Re: DSQuery in 2003 Please help

I will e-mail what I have to you. What is your e-mail address?

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"Jeromy" <Jeromy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A3846463-3587-41F2-8BC3-A7ED3421596C@xxxxxxxxxxxxxxxx
> Yes that is exactly what I need to do. That script center should help me
> write a script. Unless you might have a sample? What brought this up was
> I
> have to be PCI DSS compliant and in that there is one question that has
> automatic disable if the account is inactive. Now hopefully Microsoft
> will
> put this in thier upgrade in 2007. This would be nice.
>
> Thanks for the link
>
> "Paul Bergson" wrote:
>
>> Yes that is true. I must be misunderstanding, did you also want to
>> disable
>> those that meet this criteria? I have a written scripts in vbs that list
>> out multiple criteria as well as add and/or update the users.
>>
>> Check out
>> http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/default.mspx
>> there are plenty of examples on how to get started.
>>
>> --
>>
>>
>> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> "Jeromy" <Jeromy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:9D644742-EE67-47FC-9C5B-A58CD0B7E300@xxxxxxxxxxxxxxxx
>> > Yes True. Can edit the xml file to pull data in the time that I want.
>> > But I
>> > don't want to have to select all users in the query to disable the user
>> > or
>> > users. I just want it to automataclly disable. Unless I am reading
>> > your
>> > post incorrectly.
>> >
>> > What I am reading from your post is create a query and export it to a
>> > xml.
>> > Then change the number of days and import it back into Saved Queries.
>> > When
>> > it finds a user that hasn't logged in for the numbers of days specified
>> > it
>> > will show that user. then you would have to select all and right click
>> > to
>> > disable.
>> >
>> > This is what I am getting from your query.
>> >
>> > Great Answers everyone This helps so much
>> >
>> > I did try that oldcmp this works pretty well and I would be able to
>> > schedule a job to run at night.
>> >
>> > "Paul Bergson" wrote:
>> >
>> >> Only have to import and export ONCE. That is to change the days to 1
>> >> (Sounds like you want it 7 now). The default is 30 60 90 or 120 so to
>> >> get
>> >> it to 7 is the export/import need. Once you have done this you never
>> >> need
>> >> to do it again. Everytime you look at the query it is up to date and
>> >> has
>> >> the details for 7 days or older.
>> >>
>> >> --
>> >>
>> >>
>> >> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
>> >>
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >>
>> >> "Jeromy" <Jeromy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> >> news:60A0607C-D4D2-4415-BF7B-671710B28447@xxxxxxxxxxxxxxxx
>> >> >I am in 2003 Native for forest and domain. If you are in 2000 native
>> >> >this
>> >> > query won't work because 2000 native does not support this type of
>> >> > query.
>> >> >
>> >> > I am only asking for one week because I don't have any other
>> >> > accounts
>> >> > that
>> >> > are inactive for more than a day. I created one account and I have
>> >> > not
>> >> > used
>> >> > it for a week but it doesn't return that user. I will wait one more
>> >> > week
>> >> > to
>> >> > see if I do a query for two weeks and see if it brings back a value
>> >> > that I
>> >> > want.
>> >> >
>> >> > Laura and Joe I will have to try that oldcmp.
>> >> >
>> >> > Paul that would seem to be a work around but it seems to be to much
>> >> > work.
>> >> > I
>> >> > would like to run a script or task every morning and me having to
>> >> > manual
>> >> > do
>> >> > it and export it seems to be to much work. Microsofts famous words
>> >> > "Least
>> >> > amount of administrative effort"
>> >> >
>> >> > Thanks for all your input if you have anymore suggestions please let
>> >> > me
>> >> > know.
>> >> >
>> >> > Thanks a bunch
>> >> >
>> >> > "Paul Williams [MVP]" wrote:
>> >> >
>> >> >> What mode is your domain running in?
>> >> >>
>> >> >> Some of the DS* commands only work in 2003 functional mode.
>> >> >>
>> >> >> The other question is what happens if you use a value greater than
>> >> >> one?
>> >> >> Say, four weeks?
>> >> >>
>> >> >> --
>> >> >> Paul Williams
>> >> >> Microsoft MVP - Windows Server - Directory Services
>> >> >> http://www.msresource.net | http://forums.msresource.net
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>


.

Relevant Pages

  • Re: AD dns entry reverting
    ... >> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA ...
    (microsoft.public.windows.server.active_directory)
  • Re: ldifde
    ... >> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA ...
    (microsoft.public.windows.server.active_directory)
  • Re: ldifde
    ... >> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA ...
    (microsoft.public.windows.server.active_directory)
  • Re: Two domains on one server
    ... >> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA ...
    (microsoft.public.windows.server.active_directory)
  • Re: slow logon
    ... >> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA ...
    (microsoft.public.windows.server.active_directory)