Active Directory UDF (II)

[water]

You could run the following script to test:

expandcollapse popup

#include <AD.au3>

_AD_Open()
_AD_ErrorNotify(1)
$aResult = _AD_RecursiveGetMemberOfEX(@UserName, 10)
_ArrayDisplay($aResult)
_AD_Close()
Exit

Func _AD_RecursiveGetMemberOfEX($sObject, $iDepth = 10, $bListenherited = True, $bFQDN = True)

    If $iDepth = Default Then $iDepth = 10
    If $bListenherited = Default Then $bListenherited = True
    If $bFQDN = Default Then $bFQDN = True
    If _AD_ObjectExists($sObject) = 0 Then Return SetError(1, 0, "")
    If StringMid($sObject, 3, 1) <> "=" Then $sObject = _AD_SamAccountNameToFQDN($sObject) ; sAMAccountName provided
    $sObject = _AD_FixSpecialChars($sObject, 1, '"\/#+<>;=') ; the object needs to be unescaped (except a comma) for the LDAP query but the result might be escaped
    Local $iCount1, $iCount2
    Local $sField = "distinguishedName"
    If Not $bFQDN Then $sField = "samaccountname"
ConsoleWrite("Querying: " & $sObject & @CRLF)
    $__oAD_Command.CommandText = "<LDAP://" & $sAD_HostServer & "/" & $sAD_DNSDomain & ">;(member=" & $sObject & ");" & $sField & ";subtree"
    Local $oRecordSet = $__oAD_Command.Execute
    Local $aGroups[$oRecordSet.RecordCount + 1] = [0]
    If $oRecordSet.RecordCount = 0 Then Return $aGroups
    $oRecordSet.MoveFirst
    $iCount1 = 1
    Local $aTempMemberOf[1]
    Do
        $aGroups[$iCount1] = $oRecordSet.Fields(0).Value
        If $iDepth > 0 Then
            $aTempMemberOf = _AD_RecursiveGetMemberOfEX($aGroups[$iCount1], $iDepth - 1, $bListenherited, $bFQDN)
            If $bListenherited Then
                For $iCount2 = 1 To $aTempMemberOf[0]
                    $aTempMemberOf[$iCount2] &= "|" & $aGroups[$iCount1]
                Next
            EndIf
            _ArrayDelete($aTempMemberOf, 0)
            _ArrayConcatenate($aGroups, $aTempMemberOf)
        EndIf
        $iCount1 += 1
        $oRecordSet.MoveNext
    Until $oRecordSet.EOF
    $oRecordSet.Close
    If $bListenherited = False Then
        _ArraySort($aGroups, 0, 1)
        $aGroups = _ArrayUnique($aGroups, 0, 1)
    EndIf
    $aGroups[0] = UBound($aGroups) - 1
    Return $aGroups

EndFunc   ;==>_AD_RecursiveGetMemberOfEX

 

Edited July 11, 2018 by water

[legend]

I need to remove some text from a attribute on a user object, would that be possible?

[water]

_AD_ModifyAttribute.
You need to retrieve the value, change it in AutoIt and then use _AD_ModifyAttribute to set the new value.

[legend]

3 hours ago, water said:

_AD_ModifyAttribute.
You need to retrieve the value, change it in AutoIt and then use _AD_ModifyAttribute to set the new value.

Thank's a lot for you answer, that helped me  

[Valnurat]

Hi Water.

I'm trying to use the _AD_GetLastLoginDate. I have tried your exampel, but it does not work. When I run it nothing happens.

