ADAM: Enumerate User Attributes

Hello,

I would like to Query All Domain Users within ADAM/AD and specifically
look at two attributes, Title and Department. Then based off those
results, modify group membership of the user. Bottom line, I am trying
to set group membership of based on the users Title and Department.

Example:
1. Query all domain users for 3 attributes (title, department and group
membership).
2. Based on the title and department attributes, determine if the user
is a member of a specific group.
3. If the user is not a memberOf a specific group, add the membership
to the group.
4. If they are a "memberOf" a specific list of groups, remove them from
each of those groups.

I have been able to successfully install ADAM, import schema from my
production domain and then import a Bulk Object export from my domain.
My purpose for setting up ADAM was to have an offline environment to
perform queries and scripts without affecting production environment.

If you could help point me in the right direction I can work toward a
solution. I really don't know where to begin as I have read so many
ideas of how to query users. Also, many of the ideas and scripts i
have found will not work within ADAM as I am not able to get around
"rootDSE and defaultnamingcontext" issues which i don't understand how
to avoid when testing queries and scripts in ADAM.

Any assistance is greatly appreciated!!!!!!!!

Thank you,
Moe

.

Relevant Pages

  • Re: Why Does WHOAMI /GROUPS Not Show Domain Users Membership?
    ... Domain Users designated as their "primary", ... decision long ago to not include "primary" group membership in the memberOf ... other group in the ACL. ... Permission to access file system objects that are accessible to any domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: Why Does WHOAMI /GROUPS Not Show Domain Users Membership?
    ... Domain Users designated as their "primary", I believe Microsoft made the ... decision long ago to not include "primary" group membership in the ... WHOAMI /GROUPS because they didn't get around to it? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Groups and Privileges
    ... So that means the groups have any powers the UNI group has, ... I suggested he also report the membership listing ... Then I made the Administrator, Domain Admins, Enterprise ... >> seemed to simply have the rights of the Domain Users account. ...
    (microsoft.public.win2000.active_directory)
  • Re: enumerating Domain Users Group
    ... Domain Users group in my domain using the script I mentioned in my first ... The LDAP provider does not reveal membership in the "primary" group without ... the user object, and the Members method of the group object, and the member ...
    (microsoft.public.windows.server.scripting)
  • Re: Remove Security Groups
    ... It appears you want 1000+ users to loose their group membership and only be ... Perform a system state backup on one of the DCs. ... The end result is all the users will have only the domain users as their ... > what I want to do is leave all the user accts intact and remove the groups ...
    (microsoft.public.win2000.group_policy)
Loading