VBScript: List AD group members

July 19, 2014 Mike Hudson Leave a comment

Managing large ActiveDirectory estates can often be a challenge, especially when you have a large group of AD administrators controlling group access.. This nifty little VBScript can be used to enumerate all the members of an AD Group. Handy for regular maintenance tasks.

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-type" content="text/html; charset=utf-8">
    <title>Server Error &middot; Gist</title>
    <style type="text/css" media="screen">
      body {
        background: #f1f1f1;
        font-family: "HelveticaNeue-Light", Helvetica, Arial, sans-serif;
        text-rendering: optimizeLegibility;
        -webkit-font-smoothing: antialiased; }

      .container { margin: 100px auto; width: 600px; text-align: center; }

      a { color: #4183c4; text-decoration: none; }
      a:visited { color: #4183c4 }
      a:hover { text-decoration: none; }

      h1 { letter-spacing: -1px; line-height: 60px; font-size: 60px; font-weight: 100; margin: 0px; text-shadow: 0 1px 0 #fff; }
      p { color: rgba(0, 0, 0, 0.5); margin: 20px 0 40px; }

      ul { border-top: 1px solid #ccc; list-style: none; margin: 20px 0; padding: 20px 0; }
      li { display: table-cell; font-weight: bold; width: 1%; }
    </style>
  </head>
  <body>
    <div class="container">
      <h1>OH NOES, 404.</h1>
      <p>We seem to have missed the <em>gist</em> of that <em>gist</em> you were looking for.</p>
      <ul id="error-suggestions">
          <li><a href="https://github.com/contact">Contact Support</a></li>
          <li><a href="https://status.github.com">Status Site</a></li>
          <li><a href="https://twitter.com/github">@github</a></li>
      </ul>
      <p><img src="https://github.s3.amazonaws.com/media/maint-logo.png" alt="GitHub"></p>
    </div>
  </body>
</html>

This VBScript could easily be adapted to out put the list to a file, or even embedded inside a larger application which performs automated maintenance tasks.

Traverse disabled AD Accounts – VBScript

June 21, 2011May 18, 2014 Mike Hudson Leave a comment

Active directory can be a bit of a beast if not managed and maintained correctly. Using this code in a .vbs file you can output all currently disabled accounts.

You may want to expand this by using the file system object to output to a file?

Const ADS_UF_ACCOUNTDISABLE = 2
 
Set objConnection = CreateObject("ADODB.Connection")
objConnection.Open "Provider=ADsDSOObject;"
Set objCommand = CreateObject("ADODB.Command")
objCommand.ActiveConnection = objConnection
objCommand.CommandText = _
    "<gc: //dc=yourdomain,dc=com>;(objectCategory=User)" & _
        ";userAccountControl,distinguishedName;subtree"  
Set objRecordSet = objCommand.Execute
 
intCounter = 0
Do Until objRecordset.EOF
</gc:>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

Const ADS_UF_ACCOUNTDISABLE = 2

Set objConnection = CreateObject("ADODB.Connection")

objConnection.Open "Provider=ADsDSOObject;"

Set objCommand = CreateObject("ADODB.Command")

objCommand.ActiveConnection = objConnection

objCommand.CommandText = _

"<gc: //dc=yourdomain,dc=com>;(objectCategory=User)" & _

";userAccountControl,distinguishedName;subtree"

Set objRecordSet = objCommand.Execute

intCounter = 0

Do Until objRecordset.EOF

</gc:>