Active Directory UDF - Help & Support (III)

[water]

To work with computers you need to append a $ sign to the name.

[Robdog1955]

NICE! Thank you!

One other quick question. Can you give me a link that will show me how to more properly post a script. As you could see I just copied and pasted mine.

[water]

Search the forum for 'how to post code'. I am not at a computer at the moment

[Robdog1955]

Got it! Thanks once more!!

[Robdog1955]

Thank you so much for answering my previous questions. I am now trying to determine the number of computers that have logged in within the past $iDays days. Out of several hundred machines, the following code returns the exact same machines no matter what I change $iDays to.

#include <AD.au3>
#include <Date.au3>
#include <File.au3>

_AD_Open()

Global $aObjects, $sFilePath, $sAge, $iDays
Global $sOU = ""

$iDays = -30
$sFilePath = "Z:\Computer List\Active Computer List.txt"
$sAge = _DateAdd("D", $iDays, _NowCalcDate()) ; $sType, $iValToAdd, $sDate
$aObjects = _AD_GetObjectsInOU($sOU, "(&(objectClass=computer)(|(lastLogon=0)(lastLogon>=" & $sAge & ")))", 2, "Name")
$Result = MsgBox($MB_YESNOCANCEL, "Output", "Do you want to send output to Z:\Computer List\Computer List.txt." & Chr(13) & _
    "If you select No, the output will be displayed using ArrayDisplay")
If $Result = 6 then ; 2 = Cancel; 6 = Yes; 7 = No
    Output_To_File()
    Else
        Display_Array()
EndIf

_AD_Close()

Func Output_To_File()
    _FileWriteFromArray($sFilePath, $aObjects, 1)
    ShellExecute($sFilePath)
EndFunc ; Output_To_File

Func Display_Array()
    _ArrayDisplay($aObjects, "Computer Names")
EndFunc ; Display_Array()

[Robdog1955]

Forgot to mention that only about 30 machines are returned.

[water]

Can't test at the moment but I think the date formats don't match.

_DateAdd returns YYYY/MM/DD but the lastlogon date is stored as YYYYMMDD.

[kor]

Drawing a blank! How do you query and get a 1 dimensional array of multiple attributes for a user object?

Similar to how you can return multiple attributes from _AD_GetObjectsInOU

(Even better if there is a way to do this with the _AD_RecursiveGetGroupMembers)

I need an array that contains the following

samaccountname,displayname,description,physicalDeliveryOfficeName

(recursively) for all members of a group.

Is this possible?

So far I'm doing something like this, but not having much luck.

#include <AD.au3>
#include <Array.au3>

_AD_Open()

Global $sGroup = "IS Department" ; group name

$aResult = _AD_RecursiveGetGroupMembers($sGroup, 10, True, False)

_ArrayDisplay($aResult)

For $i = 1 To UBound($aResult) - 1
    $aResult1 = _AD_GetObjectProperties($aResult[$i], "displayname,description,physicalDeliveryOfficeName")
    _ArrayDisplay($aResult1)
Next

_AD_Close()

[water]

If you query multiple properties you get a 2D array.

You could loop through the 2D array returned by _AD_GetObjectProperties, concatenate the elements into a string and write this to the 1D array.

[kor]

If you query multiple properties you get a 2D array.

You could loop through the 2D array returned by _AD_GetObjectProperties, concatenate the elements into a string and write this to the 1D array.

Maybe a feature request then?

New function?

_AD_GetObjectAttributes

plural?!

ability to query for multiple attributes for a single object and return a 1-dimensional array.

[water]

You are the first asking for this feature

[Robdog1955]

Can't test at the moment but I think the date formats don't match.

_DateAdd returns YYYY/MM/DD but the lastlogon date is stored as YYYYMMDD.

Thank you very much Water!

[water]

[kor]

Issue with trying to query the 'lastlogon' attribute for computer objects.

#include <AD.au3>
#include <Array.au3>

_AD_Open()

Local $aResult = _AD_GetObjectsInOU("*", "(objectCategory=computer)", 2, "sAMAccountName, lastLogon")

_ArrayDisplay($aResult)

samaccountname populates correctly, but my second column is blank. The value is there as I can see it when I click on the attribute editor for a computer object in ADUC.

[water]

The lastlogon attribute is a large integer data type. You need to use _AD_GetObjectsProperties or _AD_GetLastLoginDate to retrieve the decoded date.

[rafzak]

Hello, Friends. Please help me. How can I get from AD computers list, if I know username? Thanks

[JLogan3o13]

Define "computers list". Do you mean every computer that user has logged into, or the computer that user is logged into at the moment?

[water]

As there is no link between user and computer you can't retrieve this information from AD (neither the logon history nor the currently logged on computer).

[rafzak]

In the list of computers, field the description contains DisplayName. Can I make filtering computers to description field (DisplayName)?

 

'>

[JLogan3o13]

You said username, the DisplayName is the name of the computer. Please clarify which you are after. What you're showing is the result of a GPO applied, as this is not normal behavior in my experience.

Edit: I realize that may be a little vague - In the example you post, the description is being filled out by either a GPO or script (or, god forbid, manually). If your configuration is like that, then yes you should be able to parse that data and get what you're after. If your domain does not have that GPO configured, you won't have that info in the Description field.

Edited February 11, 2015 by JLogan3o13