wildcards or ANR).

[ludoo]

ok , thank for the function ,  the result is a array , we can use the _ArraySearch where

$array [?] = how to know the number of return

[water]

Can you please post how you use _AD_GetObjectsInOU?

[scitewalker]

Hello Guys,

Im new to the forum but have problems and could yous a quick help

I use the function _AD_IsMemberOf

My domain hierarchy is like

Test-domain

childdomain1 and childdomain2

I created a triangle two-way relationship model, tested well.

I have a universal group in the parent domain with which contiains subordinated groups from the child domains. I will make sure that regardless from the domain membership of the pc and the curent user I can allways check the membership status of the current user in the parent group or in all subordinated groups (I use the default depth=10)

Is this possible with this function?

Until now I only get positiv boolean exit codes, if I test with a user from the parent domain, who is member in the parent domain group

I could use some quick support.

thank you

S

[water]

Welcome to AutoIt and the forum!

I assume you are using the latest version of the AD UDF (1.4.1.1 for AutoIt > 3.3.1ß.2)?

Can you please post the full statement you use to check group membership?

[scitewalker]

Hi,

yes all actual, I frequently check the site for updates.

Func User_Auth()

    $ADOPEN=_AD_Open($LDMS_USER, $LDMS_PASSWORD, $DOMDNSDomain, $DOMDCServer, $DOMDomainConfig, $DOMSecurity)
;~     MsgBox(0,'ADOPEN','$ADOPEN: '&$ADOPEN&@CRLF&'@error: '&@error)

    $ISMEMBER=_AD_IsMemberOf($DOMGroup, $DOMObject, $bIncludePrimaryGroup, $bRecursive, $iDepth)
;~     MsgBox(0,'ADOPEN','$ISMEMBER: '&$ISMEMBER&@CRLF&'@error: '&@error)

    Switch $ISMEMBER
        case '0'
;~             MsgBox(16,'Security','ERROR')
            GUI_BLOCK()
        Case '1'
;~             MsgBox(64,'Security','DONE')
            GUI_ENABLE()

    EndSwitch

_AD_Close()

EndFunc

[ludoo]

hi ,

Here are the features that I use:

the first function to create the user : newuser

Func newuser($nom,$prenom)

    ; mise en format prénom et nom pour le traitement
        $nom = StringReplace($nUser," ","");supprime espace vide
        $long = StringLen($nom)
        If $long > 16 Then $nom = StringMid($nom,1,16);16 caracteres maxi
        $nom = StringUpper($nom)
        $prenom = StringReplace($pUser," ","");supprime espace vide
        $prenom = StringMid($prenom,1,2);2 caracteres
        $prenom = StringUpper($prenom)

        Global $spUser = StringLeft($pUser, 2) ; récupere les 2 premiere lettre du prénom
        Global $spUserPr = StringLeft($pUser, 1) ;récupere la premiere lettre du prénom
        Global $spUserL = StringLower($pUser) ; pour mettre le prénom en minuscule
        Global $snUserL = StringLower($nom) ; pour mettre le nom en minuscule
        Global $snUserU = StringUpper($nUser) ; pour mettre le nom en majuscule
;~      Global $spUserU = StringUpper($spUser) ; pour mettre le prénom en majuscule
        Global $spUserUPr = StringUpper($spUserPr) ; pour mettre la premiere lette du prénom en majuscule
        Global $sStringpUsers = StringTrimLeft($pUser, 1) ; pour enlever la premiere lettre du prénom à partir de la gauche
        Global $sStringpUsersL = StringLower($sStringpUsers) ; mettre le prénom en minuscule sans la premiere lettre
        Global $sAMAccountNameUser = $nom&$prenom ; association du nom en majuscule + les 2 premiere lettre du prénom en majuscule
        Global $suserPrincipalName = $spUserL&"."&$snUserL&$suffixeUPN ; association du prenom en minuscule + le nom en minuscule + suffixe UPN
        Global $cnUser = $snUserU&' '&$spUserUPr&$sStringpUsersL ; association du nom en majuscule + premiere lettre prenom en majuscule + reste du prénom en minuscule
        Global $email = $spUserL&"."&$snUserL&$suffixemail
        Global $nomuser = $nom
        getalluser()
EndFunc ; => newuser

