Saturday, June 28, 2008

how do I find old computer accounts in a active directory domain

There is a utility called oldcmp that allows you to do just that. Its and application that can be found from joeware.net:

http://www.joeware.net/freetools/index.htm

Friday, June 27, 2008

Getting a csv output of your active directory domain controller

I first saw a reference to cvsde on techrepublic and then look into it a little further when I learned that the utility ldifde wouldn't export everything.

cvsde is a nice little built in utility that allows you to dump or import a CSV file of the active directory database.

It can be executed simply for exporting the database by:

cvsde -f file.csv this will execute against a the local domain

How do I get a new Windows SID

I have a windows vmware instnace and I need a new SID in order to join the domain.

I've found that there is a utility from sysinternals.com called NewSID. NewSID can be found at: http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx

nslookup to find a domain controller

How do I find a domain controller using nslookup. I found that the domain controller is an SRV record. See http://support.microsoft.com/kb/816587

But the process is defined as:

nslookup
> set type=all
>_ldap._tcp.dc._msdcs.Domain_Name


It should come back with the list of domain controllers

How to delegate a child domain within Active directory

I was asked to do a child domain delegation recently within active directory. I found a knowledge base article that lays it out for you. Child domain delegation information can be found at: http://support.microsoft.com/kb/255248/

Linux installation freeze with Athlon x2

I had a linux CentOS 5 installation that was freezing right after I hit the enter button after the first splash screen.

I found out that I needed a few kernel arguments in order to make that work:
linux noapic acpi=off nofb

The above turned off acpi which allowed it work like I was expecting.

How do I get a list of all of the distinguished names for an OU

If I have an OU say IT within my domain sample.com. Making use of dsquery to get all of the OU you need to make use of. Using the following command will exceed the limit to 100,000 and only give you the distinguished name.

dsquery user OU=Sales,DC=Microsoft,DC=Com -o dn -limit 100000

userAccountControl track if a user has been disalbed from ldap

I was asked recently how to track from ldap if a user account has been disabled. I found this knowledge base article: http://support.microsoft.com/kb/305144

Using this and the cvsde is very helpful