Nice tool ADfind
Adfind is an extremely flexible and powerful tool for querying AD – if you do a lot of work with AD it’s worth playing around with it and reading through the different help screens (adfind -?, adfind -??, adfind -????, adfind -sc?, adfind meta?) to see all the different things you can do with it. Adfind can only be used to query AD, not to modify it, so it’s quite harmless to just play around with it – there’s virtually ZERO chance of inadvertently breaking anything within your directory just by reading it.
For example I needed to know ow many users in the AD had certificates.
adfind -default -f “(&(objectclass=user)(objectcategory=person)(!userCertificate=*))” -dsq > certs.txt
Use the “-dsq” option to return only the distinguished name (DN) of the objects rather than a full list of all object attributes, and pipe the whole thing to a text file using “> certs.txt”.
Download it here
Hi Wdwin,
Gotta agree with you that AdFind is certainly one of the best FREE Active Directory Reporting tools out there.
I sincerely do hope that PowerShell and Quest’s PowerShell additions don’t diminish its value.
Thanks for sharing your example, and see you around!
Marc