Finding user privileges for users in Active Directory

[sputnik]

Is there a way to find user privileges in Active Directory using a query? For
example, I need to generate a list of users how have dial up privileges.
Thank you.

[George Gibb]

Hi sputnik,

You could do an LDIFDE or CSVDE dump for your user accounts and have it
return the attribute that you are looking for.

http://technet2.microsoft.com/WindowsServer/en/Library/32872283-3722-4d9b-925a-82c516a1ca141033.mspx?mfr=true

If you run into any trouble writing the LDIFDE or CSVDE queries just post
back here and I will give you a hand. Hope this helps
--
George Gibb

Post by sputnik
Is there a way to find user privileges in Active Directory using a query? For
example, I need to generate a list of users how have dial up privileges.
Thank you.
--
sputnik

[Richard Mueller]

Hi,

You can also filter with an LDAP query in ADUC. Click "View", "Filter
Options", check "Create custom filter", click "Customize", click the
"Advanced" tab, and enter an LDAP query. In this case:

(&(objectCategory=person)(objectClass=user)(msNPAllowDialin=TRUE))



This filters on user objects that have the value TRUE (which is case
sensitive) assigned to the msNPAllowDialin attribute. This attribute
correponds to the "Allow access" selection on the "Dial-in" tab of the user
properties dialog of ADUC.



For more on LDAP and ADO queries, see this link:



http://www.rlmueller.net/ADOSearchTips.htm



For documentation on AD attributes, especially for user objects, see this
link:



http://www.rlmueller.net/UserAttributes.htm
--
Richard
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net

Post by George Gibb
Hi sputnik,
You could do an LDIFDE or CSVDE dump for your user accounts and have it
return the attribute that you are looking for.
http://technet2.microsoft.com/WindowsServer/en/Library/32872283-3722-4d9b-925a-82c516a1ca141033.mspx?mfr=true
If you run into any trouble writing the LDIFDE or CSVDE queries just post
back here and I will give you a hand. Hope this helps
--
George Gibb

Post by sputnik
Is there a way to find user privileges in Active Directory using a query? For
example, I need to generate a list of users how have dial up privileges.
Thank you.
--
sputnik