list of all accounts set with no password expiry

HI All,

anyone can help me, i want to retrieve account info from AD for all users.
The info must have account option details.

coz i want to trace which accounts has been set to "password never expires"

Bovver a écrit :
> HI All,
>
> anyone can help me, i want to retrieve account info from AD for all users.
> The info must have account option details.
>
> coz i want to trace which accounts has been set to "password never expires"

Hello,
You can use Adfind from Joeware:
http://www.joeware.net/freetools/tools/adfind/index.htm

adfind -bit -default -f
"(&(objectCategory=person)(objectClass=user)(userAccountControl:AND:=65536))"
(All in one line)

Hi Chateau,

first of all, thanks for your reply
may i know the eg output for the following cmd?
and how to export the output to .csv file.

adfind -bit -default -f
"(&(objectCategory=person)(objectClass=user)(userAccountControl:AND:=65536))"

Thanks a lot

"Mathieu CHATEAU" wrote:

> Bovver a écrit :
> > HI All,
> >
> > anyone can help me, i want to retrieve account info from AD for all users.
> > The info must have account option details.
> >
> > coz i want to trace which accounts has been set to "password never expires"
>
> Hello,
> You can use Adfind from Joeware:
> http://www.joeware.net/freetools/tools/adfind/index.htm
>
> adfind -bit -default -f
> "(&(objectCategory=person)(objectClass=user)(userAccountControl:AND:=65536))"
> (All in one line)
>
>
>

Howdie!

Bovver wrote:
> Hi Chateau,
>
> first of all, thanks for your reply
> may i know the eg output for the following cmd?
> and how to export the output to .csv file.
>
> adfind -bit -default -f
> "(&(objectCategory=person)(objectClass=user)(userAccountControl:AND:=65536))"

Have you downloaded adfind already? It has a good help when called with
adfind -??

This should output a myfile.txt file with a csv file with all users:

ADFIND -bit -default -f
"(&(objectCategory=person)(objectClass=user)(userAccountControl:AND:=65536))"
-csv myfile.txt

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

ADFIND -default -f
"(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=65536))"
-dn
OR
ADFIND -default -f
"(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=65536))"
sAMAccountName


OR

ADFIND -bit -default -f
"(&(objectCategory=person)(objectClass=user)(userAccountControl:AND:=65536))"
-dn
OR
ADFIND -bit -default -f
"(&(objectCategory=person)(objectClass=user)(userAccountControl:AND:=65536))"
sAMAccountName

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Bovver" <Bovver@discussions.microsoft.com> wrote in message
news:B2FCB10A-F764-4A90-9F1F-7235308EB5D8@microsoft.com...
> HI All,
>
> anyone can help me, i want to retrieve account info from AD for all users.
> The info must have account option details.
>
> coz i want to trace which accounts has been set to "password never
> expires"