FindExpAcc V01.01.00cpp Joe Richards (joe@joeware.net) June 2005
Usage:
FindExpAcc [switches]
Switches: (designated by - or /)
-dsq DSQuery style quoted output
-h host Host to use. (Default is to autofind DC)
-s scope Scope of search. OneLevel, Subtree. (Default Subtree)
-b basedn RFC 1779 DN to start search at (Default domain root)
-f filter RFC 2254 LDAP filter (Default is confusing :)
-af addon RFC 2254 LDAP filter to add to builtin filter
-bit Bitwise operator filter conversion enable
:AND:= converts to :1.2.840.113556.1.4.803:=
:OR:= converts to :1.2.840.113556.1.4.804:=
-ps size Page size. (Default 100)
-t xxx Timeout value in seconds. (Default 300 seconds)
-excldn xx Exclude objects with given string in DN. Multiple
strings delimted by semi-colon (;).
-excldndelim x Specify a delimiter for -excldn, default is (;).
-nolc Do not normalize machine names to lc - RAW Case
-outdelim x Delimiter for output, default is (,).
-pwd Password expiration instead of account expiration.
-days x Best effort look into future by x days, I call
this best effort because it is # of days * 24 hours
look ahead, it doesn't go to the beginning of the
specified day.
-skipforced Use with -pwd to skip accounts forced expired.
Notes:
As of version V1.01.00 I have added expireDays to the CSV
output. This tells you how long before an account is expired
so it is easier for scripts. If the value is negative, that
is how many days the account has been expired. If it is positive
that is how many days before it will expire.
Ex1:
findexpacc
Find all currently expired accounts in default domain on default DC.
Ex2:
findexpacc -h servername
Find all currently expired accounts on specified DC.
Ex3:
findexpacc -excldn ou=testou
Find all currently expired accounts on default DC excluding any
with ou=testou in DN.
Ex4:
findexpacc -dsq
Find all currently expired accounts on default DC, output only
quoted DNs.
This software is Freeware. Use it as you wish at your own risk.
If you have improvement ideas, bugs, or just wish to say Hi, I
receive email 24x7 and read it in a semi-regular timeframe.
You can usually find me at joe@joeware.net