Comments on: Active Directory Saved Queries Templates

By: Dmitry

Dmitry — Fri, 25 Nov 2011 10:57:50 +0000

Greeting AD Developer!
Thanks a lot for current article! I have one more issue. It is required the following:
Find all accounts in AD which have no changed their passwords more thank 6 months for example.
Many thanks.

By: Andre

Andre — Mon, 04 Jul 2011 12:51:59 +0000

Thanks ..
Verry good list.

Adding mine
SQL Servers (running on Windows 2003) (please verify in your environment)
(&(objectCategory=computer)(servicePrincipalName=MSSQLSvc*)(operatingSystem=Windows Server 2003))

SQL Servers any Windows Server OS
(&(objectCategory=computer)(servicePrincipalName=MSSQLSvc*)(operatingSystem=Windows Server*))

Exchange Servers (running on Windows 2003) (please verify in your environment)
(&(objectCategory=computer)(servicePrincipalName=exchangeMDB*)(operatingSystem=Windows Server 2003))

Exchange Servers any Windows Server OS
(&(objectCategory=computer)(servicePrincipalName=exchangeMDB*)(operatingSystem=Windows Server*))

Windows Vista SP1
(&(objectCategory=computer)(operatingSystem=Windows Vista*)(operatingSystemServicePack=Service Pack 1))

Windows Server 2008 Enterprise
(&(objectCategory=computer)(operatingSystem=Windows Server® 2008 Enterprise)(operatingSystemServicePack=Service Pack 1))

Windows Server 2008 (all versions)
(&(objectCategory=computer)(operatingSystem=Windows Server® 2008*))

By: Mali Levi

Mali Levi — Mon, 04 Jul 2011 12:49:32 +0000

Adding few more

2008 Servers – Domain Controler quiery
(&(&(&(&(primaryGroupID=516)(objectCategory=computer)(operatingSystem=Windows Server* 2008*)))))

Disabled Computer Acounts

(&(&(objectCategory=computer)(userAccountControl:1.2.840.113556.1.4.803:=2)))

Enabled Computer Acounts

(&(&(&(objectCategory=computer)(!userAccountControl:1.2.840.113556.1.4.803:=2))))

By: Bryce

Bryce — Thu, 20 Aug 2009 14:06:25 +0000

Very helpful list! Here are some others i use often:

List all Distribution Groups
(&(|(&(objectCategory=Group)(objectClass=Group)(|(groupType=8)(groupType=4)(groupType=2)))(objectCategory=ms-Exch-Dynamic-Distribution-List)(objectClass=msExchDynamicDistributionList)))

List all Security Groups (my security Groups have the “sec-” prefix convention, many other people use this is something similarly identifiable).
(&(objectCategory=group)(name=sec-*))

By: Find Email in Active Directory Domain | www.kreslavsky.com

Find Email in Active Directory Domain | www.kreslavsky.com — Mon, 16 Mar 2009 10:31:20 +0000

[...] 2008 by Gil Kreslavsky Discuss this article » In windows 2003 and later you can use AD saved queries , but for windows 2000 domain the only way is by using CSVDE/LDIFDE The following command should do [...]

By: SharePoint Blog - René Hézser

SharePoint Blog - René Hézser — Mon, 16 Mar 2009 07:33:29 +0000

Apply a LDAP Filter for User Profile Import…

With MOSS (Microsoft Office SharePoint Server 2007) you c ……

By: Gil Kreslavsky

Gil Kreslavsky — Tue, 10 Mar 2009 16:55:58 +0000

Rainer,
Thank you for the fix

By: Rainer

Rainer — Tue, 10 Mar 2009 16:06:08 +0000

Finds all disabled accounts in active directory
(objectCategory=person)(objectClass=user)(!useraccountcontrol:1.2.840.113556.1.4.803:=2)

Above is not working (finds all except disabled). It should be:

(&(objectCategory=person)(objectClass=user)(useraccountcontrol:1.2.840.113556.1.4.803:=2))

By: Rainer

Rainer — Tue, 10 Mar 2009 16:03:13 +0000

Find all Server 2008
(&(&(&(&(samAccountType=805306369)(!(primaryGroupId=516)))(objectCategory=computer)(operatingSystem=Windows Server 2008*))))

Above does not find any Windows 2008 Servers. This does:

(&(&(&(&(&(samAccountType=805306369)(!(primaryGroupId=516)))(objectCategory=computer)(operatingSystem=Windows Server* 2008*)))))