|
Sujet : [AD] Liste des comptes verrouillés |
| c_moa |
Avec un p'tit script VBS
( source : Technet de Microsoft : script center )
Locating All the Disabled User Accounts in Active Directory
Description
Returns a list of all disabled user accounts in the fabrikam.com domain.
For more information about searching Active Directory, click here.
Supported Platforms
Windows Server 2003 Yes
Windows XP Yes
Windows 2000 Yes
Windows NT 4.0 Yes, with Active Directory Client Extensions installed
Windows 98 Yes, with Active Directory Client Extensions installed
Script Code
Citation :
Const ADS_UF_ACCOUNTDISABLE = 2
Set objConnection = CreateObject("ADODB.Connection" )
objConnection.Open "Provider=ADsDSOObject;"
Set objCommand = CreateObject("ADODB.Command" )
objCommand.ActiveConnection = objConnection
objCommand.CommandText = _
"<GC://dc=fabrikam,dc=com>;(objectCategory=User)" & ";userAccountControl,distinguishedName;subtree"
Set objRecordSet = objCommand.Execute
intCounter = 0
While Not objRecordset.EOF
intUAC=objRecordset.Fields("userAccountControl" )
If intUAC AND ADS_UF_ACCOUNTDISABLE Then
WScript.echo objRecordset.Fields("distinguishedName" ) & " is disabled"
intCounter = intCounter + 1
End If
objRecordset.MoveNext
Wend
WScript.Echo VbCrLf & "A total of " & intCounter & " accounts are disabled."
objConnection.Close
|
|
