AD query

Saytan · 10 Mar 2009 at 10:21

hi

i have a list (in excel format) of a load of my users proper names

any way i can extract their usernames from AD quickly and easily? there are 900 of them!

thanks!

Sin_Chase · 10 Mar 2009 at 10:38

Can you clarify what you want to do.

JUST extract from AD, or extract based on an input? (Your excel sheet)

Saytan · 10 Mar 2009 at 10:50

extract on an input (i want to get the usernames for the proper names)

garylouden · 10 Mar 2009 at 10:54

You could just create a query from an AD console. This could output the user names and the name of the user so you wouldn't have to update your spreadsheet at all.

Burnsy2023 · 10 Mar 2009 at 11:02

If in doubt do some ADSI scripting, this could easily be modified to do what you want: http://www.microsoft.com/technet/scriptcenter/resources/qanda/dec06/hey1201.mspx

Saytan · 10 Mar 2009 at 11:02

garylouden said:
You could just create a query from an AD console. This could output the user names and the name of the user so you wouldn't have to update your spreadsheet at all.

surely this would just dump all the users (for a given OU)?

i want to get a subset of users from several OUs

garylouden · 10 Mar 2009 at 11:04

Saytan said:
surely this would just dump all the users (for a given OU)?

i want to get a subset of users from several OUs

You can select a specific OU from the query builder if you need to. I don't think there is an option to select more than one though.

Sin_Chase · 10 Mar 2009 at 11:15

Can you not just export the entire OU/OUs and delete what you dont want?

If so use csvde:

CSVDE -d "OU=User OU,DC=domain,dc=local" -l "givenName, sn, sAMAccountName" -r "(objectClass=user)" -f export.csv

Will go nicely into your Excel sheet

Saytan · 10 Mar 2009 at 11:16

we're looking for about 900 users from maybe 10000

i've passed the case over to our AD team now anyway - thanks for all your help

chaosophy · 10 Mar 2009 at 13:49

Adfind and a batch file would do it.

As an example we had a load of old NT4 SIDs we wanted to look up against SID history in AD to see what the new AD group was.

just had a list of SIDs in a text file, in your case this would be the users names.

and then...

for /f "delims=" %%A in (%1) do adfind -b "OU=???,DC=???,DC=???,DC=???" -s subtree -f "&(sidhistory=%%A)" cn sidhistory -adcsv | find "," >> %1.sidh2cn.%DATE:/=-%.txt

so for yours, you'd need to change

(sidhistory=%%A)

to search against the users full name, and then the bits after that...

cn sidhistory

are the values you want returned. the

-adcsv

tells it to output the results as csv and then the

>> %1.sidh2cn.%DATE:/=-%.txt

is the results file you are piping out to.