InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comSat, 18 May 2013 02:51:46 GMT20http://www.sqlservercentral.com/Forums/Topic1367893-391-1.aspxThank you for that Randy. It's always good to have the solution for others to find in the future.Mon, 08 Oct 2012 08:14:13 GMTScott D. Jacobsonhttp://www.sqlservercentral.com/Forums/Topic1367893-391-1.aspxI exclude Disabled in a vb script that queries AD.Here’s the check for a user being disabled in AD:(userAccountControl:1.2.840.113556.1.4.803:=2)So to exclude use ([b]![/b]userAccountControl:1.2.840.113556.1.4.803:=2) in the filter:strFilter = "(&(objectCategory=person)[b](!userAccountControl:1.2.840.113556.1.4.803:=2)[/b](objectClass=user)(memberOf=cn=CERUsers,ou=CER,ou=intranet applications,ou=groups,ou=khs,dc=myhouse,dc=org))"From the VB script:[code="plain"]' Open the output file for write access.Set objFile = objFSO.OpenTextFile(strFilePath, 2, True, 0)Set objRootDSE = GetObject("LDAP://RootDSE")strDNSDomain = objRootDSE.Get("defaultNamingContext")Set objCommand = CreateObject("ADODB.Command")Set objConnection = CreateObject("ADODB.Connection")objConnection.Provider = "ADsDSOObject"objConnection.Open "Active Directory Provider","myhouse\mylogin","mypassword"objCommand.ActiveConnection = objConnectionstrBase = "<LDAP://" & strDNSDomain & ">"strFilter = "(&(objectCategory=person)(!userAccountControl:1.2.840.113556.1.4.803:=2)(objectClass=user)(memberOf=cn=Distribution Group Corporate Management,ou=Mail Groups,ou=groups,ou=khs,dc=myhouse,dc=org))" strAttributes = "cn,displayName,mail,title,physicalDeliveryOfficeName"strQuery = strBase & ";" & strFilter & ";" & strAttributes & ";subtree"objCommand.CommandText = strQueryobjCommand.Properties("Page Size") = 100objCommand.Properties("Timeout") = 30objCommand.Properties("Cache Results") = FalseSet objRecordSet = objCommand.Execute[/code]Thu, 04 Oct 2012 13:59:32 GMTRandy Doubhttp://www.sqlservercentral.com/Forums/Topic1367893-391-1.aspxAny chance you can share what the attribute was called? As Lowell mentioned he didn't find anything obvious. I did a quick skim through but the list is quite long.Thu, 04 Oct 2012 08:01:47 GMTScott D. Jacobsonhttp://www.sqlservercentral.com/Forums/Topic1367893-391-1.aspxThanks, that was very helpful.Thu, 04 Oct 2012 06:29:15 GMTkd11http://www.sqlservercentral.com/Forums/Topic1367893-391-1.aspxthis site has the most comprehensive list of attributes you can query that i've ever tripped over:[b][url]http://www.rlmueller.net/UserAttributes.htm[/url][/b]specifically, his excel spreadsheet has a ton of stuff:[b][url]http://www.rlmueller.net/References/Schema.xls[/url][/b]i searched for "locked" and "enabled" and "disabled", and didn't see anything that seemed to me to be specific to a useryou may have a better idea on what to search for than me.Wed, 03 Oct 2012 11:55:21 GMTLowellhttp://www.sqlservercentral.com/Forums/Topic1367893-391-1.aspxI know you can query AD for logins,email,location but if I want to know if the users are active or not, can I pull that as well. I'm not seeing it in the container if so.Wed, 03 Oct 2012 11:39:59 GMTkd11