the second feature to look for another user with the same name : getalluser

Func getalluser()
    _AD_Open()
    ConsoleWrite($sAMAccountNameUser &@CRLF) ; compte d'ouverture de session 2000
    Sleep(5000)
;~  Global $getalluser = $sAMAccountNameUser
    Global $getalluser = $nomuser
    ConsoleWrite($getalluser &@CRLF)
    Sleep(5000)
    Global $TargetOUuser = "OU=xx,OU=xx,OU=xx,OU=xx,DC=xx,DC=xx"
    Global $aObjects[1][1]


        $aObjects = _AD_GetObjectsInOU($TargetOUuser, "(&(objectcategory=person)(objectclass=user)(cn=" & $getalluser & "*))", 2, "sAMAccountName")
        If @error > 0 Then
            MsgBox(64, "Active Directory Functions - Example 2", "No OUs could be found")
        Else
            _ArrayDisplay($aObjects, "Active Directory Functions - Example 2  - Objects in OU '" & $TargetOUuser & "'")
        EndIf
EndFunc

the third function for a single user : userunic()

Func userunic()
    If _AD_ObjectExists($nom & $prenom) Then
        Local $array[6] = [$sAMAccountNameUser,$nomUnic1,$nomUnic2,$nomUnic3,$nomUnic4,$nomUnic5,$nomUnic6]
        For $i = 65 To 90 ;ASCII Character A à Z
            Local $array[2] = [$sAMAccountNameUser,Chr($i)]
            _ArraySearch($array,$sAMAccountNameUser & Chr($i))
            _ArraySearch($array,$nom & $prenom & Chr($i))
                If @error Then
                    $nomUnic_1 = $nom & $prenom $ Chr($i)
                    Global $suserPrincipalName = $spUserL&"."&$snUserL&"."&Chr($i)&$suffixeUPN
                    Global $cnUser = $snUserU&' '&$spUserUPr&$sStringpUsersL&Chr($i)
                    Global $email = $spUserL&"."&$snUserL&"."&Chr($i)&$suffixemail
                    ExitLoop
                EndIf
        Next
        ConsoleWrite($nomUnic1 & @CR)
        ConsoleWrite($suserPrincipalName & @CR)
        ConsoleWrite($cnUser & @CR)
        Return $nomUnic_1

    Else
        $sAMAccountNameUser = $sAMAccountNameUser
    EndIf
EndFunc ;=> userunic

how to put the result the second feature in the array the third function

[scitewalker]

thank you for your tip

I have a forrest with neer to 25-50 child domains, and around 25K - 30K End Users, if possible I would mind to create an array with so many records, I really want to focus on the built in function _AD_IsMemberOf. If its not possible, I have to move to powershell.

but thanx again.

[water]

Hi,

yes all actual, I frequently check the site for updates.

Func User_Auth()
    $ADOPEN=_AD_Open($LDMS_USER, $LDMS_PASSWORD, $DOMDNSDomain, $DOMDCServer, $DOMDomainConfig, $DOMSecurity)
    $ISMEMBER=_AD_IsMemberOf($DOMGroup, $DOMObject, $bIncludePrimaryGroup, $bRecursive, $iDepth)
    Switch $ISMEMBER
        case '0'
            GUI_BLOCK()
        Case '1'
            GUI_ENABLE()
    EndSwitch
_AD_Close()
EndFunc

SciteWalker,

what you try to do should be possible with function _AD_IsMemberOf.

What are the values for parameters $bIncludePrimaryGroup, $bRecursive and $iDepth?

[scitewalker]

                  $bIncludePrimaryGroup=True
                  $bRecursive=True
                  $iDepth=10

[water]

As there has been a bug in the last version regarding $bIncludePrimaryGroup could you please try with

$bIncludePrimaryGroup=False

[jp10558]

Is there a way to create a nisMap class and nisObject class object via the UDF?

Edited January 9, 2015 by jp10558

[water]

You mean you want to extend the AD structure to support NIS?