Re: dsquery

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 01/08/05 

Date: Sat, 08 Jan 2005 10:02:04 -0500

Dean meant to say "Go get oldcmp from www.joeware.net". It will handle users and
computers and is much safer to use than dsquery, prettier output too. Also it
can use lastLogonTimeStamp or pwdLastSet to determine old accounts so works on
2k and k3.

After that, the population of the used attribute is only done AFTER the domain
has been placed into dfl=2. The attribute is then updated every I think 10 days
(it might be 7) though this can be tweaked by modifying the attribute called
msDS-LogonTimeSyncInterval on the domain head object. Note that you should be
careful with that as it will have impact on replication, there is a reason MS
doesn't update that value every logon. Oh the lowest you can set it is to once
per day.

   joe 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
GC wrote:
> Hi,
> I just raised the domain functionality level to Windows Server 2003 because 
> I wanted to be able to run "dsquery user - inactive 4" to find accounts that 
> haven't been used in the last 4 weeks.  The functionality level raised OK, 
> and I can run the query, but it returns no results.  I know for a fact that 
> there are accounts that haven't logged on in the last 4 weeks.  Any idea why 
> this isn't working?  Thanks!
> 
>

Relevant Pages

  • dsquery
    ... I just raised the domain functionality level to Windows Server 2003 because ... I wanted to be able to run "dsquery user - inactive 4" to find accounts that ... there are accounts that haven't logged on in the last 4 weeks. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Backup and reinstall - no server access
    ... >>>We have a Windows Server 2003 with a lost Administrator password. ... >>>Knoppix), plug in a USB hard disk, copy the files on the Windows ... > As for having two administrator accounts, ...
    (microsoft.public.win2000.setup)
  • RE: Adding AD Account to NT Global
    ... member server in the Windows NT domain. ... Create a group in the Windows Server 2003 domain and add the accounts to ... Windows Server 2003 domain directly to set permissions. ...
    (microsoft.public.windows.server.migration)
  • Re: blank password in W2K Pro workstation even when policy set
    ... Sounds like the accounts are created with UF_PASSWD_NOTREQD set on the user flags. ... Joe Richards Microsoft MVP Windows Server Directory Services ... kasommer wrote: ... > Win2K workstations. ...
    (microsoft.public.win2000.security)
  • Re: setting up an authentication pc in a network
    ... about 4 accounts and those 4 people can only use a specific pc ... or it maybe is novell. ... Windows Server then you really are in bad shape. ... Calling an illegal alien an "undocumented worker" is like calling a ...
    (microsoft.public.windows.server.sbs)