#Vbscript ldap query user attributes how to#

Set objGroup = objOU.Create('Group', 'cn=Customers') Set objOU = GetObject('LDAP://ou=Sales,dc=NA,dc=fabrikam,dc=com') Const ADS_GROUP_TYPE_UNIVERSAL_GROUP = &h8 ('LDAP://cn=Scientists,ou=R&D,dc=NA,dc=fabrikam,dc=com')ĪDS_GROUP_TYPE_GLOBAL_GROUP + ADS_GROUP_TYPE_SECURITY_ENABLEDĬreates a universal Active Directory distribution group named Customers. Const ADS_GROUP_TYPE_GLOBAL_GROUP = &h2Ĭonst ADS_GROUP_TYPE_UNIVERSAL_GROUP = &h8Ĭonst ADS_GROUP_TYPE_SECURITY_ENABLED = &h80000000 'cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com')Ĭhanges a global distribution group named Scientists to a universal security group. 'cn=Executives,ou=Management,dc=NA,dc=fabrikam,dc=com', _ ('LDAP://cn=Sea-Users,cn=Users,dc=NA,dc=fabrikam,dc=com')Īrray('cn=Scientists,ou=R&D,dc=NA,dc=fabrikam,dc=com', _ ('LDAP://cn=NA-Employees,cn=Users,dc=NA,dc=fabrikam,dc=com')Īdds two groups (Executives and Scientists) and one user account (MyerKen) to the Sea-Users group in Active Directory. 'member', Array('cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com') ('LDAP://cn=Atl-Users,cn=Users,dc=NA,dc=fabrikam,dc=com') WScript.Echo 'Group1 created and 1000 Users added to the group.'Īdds a user (MyerKen) to two different Active Directory security groups: Atl-Users and NA-Employees. ObjGroup.PutEx ADS_PROPERTY_APPEND, 'member', _ StrDN = ',cn=Users,' & faultNamingContext Set objGroup = objContainer.Create('Group', 'cn=Group1') Set objContainer = GetObject('LDAP://cn=Users,' & _ Set objRootDSE = GetObject('LDAP://rootDSE') This script is not intended for use in a production environment.

#Vbscript ldap query user attributes how to#

You can use any of the VBScript programs below in ActiveXperts Network Monitor.Ĭlick here for an explanation about how to include scripts in ActiveXperts Network Monitor.Īdd 1000 Sample Users to a Security Groupĭemonstration script that creates a security group named Group1, and adds one thousand users (UserNo1 through UserNo10000) to that group. Replace Group Membership with All-New Members Remove All Group Memberships for a User Account

List the System Access Control List for a Group List the Primary Group for a User Account List the Managed By Information for a Group List Group Memberships for All the Users in an OU List the Active Directory Groups a User Belongs To Userinfo.vbs - List properties of a User (as shown in ADUC).ĭSQUERY - Search for an active directory object.Active Directory Group Scripts Add 1000 Sample Users to a Security Group “Face the facts of being what you are, for that is what changes what you are” ~ Soren KierkegaardĬomputerInfo.vbs - List properties of a Computer (as shown in ADUC). SComputerName = objRecordSet.Fields('Name') ObjCmd.Properties('Cache Results') = False

ObjCmd.Properties('Searchscope') = ADS_SCOPE_SUBTREE 'objCmd.CommandText = 'SELECT Name, ADsPath FROM '' & strTarget & '' WHERE objectCategory = 'group'' 'objCmd.CommandText = 'SELECT Name, ADsPath FROM '' & strTarget & '' WHERE objectCategory = 'user'' ObjCmd.CommandText = 'SELECT Name, ADsPath FROM '' & strTarget & '' WHERE objectCategory = 'computer'' Set objCmd.ActiveConnection = objConnection Set objCmd = CreateObject('ADODB.Command') ObjConnection.Open 'Active Directory Provider' Set objConnection = CreateObject('ADODB.Connection') Wscript.Echo 'Starting search from ' & strTarget StrDNSDomain = objRootDSE.Get('defaultNamingContext') Set objRootDSE = GetObject('LDAP://RootDSE') ' Connect to the LDAP server's root object

Alternative search query strings can be written using the Active Directory Users and Computers (ADUC) GUI. The LDAP query string below can be modified to return different information. Search Active Directory for either Users, Computers or Groups.