Custom Search

---

---

Guy recommends:
Free network monitor

Solarwinds' free monitor makes it easy to check the performance and health of a router or firewall.

Download your free Network Device Monitor

---

---

Guy's Review of
Computer Utilities

 1) FreePing
 2) Engineer's Toolset
 3) Xobni
 4) PuTTY
 5) WMI Monitor
 6) BgInfo
 7) Net-SNMP
 8) IP Address Tracker
 9) DNS Stuff
10) WinDiff Compare

VBScript -  Use ADSI to Discover LDAP Properties

ADSI (Active Directory Service Interfaces)

LDAP is a language that enables Active Directory to find, create and manipulate objects.  ADSI Edit will let you examine a user's properties and display all the LDAP properties.  Through knowing the property names, you can bulk import users from a spreadsheet using a rich selection of LDAP attributes.  The trick is getting the correct fields in the first row or header of your import file.

I have added a whole detailed section on ADSI Edit here

Example of ADSI

My tactic is to find a user in ADSI edit, for example Guy Thomas. Then I was able to match the user's properties in Active Directory Users and Computers (See here) with the LDAP attributes [Right Diagram]

LDAP Properties

For more detail, right click a user and select properties, here [below] are two examples:

The mandatory objects are worth noting

You may wish to drill down one more layer.  Here is a view of the LDAP attributes for the important DN = distinguishedName.  If it were necessary you could use ADSI Edit to actually make changes to the LDAP names.

Guy Recommends: Permissions Analyzer - Free Active Directory Tool

I like the Permissions Monitor because it enables me to see quickly WHO has permissions to do WHAT.  When you launch this tool it analyzes a users effective NTFS permissions for a specific file or folder, takes into account network share access, then displays the results in a nifty desktop dashboard!

Think of all the frustration that this free utility saves when you are troubleshooting authorization problems for users access to a resource.

Download Permissions Analyser - Free Active Directory Tool

Where Do You Get ADSI Edit?

When ever you discover a useful utility such as ADSI Edit, always make a note of where it comes from.  The best place to get ADSI Edit is from the support folder of the Windows Server 2003/8 CD.  You can also find the executable in many of Microsoft's Resource Kits.  Failing all else you can download ADSI Edit here

What Do You Need to Run ADSI Edit

You need very little to get started with ADSI Edit.  I love the MMC (Microsoft Management Console), so I just add ADSI Edit as extra Snap-in to my console.  Here is a sure way to launch ADSI Edit, Start, run MMC.  File (Menu) Add Remove Snap-in, ADSI Edit.

Once ADSI Edit launches you need to decide on the Naming Context.  For scripting, and Active Directory Users and Computers properties, you normally select Domain.  However, with TechNet pay close attention as to whether you need the Configuration or Domain naming context.  After a while I expect that you will add both contexts to the snap-in.

See Also

• ADSI Edit
• LDAP Properties
• Getting Started
• VBScript Home

 *

Custom Search

Guy Recommends: WMI Monitor and It's Free! Windows Management Instrumentation (WMI) is one of the hidden treasures of Microsoft operating systems. Fortunately, Solarwinds have created the Free WMI Monitor so that you can actually see and understand these gems of performance information.  Take the guess work out of which WMI counters to use for applications like Microsoft Active Directory, SQL or Exchange Server. Download your free copy of WMI Monitor

Home Copyright © 1999-2012 Computer Performance LTD All rights reserved Please report a broken link, or an error.