windows - Active Directory - a script to find all users that aren't in a set of groups? -


I have a set of 10 AD groups, what I need is to programmatically find out who is in the AD domain The user is not a member of those 10 groups. There is only one domain, I know that it is possible to do ADO SQL queries in VBSSP, but I was thinking (if there is a canned script).

I think the way a hack can be:

  1. dump all users to 10 groups
  2. dump all users to the domain
  3. Play a windfill on 2 dumps

Any ideas?

  (& amp; (object category = person) ( & Amp; (Member! = = CN = Group 1, DC = Company, DC = Local) (! MemberOf = CN = Group2, DC = Company, DC = Local) (! MemberOff = CN = Group3, DC = Company , DC = Local)))  

Comments

Popular posts from this blog

python - Overriding the save method in Django ModelForm -

html - CSS autoheight, but fit content to height of div -

qt - How to prevent QAudioInput from automatically boosting the master volume to 100%? -