Script to write attributes to AD

[natetron66]

Hi everyone,

I have a login script currently running that I created with autoit. I want to modify it to do another task as well, which is update the "Description" field of the computer object in AD when a user logs onto a machine. The reason being we have 1000 computers in a certain OU and theres only around 300 supposed to be there, as the other 700 are tombstoned pcs. I want to fill in the description field in AD, so after a week or two of users running this script I can delete the computer objects that do not have a description, hence cleaning up Active Directory. I want to use the user name of the person logging in to be the decription field. I currently already grab that in my login script. It is defined as $UserName. Please use this in any examples. I'm a total newb when it comes to scripting with AD. Thanks All! I appreciate it!

Nate

[natetron66]

Anyone???

[Jos]

Does the user have the proper rights to write to the AD?

Doesn't the Computer object contain a proper date for a user last changing the password while using this Computer you could retrieve from the AD?

In VBS:

lngDate = objRecordSet.Fields("pwdLastSet")

Set objDate = lngDate

dtmPwdLastSet = Integer8Date(objDate, lngBias)

Link to vbs

Jos

Edited August 4, 2009 by Jos

[99ojo]

Does the user have the proper rights to write to the AD?

Doesn't the Computer object contain a proper date for a user last changing the password while using this Computer you could retrieve from the AD?

In VBS:

lngDate = objRecordSet.Fields("pwdLastSet")

Set objDate = lngDate

dtmPwdLastSet = Integer8Date(objDate, lngBias)

Link to vbs

Jos

Hi,

just do a:

Your Computers are in OU MyOU in root of mydomain.namespace.local. You want to enumerate all computers of this ou, which are at least 4 weeks inactive:

dsquery computer "OU=MyOU,dc=mydomain, dc=namespace, dc=local" -inactive 4 -limit 1000

You shouldn't delete the computer accounts straight away. 1st i would set them disabled, and after a while i would delete them. You can make a combination of dsquery and dsmod:

dsquery computer "ou=MyOU,dc=mydomain, dc=namespace, dc=local" -inactive 4 -limit 1000 | dsmod computer -disabled yes

;-))

Stefan

Edited August 5, 2009 by 99ojo

[water]

To find out when the last logon of a computer to the domain happend just query the lastLogon attribute. You can use the adfunctions UDF which can be found here. You have to convert the returned value to readable format using this script.

Edited August 6, 2009 by water