#AutoIt3Wrapper_AU3Check_Parameters= -d -w 1 -w 2 -w 3 -w 4 -w 5 -w 6
#AutoIt3Wrapper_AU3Check_Stop_OnWarning=Y
#include <AD.au3>

; Open Connection to the Active Directory
_AD_Open()
If @error Then Exit MsgBox(16, "Active Directory Example Skript", "Function _AD_Open encountered a problem. @error = " & @error & ", @extended = " & @extended)

; *****************************************************************************
; Example 1
; Get last login date for current user. Returned as YYYYMMDDHHMMSS
; *****************************************************************************
Global $iLLDate = _AD_GetLastLoginDate()
MsgBox(64, "Active Directory Functions - Example 1", "Last Login Date for User '" & @UserName & "'" & @CRLF & $iLLDate)

; *****************************************************************************
; Example 2
; Get last login date for current computer. Returned as YYYYMMDDHHMMSS
; *****************************************************************************
$iLLDate = _AD_GetLastLoginDate(@ComputerName & "$")
MsgBox(64, "Active Directory Functions - Example 2", "Last Login Date for Computer '" & @ComputerName & "$'" & @CRLF & $iLLDate)

; Close Connection to the Active Directory
_AD_Close()

Do I need to do anything?

[water]

Which version of the UDF do you run?

[Valnurat]

Hopefully AD 1.4.7.0

EDIT: No, it is AD 1.4.6.0.

I have downloaded AD 1.4.7.0, so how can I use it?

Edited September 11, 2018 by Valnurat

[water]

Should work with 1.4.6.0 as well.

What is the value of @error after calling _AD_GetLastLoginDate?
 

[Valnurat]

I never get an error code. It just don't do anything. 

[water]

Please try the following script and post the result:

#AutoIt3Wrapper_AU3Check_Parameters= -d -w 1 -w 2 -w 3 -w 4 -w 5 -w 6
#AutoIt3Wrapper_AU3Check_Stop_OnWarning=Y
#include <AD.au3>

; Open Connection to the Active Directory
_AD_Open()
If @error Then Exit MsgBox(16, "Active Directory Example Skript", "Function _AD_Open encountered a problem. @error = " & @error & ", @extended = " & @extended)

; *****************************************************************************
; Example 1
; Get last login date for current user. Returned as YYYYMMDDHHMMSS
; *****************************************************************************
Global $iLLDate = _AD_GetLastLoginDate()
If @error Then MsgBox(0, "Error", "User: @error=" & @error & ", @extended=" & @extended)
MsgBox(64, "Active Directory Functions - Example 1", "Last Login Date for User '" & @UserName & "'" & @CRLF & $iLLDate)

; *****************************************************************************
; Example 2
; Get last login date for current computer. Returned as YYYYMMDDHHMMSS
; *****************************************************************************
$iLLDate = _AD_GetLastLoginDate(@ComputerName & "$")
If @error Then MsgBox(0, "Error", "Computer: @error=" & @error & ", @extended=" & @extended)
MsgBox(64, "Active Directory Functions - Example 2", "Last Login Date for Computer '" & @ComputerName & "$'" & @CRLF & $iLLDate)

; Close Connection to the Active Directory
_AD_Close()

 

[Valnurat]

Sorry for the late reply. I have been in London for some days.

 

I tried the code, but nothing happens. It just stops. I can see that program is running and I can only stop it by right click on the icon in lower right corner and press exit.

[water]

How many domain controllers do we talk about? Can you please run the _AD_ListDomainControllers.au3 example script.
_AD_GetLastLoginDate queries all DCs - which might take a long time to run if some of the DCs are down.

[Valnurat]

We have 79

[water]

_AD_GetlastLoginDate allows to limit the number of DCs to query and hence should run faster. Use _AD_GetSystemInfo to retrieve the site the local computer belongs to.
When you specify the site you want to check for the last login date (parameter 2) does it finish?

[Valnurat]

Yes, it is faster, but the end result is 0.

[water]

Strange
Anything special regarding your Active Directory environment - permissions etc?

[water]

Could you please add

_AD_ErrorNotify(2)

after _AD_Open?
So we get detailed error information.

[Valnurat]

I'm not sure what I should get.

But the end result is this:

 

[water]

Additional error messages would have shown us if there is an incorrectly handled COM error somewhere under the covers.

[Valnurat]

Ok.

I have skipped this part with the lastlogindate, so it is not necessary for me get the info, but if you want me to test further I will be happy to help.

 

How can I be sure that I use the latest version of AD.au3?