Re: Query disabled users and delete their memberof associations

Yep it absolutely does. :)

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Paul Williams [MVP] wrote:
Thankfully we don't have multiple domains, which means I can avoid such a royal PITA! ;-)

We made a concious decision to have one big fat domain, as opposed to four or five smaller ones. Which is simplifying the design and deployment of a number of large enterprise apps.

.

Relevant Pages

  • Re: Oh.... Im just wondering whos seen this stumper...
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... he was explicit write permissions. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Preventing Users from removing their PC from the Domain
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ... results, no disable if no creds, disable with creds. ...
    (microsoft.public.win2000.security)
  • Re: 64-Bit Domain Controller and Global Catalog Server
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Paul Williams wrote: ...
    (microsoft.public.windows.server.active_directory)
  • Re: SID history
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ... I prefer adfind because it includes a -binenc switch that will display the SIDs in a much more readable format than you might get otherwise. ...
    (microsoft.public.windows.server.active_directory)
  • Re: converting SID
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... IIRC you can only write to sIDHistory when creating an object. ...
    (microsoft.public.windows.server.active_directory)