Any danger in using CSVDE in export mode?

Hello,

Need some advice and reassurance please.

I have to export, every day, some attributes of all the user accounts
in our W2K3 AD. I'm using an ordinary user account, not one with admin
rights to run the export job. I intend to schedule it.

Is there any danger doing this?

Already exported a couple of OUs as a test without any problems, now I
want to export the entire AD. Sorry but I'm paranoid - and a contract
worker.

Thanks,

- Alan.

Hello Alan,

You will not remove them from AD, if you mean this as you already saw. Maybe
you can make some performance test depending on the hardware of the server
where you connect to, to see if it slow down. So you can schedule this to
non-working hours.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> Need some advice and reassurance please.
>
> I have to export, every day, some attributes of all the user accounts
> in our W2K3 AD. I'm using an ordinary user account, not one with admin
> rights to run the export job. I intend to schedule it.
>
> Is there any danger doing this?
>
> Already exported a couple of OUs as a test without any problems, now I
> want to export the entire AD. Sorry but I'm paranoid - and a contract
> worker.
>
> Thanks,
>
> - Alan.
>

Hi Meinof,

The performane part doesn't worry me because we have 5-6 domain
controllers for about 4000 users.

Yes, I'm worried that I could somehow damage the objects that I export
or even AD itself. Is that possible using a non-admin account and
exporting only?

Thanks,

- Alan.

On Nov 15, 8:34*pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
wrote:
> Hello Alan,
>
> You will not remove them from AD, if you mean this as you already saw. Maybe
> you can make some performance test depending on the hardware of the server
> where you connect to, to see if it slow down. So you can schedule this to
> non-working hours.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello,
>
> > Need some advice and reassurance please.
>
> > I have to export, every day, some attributes of all the user accounts
> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> > rights to run the export job. I intend to schedule it.
>
> > Is there any danger doing this?
>
> > Already exported a couple of OUs as a test without any problems, now I
> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> > worker.
>
> > Thanks,
>
> > - Alan.

No danger. This is done all the time.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

"Alan" <bruguy@gmail.com> wrote in message
news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.com...
Hi Meinof,

The performane part doesn't worry me because we have 5-6 domain
controllers for about 4000 users.

Yes, I'm worried that I could somehow damage the objects that I export
or even AD itself. Is that possible using a non-admin account and
exporting only?

Thanks,

- Alan.

On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
wrote:
> Hello Alan,
>
> You will not remove them from AD, if you mean this as you already saw.
> Maybe
> you can make some performance test depending on the hardware of the server
> where you connect to, to see if it slow down. So you can schedule this to
> non-working hours.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello,
>
> > Need some advice and reassurance please.
>
> > I have to export, every day, some attributes of all the user accounts
> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> > rights to run the export job. I intend to schedule it.
>
> > Is there any danger doing this?
>
> > Already exported a couple of OUs as a test without any problems, now I
> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> > worker.
>
> > Thanks,
>
> > - Alan.

Alan,
assuming that you haven't modified default AD permissions granted to
Authenticated Users, you should be able to perform the export using a
non-privileged account - but as Richard and Meinolf have stated, no damage
is to be expected...

hth
Marcin

"Alan" <bruguy@gmail.com> wrote in message
news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.com...
Hi Meinof,

The performane part doesn't worry me because we have 5-6 domain
controllers for about 4000 users.

Yes, I'm worried that I could somehow damage the objects that I export
or even AD itself. Is that possible using a non-admin account and
exporting only?

Thanks,

- Alan.

On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
wrote:
> Hello Alan,
>
> You will not remove them from AD, if you mean this as you already saw.
> Maybe
> you can make some performance test depending on the hardware of the server
> where you connect to, to see if it slow down. So you can schedule this to
> non-working hours.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello,
>
> > Need some advice and reassurance please.
>
> > I have to export, every day, some attributes of all the user accounts
> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> > rights to run the export job. I intend to schedule it.
>
> > Is there any danger doing this?
>
> > Already exported a couple of OUs as a test without any problems, now I
> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> > worker.
>
> > Thanks,
>
> > - Alan.

There is little, if any, risk in doing this.

However, bear in mind that the limited user account may not be able to view
all user objects, depending on the security configuration of the
domain/forest. It is generally good practice to hide the Administrator and
privileged accounts in an OU with Deny Read access to normal users.

Dave

"Alan" <bruguy@gmail.com> wrote in message
news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.com...
> Hi Meinof,
>
> The performane part doesn't worry me because we have 5-6 domain
> controllers for about 4000 users.
>
> Yes, I'm worried that I could somehow damage the objects that I export
> or even AD itself. Is that possible using a non-admin account and
> exporting only?
>
> Thanks,
>
> - Alan.
>
> On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
> wrote:
>> Hello Alan,
>>
>> You will not remove them from AD, if you mean this as you already saw.
>> Maybe
>> you can make some performance test depending on the hardware of the
>> server
>> where you connect to, to see if it slow down. So you can schedule this to
>> non-working hours.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>> > Hello,
>>
>> > Need some advice and reassurance please.
>>
>> > I have to export, every day, some attributes of all the user accounts
>> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
>> > rights to run the export job. I intend to schedule it.
>>
>> > Is there any danger doing this?
>>
>> > Already exported a couple of OUs as a test without any problems, now I
>> > want to export the entire AD. Sorry but I'm paranoid - and a contract
>> > worker.
>>
>> > Thanks,
>>
>> > - Alan.
>

Thanks to all for the reassurance. Much appreciated!


