Active Directory UDF

[water]

Does the example script _AD_GetObjectsLocked.au3 return the user as locked?

[water]

I just checked with version 1.3.0.0 of the AD UDF and it worked just fine.

[Juvigy]

No , it returned no locked users.

[water]

Works fine here.
Anything special in your AD environment? RODC (Read only domain controllers)? Which version?

[water]

Version 1.4.6.0 of the UDF has been released.

Bugfix in function _AD_GetObjectProperties.

Please test before using in production!
For download please see my signature.

[IanN1990]

I dont have access to AD at the moment, so i can only research. 

Would this be the right syntax for an idea?

_AD_GetObjectsInOU($sOU, "(&(whenchanged -gt Thursday, January 1, 2015 12:00:00 AM")(name=ian*))", 2, "sAMAccountName")

Would that return a list of SamAccountNames with the name starting with ian changed after the date listed?

[water]

I have no access to AD at the moment as well. But the wiki (please check my signature) explains how to build LDAP queries. 

[IanN1990]

Heading to the wiki, it ended me up here 

http://www.selfadsi.org/ldap-filter.htm

#include <Date.au3>
$EPOCH = "1970/01/01 00:00:00"
$NOW = _NowCalc()
$time = _DateDiff("s", $EPOCH, $NOW)

$aObjects = _AD_GetObjectsInOU($sOU, "(&(whenchanged<=" &  $time & ")(name=*))", 2, "sAMAccountName,distinguishedName,displayname")
If @error > 0 Then
    MsgBox(64, "Active Directory Functions - Example 1", "No OUs could be found")
Else
    _ArrayDisplay($aObjects, "Active Directory Functions - Example 1 - Objects in OU '" & $sOU & "'")
    Global $iResult = _AD_GetObjectsInOU($sOU, "(name=*)", 2, "sAMAccountName,distinguishedName,displayname", "", True)
    MsgBox(64, "Active Directory Functions - Example 1", "This example returned " & $iResult & " records")
EndIf

Returns No OUS

 

Edited August 26, 2016 by IanN1990

[water]

I think that's because OUs have no name. Remove the attribute from the query and see what you get. 

[IanN1990]

hmm though i still couldn't get it to work (though i just noticed its missing lots of code for the forum for others to run which i will correct) i could kiss you water your wiki page is amazing took me a while to understand beter but i wrote this becase of it

 

Global $aObjects = _AD_GetObjectsInOU($sOU, "(&(name=" & GUICtrlRead($Input1) & "*)(!UserAccountControl=514)(|(accountExpires=0)(accountExpires=9223372036854775807)))", 2, "name, employeenumber, physicalDeliveryOfficeName")

For others so they can use it.

1. Reads Input from GUI

2. That name is a wild card, so Ian* becomes ian smith, ian andrews etc

3. Account is not 514 (ie disabled)

4. Accountexpires is 0 or 0xffffff (ie doesn't expire)

 

Though when i add this line it all fails which i dont understand yet.

Global $aObjects = _AD_GetObjectsInOU($sOU, "(&(name=" & GUICtrlRead($Input1) & "*)(!UserAccountControl=514)(|(accountExpires=0)(accountExpires=9223372036854775807)(accountExpires>=131167196470))", 2, "name, employeenumber, physicalDeliveryOfficeName")

As the accountexpires is still part of the OR bracket, even if it finds nothing it shouldn't stop results coming in.

Further more, it should be working ? If the users accountexpires is bigger then todays accountexpire number then they are not expired :S

 

*Edit Seams it does allworks, i just missed a closing bracket. Easy mistake

Edited August 26, 2016 by IanN1990

[water]

To query the WhenChanged property use the following format:

WhenChanged>=YYYYMMDDHHMMSS.0Z

 

[Valnurat]

Do I need to run _AD_ModifyAttribute for all attribute I want to modify for a user or is there a solution to do it for them all in 1 stroke.

[water]

Sorry but you have "to run _AD_ModifyAttribute for all attribute" you want to modify.

[Valnurat]

Ok.

Thank you for your respond.

[Valnurat]

Is there a solution to modify the "User logon name" and the domain suffix?

We have severals domain suffix to chose from.

The first field is the attribute "userPrincipalName", but the other field (combobox) I don't know.

But I can't just do this:
 

_AD_ModifyAttribute($sShort, "userPrincipalName", $sEmail & "@company.com")

because then is will just look like this:

 

Edited August 31, 2016 by Valnurat

[Valnurat]

Please ignorre my previous post.

It does work as the exampel shows. Maybe it was wrong spelling og my company.

[araneon]

Good afternoon.
Prompt, whether it is possible to connect a computer from a workgroup to a domain using your library.
Only OU Krasnodar \ Computers?

The point is this.
There is a PC which lost the trust relationship between the workstation and the domain. To fix this, I'm under a local administrator deduce PC from a domain to a workgroup, delete the computer from the domain and add it again and join the PC to the domain.
Only Computers OU I are in OC Krasnodar, ie
Domen.ru / Krasnodar / Computers ?

Edited September 5, 2016 by araneon

[water]

I think function _AD_JoinDomain should do the trick.

[araneon]

How to run a script if the PC is not in the domain?

Function _AD_Open encountered a problem. @error = 4, @extended = -2147023541

[water]

Can you post the script you run?