Re: User account properties - last modified

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

A query such as (&(objectCategory=Person)(objectClass=user)(whenchanged=*))
should give you all objects that have a whenchanged attribute. If you're
trying to query based on a certain change date (so as not to get all objects
returned, but only those changed since x) then you may just have a syntax
error.

A code snippet would be helpful here.

Al


"Keith" <Keith@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CDDD0058-F4F9-4A78-9C9E-E146EBF66B9D@xxxxxxxxxxxxxxxx
> It has recently become a requirement at my company to have a report
> showing
> all user accounts modified in tha past x months.
>
> I thought this information could be found fairly easily by running a
> script
> similar to the one used to determine accounts that have not logged in for
> the
> past x months, but either it isn't quite so simple, or I have the
> attribute
> name incorrect. I am trying to show the property WhenChanged and the
> result
> is "failed to get user properties".
>
> I have looked for a solution in the w2k Resource Kit tools and scripts,
> but
> chkuser.vbs doesn't recognize WhenChanged and useraccount.vbs doesn't list
> the last modified date.
>
> Can anyone tell me if that is the corrct attribute name?
> Is there an existing script or tool that can provide the last modified
> date
> of an account?
>
> Thank you for your help,
>
> Keith


.

Relevant Pages

  • Re: User account properties - last modified
    ... lastlogon time and if you couple that with the last time they changed their password, you should have enough information available to make the decisions. ... I have similar kind of requirement, We have to preapare a list and to disable the users accounts that did not accessed the system for past two months. ... Can you please provide me the script used to determine accounts that have ... I have looked for a solution in the w2k Resource Kit tools and scripts, ...
    (microsoft.public.windows.server.active_directory)
  • User account properties - last modified
    ... all user accounts modified in tha past x months. ... I thought this information could be found fairly easily by running a script ... I have looked for a solution in the w2k Resource Kit tools and scripts, ...
    (microsoft.public.windows.server.active_directory)
  • Re: User account properties - last modified
    ... >all user accounts modified in tha past x months. ... >I thought this information could be found fairly easily by running a script ... If you have a Windows XP domain member or Windows Server 2003, and install the Adminpak, linked at tip ...
    (microsoft.public.windows.server.active_directory)
  • Re: Last Logon Time Stamp
    ... > I am new to script. ... > I need to list out inactive accounts more than 90 days in both AD accounts ... Use ADO to retrieve lastLogonTimeStamp for all users. ... And here is a sample program that retrieves the distinguishedName for all ...
    (microsoft.public.windows.server.scripting)
  • Re: Script to delete computer accounts not working
    ... thanks for the initial script as well. ... computer accounts that are disabled and haven't been modified for 30 days. ... Set objCommand = CreateObject ...
    (microsoft.public.scripting.vbscript)