On Nov 16, 1:05*am, "Dave Blackshaw" <daverav...@hotmail.com> wrote:
> There is little, if any, risk in doing this.
>
> However, bear in mind that the limited user account may not be able to view
> all user objects, depending on the security configuration of the
> domain/forest. *It is generally good practice to hide the Administratorand
> privileged accounts in an OU with Deny Read access to normal users.
>
> Dave
>
> "Alan" <bru...@gmail.com> wrote in message
>
> news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.com...
>
> > Hi Meinof,
>
> > The performane part doesn't worry me because we have 5-6 domain
> > controllers for about 4000 users.
>
> > Yes, I'm worried that I could somehow damage the objects that I export
> > or even AD itself. Is that possible using a non-admin account and
> > exporting only?
>
> > Thanks,
>
> > - Alan.
>
> > On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
> > wrote:
> >> Hello Alan,
>
> >> You will not remove them from AD, if you mean this as you already saw.
> >> Maybe
> >> you can make some performance test depending on the hardware of the
> >> server
> >> where you connect to, to see if it slow down. So you can schedule thisto
> >> non-working hours.
>
> >> Best regards
>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> >> > Hello,
>
> >> > Need some advice and reassurance please.
>
> >> > I have to export, every day, some attributes of all the user accounts
> >> > in our W2K3 AD. I'm using an ordinary user account, not one with admin
> >> > rights to run the export job. I intend to schedule it.
>
> >> > Is there any danger doing this?
>
> >> > Already exported a couple of OUs as a test without any problems, nowI
> >> > want to export the entire AD. Sorry but I'm paranoid - and a contract
> >> > worker.
>
> >> > Thanks,
>
> >> > - Alan.
>
>

Hello Alan,

You're welcome.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks to all for the reassurance. Much appreciated!
>
> On Nov 16, 1:05 am, "Dave Blackshaw" <daverav...@hotmail.com> wrote:
>
>> There is little, if any, risk in doing this.
>>
>> However, bear in mind that the limited user account may not be able
>> to view all user objects, depending on the security configuration of
>> the domain/forest. It is generally good practice to hide the
>> Administrator and privileged accounts in an OU with Deny Read access
>> to normal users.
>>
>> Dave
>>
>> "Alan" <bru...@gmail.com> wrote in message
>>
>> news:c2cc8a5a-3677-4031-bd3e-7a88d0ba052a@g27g2000yqn.googlegroups.co
>> m...
>>
>>> Hi Meinof,
>>>
>>> The performane part doesn't worry me because we have 5-6 domain
>>> controllers for about 4000 users.
>>>
>>> Yes, I'm worried that I could somehow damage the objects that I
>>> export or even AD itself. Is that possible using a non-admin account
>>> and exporting only?
>>>
>>> Thanks,
>>>
>>> - Alan.
>>>
>>> On Nov 15, 8:34 pm, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
>>> wrote:
>>>
>>>> Hello Alan,
>>>>
>>>> You will not remove them from AD, if you mean this as you already
>>>> saw.
>>>> Maybe
>>>> you can make some performance test depending on the hardware of the
>>>> server
>>>> where you connect to, to see if it slow down. So you can schedule
>>>> this to
>>>> non-working hours.
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hello,
>>>>>
>>>>> Need some advice and reassurance please.
>>>>>
>>>>> I have to export, every day, some attributes of all the user
>>>>> accounts in our W2K3 AD. I'm using an ordinary user account, not
>>>>> one with admin rights to run the export job. I intend to schedule
>>>>> it.
>>>>>
>>>>> Is there any danger doing this?
>>>>>
>>>>> Already exported a couple of OUs as a test without any problems,
>>>>> now I want to export the entire AD. Sorry but I'm paranoid - and a
>>>>> contract worker.
>>>>>
>>>>> Thanks,
>>>>>
>>>>> - Alan.
>>>>>

This is a read only process.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Alan" <bruguy@gmail.com> wrote in message
news:c0b5cb4d-2d50-421e-8331-db2479f20005@37g2000yqm.googlegroups.com...
> Hello,
>
> Need some advice and reassurance please.
>
> I have to export, every day, some attributes of all the user accounts
> in our W2K3 AD. I'm using an ordinary user account, not one with admin
> rights to run the export job. I intend to schedule it.
>
> Is there any danger doing this?
>
> Already exported a couple of OUs as a test without any problems, now I
> want to export the entire AD. Sorry but I'm paranoid - and a contract
> worker.
>
> Thanks,
>
> - Alan.
>