code:

---

break on

;
; SCANUSER.K2K
;
; This script enumerates all the user account's in your domain and displays 
; their status (expired, disabled and locked-out)...
;
; To get a hardcopy, pipe the output to a file like this...
;
; kix32c scanuser.k2k $out=filename.ext
;

$padding = "                                          "

if $out
 if exist("$out")
  del "$out"
 endif
 $= redirectoutput("$out")
endif

$domain = getobject("WinNT://@LDOMAIN")

if $domain
 $filter = "user",""
 $domain.filter = $filter
 for each $user in $domain
  $status = ""
  if $user.accountdisabled
   $status = $status + "disabled"
  endif
  if $user.passwordexpired
   if $status
    $status=$status+","
   endif
   $status = "$status"+"expired"
  endif
  if $user.accountlocked
   if $status
    $status=$status+","
   endif
   $status = $status + "locked"
  endif
  if $status
   $username = substr($user.name+$padding,1,32)
   ? "$username $status"
  endif
 next
endif
exit

---

Shawn

*** Important Info

This script runs only on Windows 2000 workstations and servers... but it will enumerate user's in regular old NT4 domains...

Shawn..

[This message has been edited by Shawn (edited 11 April 2001).]

Just "playing" with more of the same and this evolved...

Shawn

I'm looking to write a script that will enumerate the MS Exchange distribution list membership.

Thanks,

------------------
Kyle Shaver, MCSE
kyle_shaver@phoenix.com

Sure thing ... here's an introduction that talks about Exchange 5.5 and ADSI...

Active Directory Service Interfaces Overview

Might want to download the ADSI help files (mid page) from here...

Active Directory Service Interfaces (ADSI) 2.5

In there should be lots of info and examples... might want to also check out MSDN at...

Active Directory Service Interfaces

Shawn.

I have been testing a bit on your script and it works perfectly But I have a bit of a problem...When kix "prints" the username on the screen it only prints the first character!!! I experienced the same thing when I extracted data from a database with kix, anybody know what could be wrong?

By the way, I'm using kix2001

------------------
Cheers....

David

This works on my Win2k box. Are you running Win2K or WinNT with ADSI installed ? Try modifying the print bit like this...

if $status
? $user.name + " $status"
endif

But now that you mention it, I'm surprised that it works for me because I thought we identified this exact problem in an earlier post ?!?!? hmmm, this might be worth investigating.

Shawn.

Im running it on my Win95 box with ADSI installed. But I dont think this is related to ADSI, but to the COM/OLE support in Kix, because I got the same problem when communicating with databases. I tried to output in many different ways, with and without brackets, I also tried outputting to a file, but all with the same result. Shawn, do you have a windows 95 you can test this on?

------------------
Cheers....

David

No, I don't have a Win9x box to test on. I have one at home though, but it's not connected to a network. But I was seeing this problem with IE55 on 9x. I was also getting this error when using ADSI on 2K, but only when embedding OLE assigned variables in a string...

BUG - OLE assigned variables embedded in strings

It would seem that (for some strange reason)this problem is "worse" on 9x !

Shawn.

[This message has been edited by Shawn (edited 18 April 2001).]

code:

---

break on

; This script displays your active directory domain name

$domain = getobject("WinNT://@LDOMAIN")

if $domain

  ?"name=" $domain.name       ; <--- this always worked on NT

  $name = $domain.name        ; <--- assign to variable

  ?"name=$name"               ; <--- this doesn't work ! (as before)

  $name = $domain.name+""     ; <--- do same but add null string !

  ?"domain name=$name"        ; <--- and now it works on NT

endif

exit

---

Shawn.

[This message has been edited by Shawn (edited 19 April 2001).]

I have tried retrieving strings from COM-objects in Win95 and Win98, it always failes, returning only the first character off the string.

I just tried the trick of adding a null string, but this dosn't work for Win9x

Erik

maybe you have a solution for this? Or maybe you can tell us what we are doing wrong?

------------------
Cheers....

David

We recently merged several domains into one and had a problem with WINS that prevented users changing their passwords - I'd like to capture all the lazy ones and force them to change at next logon.

Any other ideas out their?

No - unfortunately (or fortunately, depending on your point of view), one can't fetch the user password in plain-text (can't fetch it encrypted either). This is probably a good thing anyway. The most one can do with these functions is to programmatically set the user's password. Or if running under a non-admin account, set the password if you know the old password.

st