Welcome to MSDN Blogs Sign in | Join | Help

Decrypt my World

Cryptography, Security, Debugging and more!

News

  • Any of my posts is supported under any Microsoft standard support program or service. They are provided "AS IS" without warranty of any kind, and confer no rights.

Where are my readers?

Locations of visitors to this page

Favorite Posts

How to get a list of all users in an OU (VBScript)

Hi all, welcome back,

Today I'll post a very straight forward sample which gets a list of all users in an Organizational Unit (OU) in Active Directory (AD) using VBScript:

' Get OU
'
strOU = "OU=Users,DC=domain,DC=com"

' Create connection to AD
'
Set objConnection = CreateObject("ADODB.Connection")
objConnection.Open "Provider=ADsDSOObject;"

' Create command
'
Set objCommand = CreateObject("ADODB.Command")
objCommand.ActiveConnection = objConnection
objCommand.Properties("Page Size") = 1000

' Execute command to get all users in OU
'
objCommand.CommandText = _
  "<LDAP://" & strOU & ">;" & _
  "(&(objectclass=user)(objectcategory=person));" & _
  "adspath,distinguishedname,sAMAccountName;subtree"
Set objRecordSet = objCommand.Execute

' Show info for each user in OU
'
Do Until objRecordSet.EOF

  ' Show required info for a user
  '  
  WScript.Echo objRecordSet.Fields("adspath").Value
  WScript.Echo objRecordSet.Fields("distinguishedname").Value
  WScript.Echo objRecordSet.Fields("sAMAccountName").Value

  ' Move to the next user
  '
  objRecordSet.MoveNext

Loop

' Clean up
'
objRecordSet.Close
Set objRecordSet = Nothing
Set objCommand = Nothing
objConnection.Close
Set objConnection = Nothing

 

I hope this helps.

Regards,

 

Alex (Alejandro Campos Magencio)

Posted: Wednesday, April 23, 2008 4:44 PM by alejacma
Filed under: ,

Comments

tonyr said:

just curious why your starting these vbscript samples why not powershell?

# April 23, 2008 1:00 PM

alejacma said:

That's a good question... Many, many people are still using VBScript out there. Additionally, PowerShell is not supported on Windows 2000, for instance, and I have many customers using that OS.

But you are right and I should post something on PowerShell. Right now I'm posting real issues or questions that customers raised to me in the past few weeks, and nobody has ever requested a PowerShell sample to me, for instance. So I have none.

I should start offering them PowerShell as an alternative. This way I may get some samples to post ;-)

Thx a lot for your comment! Appreciated!

Cheers,

Alex

# April 23, 2008 1:49 PM

tonyr said:

its true that its not supported on w2k but you don't have to run it on a w2k device run it on xp\vista\2003 against a remote w2k device.. but I do understand what your saying otherwise!

tr

# April 24, 2008 10:13 AM

alejacma said:

And additionally, some customers use these VBScript samples in their ASP applications. Unfortunately for them, not everybody is using ASP.NET yet...

# April 24, 2008 10:42 AM

PWRick said:

Thank you for posting this script I have found it helpful. I do have a question though, I am using this as an ASP script to retrieve the list of users from our Active Directory. I found a listing of AD fields but when I substitue "givenname" or "dispalyname" for "distinguishedname" I get an error "Item cannot be found in the collection corresponding to the requested name or ordinal." Am I using the wrong field names? Thanks

# June 5, 2008 10:34 AM

Yulius said:

Hello Alex this is very usefull script in my thought.

I just want to try your script for test in my LAB.

but i'm not much know about scripting languange, can you tell me what is the outcomes for your script?? it is generated a file (for example txt file)??

Please give me the light for this,

# March 4, 2009 11:44 PM

Yulius said:

o yeah please write me an email, if you dont mind.

my email : lemmy_102@yahoo.com

Thanks

# March 4, 2009 11:45 PM

alejacma said:

The script is just showing the results on the screen.

Cheers,

Alex

# March 5, 2009 2:56 AM

revere said:

Hi, could you help me, This script is very useful for me, but i need to get one more user info such as UserLast Logon Date and Time. When I tried to append this request to the script above, I walked into problems with timestamp format... Thanks in advance for any answer. revere@fjfi.cvut.cz

# March 12, 2009 5:51 AM

alejacma said:

If you want to get LastLogon, check this other post of mine:

How to get LastLogon property for all users in a Domain (VBScript)

http://blogs.msdn.com/alejacma/archive/2009/03/12/how-to-get-lastlogon-property-for-all-users-in-a-domain-vbscript.aspx

I hope this helps.

# March 12, 2009 6:30 AM

revere said:

Many thanks for your answer. All what I need is to get LastLoginInfo (Time and Date) for all users in one OU in Domain. I can't program in VBscript and can't find any relevant tool in Windows 2000/2003. Your script (the first used) doesn't display the LastLogon Value and the second one is working and working, till I'll break it :-)) . Well, I think it's serching for all users in AD ... Thanks

# March 12, 2009 7:49 AM

hsam said:

does the output comes in a txt file ?

# September 24, 2009 2:11 AM

anand said:

script shows all the result in a popup box. how can i get all results in an Excel file or notepad?

my requirements are

1. Group name, (In which the user is member of)

2. Email Id and

3. Userid

please reply to my mail ID: anandmirchi0101@rediffmail.com

# December 29, 2009 2:15 AM

alejacma said:

Anand, if you need help to develop such a script, I suggest you contact Microsoft Technical Support. I'm afraid I cannot create samples on demand...

# December 29, 2009 5:03 AM
Leave a Comment

(required) 

(required) 

(optional)

(required) 

  
Enter Code Here: Required

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Page view tracker