Extract User list from AD

Use Joe Richard's ADFind at http://www.joeware.net

adfind -gc -b -f "&(objectclass=user)(ObjectCategory=person)(whenCreated>=20070101000000.0Z)(whenCreated<=20070525235959.0Z)" createTimeStamp


JM said…

Thanks for sharing your insightful thoughts and suggestions - very cool and helpful indeed.

In the spirit of sharing helpful information, thought I'd mention that one of my Microsoft colleagues informed us about a cool FREE tool from a Microsoft partner, that offers over 50 super-helpful Active Directory security reports, such as which accounts are locked out, which accounts are set to expire in the next few days, which security groups are nested, where all a user may have permissions etc.

The tool is called Gold Finger, and it is developed by a company called Paramount Defenses. You can download it from http://www.paramountdefenses.com/goldfinger.php

Why bother writing complicated scripts or using unsupported command-line tools when you can use a 100% AUTOMATED, GUI based, FREE solution that is not only SUPPORTED but also ENDORSED by Microsoft?!

If you're into Active Directory security, then this tool is a must-have. Thought I'd share this helpful tip with you!


Popular posts from this blog

Solved Account lockout issue

My Wintel Infrastructure Transitioning Experience

A Nice Lesson