Active Directory UDF

[water]

I'm on vacation right now. Will play with it nect week. 

[araneon]

Tell me how to get a list of certain groups (RND_DB_1C_HHH where any signs XXX) in which the user is involved?
That is, display a list of groups that starts at just RND_DB_1C_?

[water]

Function _AD_GetObjectsInOU should do the trick.
Or _AD_GetUserGroups (plus ignore all groups you do not need).

Do you want to process the groups recursively? Means user is member of group A which has group RND_DB_1C_* as a member?

[legend]

How would I get some information from a OU?

I need to get the information : State/Province from the OU that a specefic user is in.

Here i'm getting the OU : "it" from the user "miin", now I need to get the state/province from the ou: "it":

 

Here's the example i use to get the ou from a specefic user:

; Open Connection to the Active Directory
_AD_Open()
If @error Then Exit MsgBox(16, "Active Directory Example Skript", "Function _AD_Open encountered a problem. @error = " & @error & ", @extended = " & @extended)

; ********************************************************************************
; Example 1 - Process the current user.
; Get the FQDN from the SamAccountname. Then get the SamAccountName from the FQDN.
; ********************************************************************************
; Get the Fully Qualified Domain Name (FQDN) for the current User
Global $sFQDN = _AD_SamAccountNameToFQDN("miin")

; Get the sAMAccountName from the Fully Qualified Domain Name (FQDN) for the current User
Global $sSamAccountName = _AD_FQDNToSamAccountName($sFQDN)

MsgBox(64, "Active Directory Functions - Example 1", $sFQDN)

 

 

 

[water]

Will post an example as soon as I return to my office.

[legend]

That sounds great, thank's a lot water

[water]

This new function (will be available with the next release of the UDF) should do the trick:

expandcollapse popup

#include <AD.au3>
_AD_Open()
$sOU = _AD_GetObjectOU(@UserName)
$sState = $_AD_GetObjectAttribute(@sOU, "xxx") ; Replace xxx with the attribute that holds the state
ConsoleWrite("State is: " & $sState)
_AD_Close()

; #FUNCTION# ====================================================================================================================
; Name...........: _AD_GetObjectOU
; Description ...: Returns the OU (Organizational Unit) of an object ("user", "group" etc.).
; Syntax.........: _AD_GetObjectOU($sObject)
; Parameters ....: $sObject - Object for which the main class should be returned. Can be specified as Fully Qualified Domain Name (FQDN) or sAMAccountName
; Return values .: Success - FQDN of the object's OU.
;                  Failure - "", sets @error to:
;                  |1 - Specified object does not exist
;                  |2 - The LDAP query returned no record. @extended is set to the error returned by LDAP
; Author ........: water
; Modified.......:
; Remarks .......:
; Related .......:
; Link ..........:
; Example .......: Yes
; ===============================================================================================================================
Func _AD_GetObjectOU($sObject)

    If _AD_ObjectExists($sObject) = 0 Then Return SetError(1, 0, "")
    If StringLeft($sObject, 7) <> "LDAP://" Then ; No ADsPath
        Local $sProperty = "sAMAccountName"
        If StringMid($sObject, 3, 1) = "=" Then $sProperty = "distinguishedName" ; FQDN provided
        $__oAD_Command.CommandText = "<LDAP://" & $sAD_HostServer & "/" & $sAD_DNSDomain & ">;(" & $sProperty & "=" & $sObject & ");ADsPath;subtree"
        Local $oRecordSet = $__oAD_Command.Execute ; Retrieve the ADsPath for the object
        If @error Or Not IsObj($oRecordSet) Then Return SetError(2, @error, "")
        $sObject = $oRecordSet.fields(0).value
    EndIf
    Local $oObject = __AD_ObjGet($sObject) ; Retrieve the COM Object for the object
    Local $oOU = __AD_ObjGet($oObject.Parent) ; Get parent of the object (= OU)
    Return $oOU.Get("distinguishedName") ; Get distinguishedName (FQDN) for OU

EndFunc   ;==>_AD_GetObjectOU

 

[water]

Version 1.4.2.0 of the UDF has been released.

Now runs with all versions of AutoIt >= 3.3.8.1.

Please test before using in production!

For download please see my signature.

[araneon]

Function _AD_GetObjectsInOU should do the trick.
Or _AD_GetUserGroups (plus ignore all groups you do not need).

Do you want to process the groups recursively? Means user is member of group A which has group RND_DB_1C_* as a member?

I want to do what they do in this article only AutoIT.

[water]

Unfortunately my Russian is a bit rusty
What have you tried so far? Did my suggestion help?

[araneon]

More yet, now in the process.
I have difficulty with my group parsing required.
 

Do you want to process the groups recursively? Means user is member of group A which has group RND_DB_1C_* as a member?

Yes, that's what I need.

[araneon]

There are groups in blood pressure that are called RND_DB_1C_TIS RND_DB_1C_ZUP RND_DB_1C_IGR, overall they have both seen RND_DB_1C_, how to search these gurppy the current user?

[water]

$aGroups = _AD_RecursiveGetMemberOf(@Username, 10, False, False)

Should return a list of all groups the current user is a member of. Extract all groups starting with "RND_DB_1C".

[araneon]

I'm sorry, as it properly used?

[araneon]

$aGroups = _AD_RecursiveGetMemberOf(@Username, 10, False, False)

YES, it displays a list of all user groups.

[water]

You simply have to grab those groups you are interested in:

$aGroups = _AD_RecursiveGetMemberOf(@Username, 10, False, False)
For $i = 1 To $aGroups[0]
    If StringLeft($aGroups[$i], 9) = "RND_DB_1C" Then ; Process the group
Next

 

[kcvinu]

I was wandering in the forums to know more stuff. Suddenly i saw this post. But i didn't knew anything about Active Directory. When i first that word, i thought that it was the active explorer window. Then i started googling. And found this MSDN link. I think this will be useful for the newcomers of this post. If possible please try to include this on help file.

https://msdn.microsoft.com/en-us/library/aa746492(v=vs.85).aspx

[legend]

I can't get it to return the groups:

 

#include <AD\AD.au3>

_AD_Open()
$aGroups = _AD_RecursiveGetMemberOf(@Username, 10, False, False)
MsgBox("","",$aGroups)
_AD_Close()

 

It shows a empty msgbox

 

Your example from #1308,

It can't find the macro @sOU: http://puu.sh/jvWIj/0882e6b7e4.png

Edited August 10, 2015 by legend

[water]

Sorry, thats a typo. Should be $sOU.

[water]

I was wandering in the forums to know more stuff. Suddenly i saw this post. But i didn't knew anything about Active Directory. When i first that word, i thought that it was the active explorer window. Then i started googling. And found this MSDN link. I think this will be useful for the newcomers of this post. If possible please try to include this on help file.

https://msdn.microsoft.com/en-us/library/aa746492(v=vs.85).aspx

I have added a link to MSDN in the wiki.